At Be Recovered we process your personal data, including health data, so we can provide you with a safe and well-managed physiotherapy service. This page explains clearly what data we collect, why, who we share it with, and what rights you have under the General Data Protection Regulation (GDPR) and applicable Luxembourg law.
Gonzalo López — Be Recovered, physiotherapist practising at 121C, Route d'Arlon, level -1, L-1150 Luxembourg (Belair).
Contact: infoberecovered@gmail.com · +352 661 938 001
We process your identification and appointment data on the basis of the performance of the physiotherapy service relationship you enter into with us when booking (Art. 6.1.b GDPR). We process your health data based on your explicit consent, given by checking the relevant box on the booking form or in the RHM programme (Art. 9.2.a GDPR), and to the extent necessary for the provision of health care (Art. 9.2.h GDPR). You can withdraw your consent at any time without affecting the lawfulness of prior processing.
We do not sell your data. We only share it with the providers strictly necessary to deliver the service, all acting as data processors:
Where any of these providers processes data outside the European Union, we require adequate safeguards to be in place (European Commission standard contractual clauses or another mechanism recognised under GDPR).
Your clinical record (diagnosis, prescription, treatment progress, exercises and, if you use the RHM programme, the associated health data) is kept for a minimum of 10 years from the date your treatment ends, as a legal obligation — Art. 15(4) of the Loi du 24 juillet 2014 relative aux droits et obligations du patient (Luxembourg patient rights law): "Le dépositaire d'un dossier patient est tenu d'en assurer la garde pendant dix ans au moins à partir de la date de la fin de la prise en charge" ("the keeper of a patient file must retain it for at least ten years from the date care ends").
Billing documents related to your treatment (including billing processed with the CNS through our clinical software) are kept for a minimum of 10 years from the close of the financial year they relate to — Art. 16 of the Luxembourg Code de Commerce. Once these legal periods have elapsed, we delete or anonymise data that is no longer needed.
You can exercise your rights of access, rectification, erasure, restriction, portability and objection over your data at any time, as well as withdraw your consent to the processing of health data. To do so, email us at infoberecovered@gmail.com with your full name and your specific request; we will respond within the timeframe set by GDPR (one month at most). Please note that, for as long as the legal retention obligation described in section 6 applies, we cannot delete your clinical record or billing documents even if requested, unless the law provides for an exception.
If you believe we have not handled your data correctly, you have the right to lodge a complaint with the Luxembourg Commission Nationale pour la Protection des Données (CNPD) — cnpd.public.lu.
Your health data (including your prescription documents) is stored encrypted and access is restricted exclusively to authorised Be Recovered staff. It is never publicly accessible.
This website does not use advertising or third-party analytics cookies. We only use the technical elements strictly necessary for booking and patient portal access to work correctly.
If you book an appointment for a minor in your care, we understand that you are acting as their legal representative and that you hold the necessary authority to consent to the processing of their health data.
We may update this policy to reflect changes in our services or in applicable regulations. The date of the last update always appears at the top of this page.
For any questions about this policy or about how we process your data, email us at infoberecovered@gmail.com or call +352 661 938 001.
