Last updated: July 2026
Fysiotherapie Wennekers values the protection of your personal data. In this policy we explain which data we process, for what purpose, on what legal basis, how long we retain it and what rights you have.
Fysiotherapie Wennekers, located at Vrijheidslaan 49, 2321 JR Leiden, is the data controller within the meaning of the General Data Protection Regulation (GDPR). For questions or requests, please contact us at the email address at the bottom of this page.
When you fill in our contact form, we process your name, email address, phone number (optional) and your message. This data is used solely to answer your query and is not stored in a database. We forward the message by email and do not retain it beyond what is needed to handle your request.
When you request an appointment through our website, we process the following data: first name, last name, date of birth, phone number, email address, postcode, supplementary insurance (yes/no), reason for visit, and the requested time. This data is temporarily retained to schedule and confirm your appointment, and is automatically deleted after 30 days. The legal basis for this processing is the performance of a (pre-contractual) agreement.
On the appointment form we use Cloudflare Turnstile to verify that a request comes from a human visitor. Cloudflare processes technical data such as IP address and browser information for this purpose and may place a functional cookie. For more information, please refer to Cloudflare's privacy policy.
We use Vercel Analytics for limited, privacy-friendly website statistics. No cookies are placed and no personal data is stored.
Contact form messages: not stored after sending. Appointment data: 30 days after creation, then automatically deleted.
Under the GDPR you have the following rights: the right to access your data, the right to rectification of inaccurate data, the right to erasure ('right to be forgotten'), the right to restriction of processing, the right to object to processing, and the right to data portability. You can submit a request via the email address at the bottom of this page. We will respond within four weeks. If you have a complaint about the way we process your data, you can submit it to the Dutch Data Protection Authority (autoriteitpersoonsgegevens.nl).
To deliver our services, we use the following sub-processors: Supabase (temporary storage of appointment data, servers in the EU/Frankfurt); Resend (email delivery, servers in the US — participant in the EU-US Data Privacy Framework); Vercel (website hosting and privacy-friendly analytics, servers in the US — participant in the EU-US Data Privacy Framework); Cloudflare (bot protection via Turnstile, servers worldwide — participant in the EU-US Data Privacy Framework); Google (calendar management via Google Calendar, servers in the US — participant in the EU-US Data Privacy Framework). A data processing agreement has been signed with each of these parties, or processing is based on their certified privacy policy.
We take appropriate technical and organisational measures to protect your personal data. Our website uses HTTPS. Access to the database is restricted to the application via a secured key. We only work with service providers that comply with the GDPR.
For questions about this privacy policy or to exercise your rights, please contact us at info@fysiotherapiewennekers.nl.