Privacy policy

The Châtelain Orthopaedic Centre attaches great importance to the protection of your privacy. This policy explains which personal data we collect via the website orthochatelain.com, why we process them, how long we keep them and what rights you can exercise. It is drawn up in accordance with Regulation (EU) 2016/679 (GDPR) and the Belgian law of 30 July 2018 on the protection of natural persons with regard to the processing of personal data.

Data controller

Châtelain Orthopaedic Centre
21 Rue du Mail, 1050 Ixelles, Brussels, Belgium
Email: contact@orthochatelain.com

This policy covers the website only. The medical file compiled during a consultation remains the responsibility of the practitioner treating you, within the scope of their professional obligations and medical confidentiality.

What data we collect

When you write to us via the contact form: your first name, your surname, your email address, your telephone number if you provide it, the subject and the content of your message.

When browsing the site: technical data such as your IP address, your browser type and version, the pages visited and the duration of the visit, as well as the identifiers of the cookies you have accepted.

We do not create any user accounts and never ask for banking details on this site.

An important precaution regarding your health data

The contact form is not a secure medical channel. We invite you to do not detail your medical situation there, your medical history, examinations or treatments. Simply state the purpose of your request. Medical questions are handled during a consultation with the relevant practitioner.

If you nevertheless choose to mention health-related elements in your message, this information is processed on the basis of your explicit consent, within the meaning of Article 9.2(a) of the GDPR, with the same confidentiality as the rest of our communications.

Why we process this data

Answering your request sent via the form or by email. Legal basis: your request itself, i.e. the execution of pre-contractual measures, and our legitimate interest in replying to you.
Organise the care and direct you to the appropriate practitioner. Legal basis: the performance of the care contract and our legal obligations as healthcare professionals.
Ensure the operation and security of the site, prevent abuse and intrusion attempts. Legal basis: our legitimate interest.
Measure website traffic, if you have given your consent via the cookie banner. Legal basis: your consent, which you can withdraw at any time.

Online booking

The «Book an appointment» buttons redirect you to Rose (rosa.be), the platform used by our practitioners. As soon as you leave our site, the data you enter is processed by Rosa, which acts as a controller for its own processing. We advise you to consult Rosa's privacy policy before booking an appointment.

Who has access to your data

Your data is neither sold, nor rented, nor exchanged. It is accessible:

as well as to the staff at the centre authorised to process your request, and to the practitioner concerned; ;
to our technical service providers, who act as processors within the meaning of Article 28 of the GDPR and are bound by contract: OVH for the website hosting, Postmark for the routing of emails sent by the website, Google Workspace for our business messaging, and Hungry Nuggets for the technical maintenance of the website; ;
to public authorities, only when required by law to do so.

Transfers outside the European Union

The site and its database are hosted in Europe. Some of our email service providers may operate servers outside the European Economic Area. These transfers are governed by the safeguards provided for by the GDPR, notably the European Commission's standard contractual clauses or an adequacy decision.

How long we keep them

Messages sent via the contact form retained for up to three years after our last exchange, then deleted. They are stored both in our inbox and in the website's database.
Browsing data and cookies : thirteen months at most, as detailed in our Cookie policy.
Medical record compiled during consultation thirty years from the last contact, in accordance with Belgian legislation on patient rights. This file is kept by your practitioner, outside of this site.

Security

The site is served exclusively via HTTPS. We implement proportionate technical and organisational measures to protect your data: restricted and named access, regular updates, encrypted backups hosted separately, and intrusion attempt monitoring.

Your rights

You have the following rights regarding your data at any time:

the right to access your data and obtain a copy of it; ;
the right to have inaccurate or incomplete data rectified; ;
the right to obtain the erasure of your data, except where the law requires us to retain it; ;
the right to request the restriction of processing; ;
the right to object to processing based on our legitimate interests; ;
the right to data portability of the data you have provided to us; ;
the right to withdraw your consent at any time, without affecting the lawfulness of processing based on consent before its withdrawal.

To exercise any of these rights, write to contact@orthochatelain.com. We may need to verify your identity before responding, in order to avoid disclosing your data to a third party. We will reply to you within one month.

Complaint

If you consider that the processing of your data is not compliant, you can lodge a complaint with the Belgian supervisory authority:

Data protection authority
Rue de la Presse 35, 1000 Brussels
Telephone: +32 (0)2 274 48 00
www.autoriteprotectiondonnees.be

Update to this policy

This policy may change with the site, our services or regulations. The date below indicates the version currently in force.

Last updated: 9 September 2026.