Wijs Privacy Statement

Version: October 2026

At Wijs, we handle your personal data with care. In this privacy statement, you can read what data we process, why we process it, how long we retain it, and what rights you have. We comply with the General Data Protection Regulation (GDPR) and, with regard to your medical data, the Medical Treatment Contracts Act (WGBO).

Who is responsible?

For physiotherapy services at our West and Noord locations, T2move B.V., trading under the name Wijs, is the data controller. For gym activities (memberships, personal training, group classes and Pilates), the data controller is T2move B.V. at the West location and Wijs Noord B.V. at the Noord location.

Contact: info@wijs.fit

Wijs West: Tweede Hugo de Grootstraat 45A, 1052 LB Amsterdam

Wijs Noord: Bercylaan 807A, 1031 KP Amsterdam

What data do we process?

For physiotherapy:

  • Your name, address, date of birth, gender, telephone number and email address
  • Your citizen service number (BSN) and health insurance details, which we are legally required to collect
  • Information about your health, symptoms, examinations, treatment and progress, including clinical measurement tools (clinical metrics)
  • Information from your GP or referring healthcare professional

For gym activities:

  • Your name, contact details and date of birth
  • Information about your membership, payments and bookings
  • Access data associated with your wristband

Why do we use your data?

  • To provide you with appropriate treatment and maintain your medical records. This is a legal obligation under the Medical Treatment Contracts Act (WGBO).
  • To handle financial matters, including submitting claims to your health insurer or invoicing you directly.
  • To manage appointments and bookings and communicate with you.
  • To monitor and improve the quality of our care, as described below.

Data for quality assurance and research

We are affiliated with the Keurmerk Fysiotherapie quality certification scheme. As part of this affiliation, we submit data from your treatment records to the National Quality Certification Database (Landelijke Database Keurmerk, or LDK).

This data is pseudonymised, meaning that your name, address and BSN are removed so that the data cannot be directly linked to you as an individual. The data is used to measure and improve the quality of physiotherapy, provide accountability to health insurers, and conduct scientific research.

You have the right to object to this use of your data. You may do so at any time, without giving a reason, by informing your physiotherapist or emailing info@wijs.fit. We will record your objection in your medical file and will not submit your data. Your objection will not affect your treatment.

After your treatment has ended, we may ask you to complete a questionnaire about your experience (customer satisfaction survey). Participation is voluntary. This survey is conducted by [insert name of research agency].

At the start of your initial assessment, your physiotherapist will also explain verbally how your data is used.

With whom do we share your data?

We only share your data when necessary for your care, when required by law, or when you have given your consent:

  • With your GP or referring healthcare professional, for example, by sharing a treatment report
  • With other healthcare professionals, only when necessary for your treatment
  • With your health insurer, for the purpose of submitting claims
  • In pseudonymised form with the National Quality Certification Database (LDK), unless you object

We work with service providers that process data on our behalf, such as our electronic patient record system (Fysiomanager), our booking and membership management system (Trainin), and our website administrator. We have agreements with these providers regarding data security and confidentiality.

We never sell your data to third parties.

How long do we retain your data?

  • Medical records: 20 years after your last treatment, as required by the WGBO, or longer if necessary to provide appropriate care.
  • Financial records: 7 years, as required by tax retention regulations.
  • Gym membership data: Up to 2 years after your membership ends, excluding financial records.

Security

We take appropriate measures to protect your data against loss and unauthorised access. Only employees involved in your care have access to your medical records, and all such employees are bound by a duty of confidentiality.

If a data breach occurs, we will report it to the Dutch Data Protection Authority (Autoriteit Persoonsgegevens) where required and inform you accordingly.

Your rights

You have the right to:

  • Access your medical records and receive a digital or paper copy free of charge
  • Have inaccurate data corrected or incomplete data supplemented
  • Add your own statement to your medical records
  • Request the destruction of all or part of your medical records, unless a legal retention obligation or the substantial interests of another person prevent this
  • Object to the use of your data for quality assurance and research
  • Find out who has accessed your medical records
  • Have your data transferred to another healthcare provider

You can submit your request verbally or by emailing info@wijs.fit. We will respond within one month. We may ask you to verify your identity when submitting a request.

Cookies

Our website uses cookies. For more information, please refer to our cookie policy.

Questions or complaints

If you have any questions about your privacy, please contact us at info@wijs.fit.

If you are dissatisfied with how we handle your data, you may use our complaints procedure. You also always have the right to lodge a complaint with the Dutch Data Protection Authority (Autoriteit Persoonsgegevens) at autoriteitpersoonsgegevens.nl.

We may amend this privacy statement from time to time. The latest version is always available at wijs.fit.