Privacy policy

Dr Joris Dereant created the Centre Médical Primera website and is the controller for processing needed to operate it. This policy covers browsing, contact and requests submitted through the website.

For care, the treating physician is responsible for the medical record they maintain. Authorised reception staff receive and route requests, handle administrative follow-up and apply the physician’s instructions without making prescribing decisions. Dr Joris Dereant is the contact for website questions and for coordinating rights requests with the relevant professional. This coordination does not grant general access to other practitioners’ records or change their own responsibilities.

Reception and care requests: info@centremedicalprimera.lu · +352 20 22 10 23

• Browsing: IP address, date and time, requested page, browser information and technical data needed for the connection and security.
• Renewal requests: full name, patient identification number, email address, required telephone number, selected physician and medication to renew (name, strength and usual dosage).
• Telephone or email contact: contact details and information you provide to obtain a response.

Required fields are needed to handle an online request. This form does not request documents or attachments. Include only the medical information needed for the renewal, not your complete medical record.

• Website operation and security, abuse prevention and administrative enquiries: legitimate interests in providing a reliable website and handling enquiries (GDPR Article 6(1)(f)).
• Preparing and managing care requests: steps requested by the patient and the care relationship (Article 6(1)(b)). Necessary health data is processed for medical care under professional confidentiality (Article 9(2)(h) and 9(3)).
• Maintaining records and meeting legal duties: Article 6(1)(c), including Luxembourg patient rights legislation.
• Optional Google Maps display: prior consent (Article 6(1)(a)), together with the rules on trackers in the amended Luxembourg law of 30 May 2005 on electronic communications.

The website makes no automated medical decisions. The physician decides whether a prescription can be renewed.

After you review your request and select “Send to the practice”, it is transmitted to the website server, then through Hostinger Email to info@centremedicalprimera.lu for reception and your selected physician.

A sending confirmation does not mean the message has been read, the renewal approved or a prescription issued. An error means the request was not sent; if sending cannot be confirmed, contact reception before trying again.

This form is not suitable for emergencies. You can also contact reception on +352 20 22 10 23 to arrange your request. In a life-threatening emergency, call 112.

Requests are intended for the relevant physician and reception staff authorised to receive and pass them on as part of their duties. Hosting and email providers support the service.

Hostinger provides website hosting and email. Information about its processing, providers and international transfers is available from Hostinger and the Hostinger — Data Processing Addendum. Depending on the services and subprocessors, processing outside the European Economic Area may occur; the applicable contractual safeguards must cover these transfers.

Google is contacted only if you accept the embedded map. Doctena is contacted when you open its appointment service. See their policies: Google and Doctena.

Requests and emails: the adopted policy provides for deletion from the mailbox no later than 90 days after a request is closed, once relevant information has been included in the patient record. This is an organisational choice, not a statutory email retention period. Authorised staff must perform deletion; the form does not automatically purge messages. Open requests are reviewed regularly and are not deleted solely because of their age. After six months without an exchange, the physician reviews whether the request can be closed. Evidence needed for a complaint or dispute may be kept separately, with restricted access and periodic review, for as long as the need is justified. Provider backups follow their own cycle and are not erased instantly when an email is deleted.

Patient records: information needed for care forms part of the medical record. Article 15 of the Luxembourg law of 24 July 2014 on patient rights and obligations requires retention for at least ten years after the end of care. This does not mean every email must remain in the inbox for ten years.

Technical security: form protection uses temporary counters and identifiers without storing the medical text in them. Control windows are fifteen minutes for attempts and thirty minutes for duplicates; expired entries are purged on a later request. Hosting logs and backups follow the service settings, which are separate from medical record retention.

The website has no Google Analytics, advertising pixels or embedded audience measurement. Fonts and images are served locally. Ordinary browsing does not activate Google Maps.

Requesting a map first opens an explicit choice. The map loads only after acceptance. Google Ireland Limited may then receive your IP address and technical information and use its service’s cookies or similar technologies. Processing outside the EEA, including in the United States, is possible.

You can refuse, close the dialog or withdraw permission using the button on the map. The address remains available without Google Maps. Permission is not remembered beyond this map in the open page. Withdrawal stops the embed but cannot delete cookies already set by Google; manage these in your browser. See the Cookies page and Google — cookies.

Booking links open the external Doctena service; Primera does not automatically load an embedded Doctena calendar. Account and browsing information on Doctena is covered by its policy; appointment information used for your care also falls under the relevant professional’s responsibility. Consult Doctena for the respective roles and rights contacts.

Access the public website using HTTPS. The form uses an encrypted connection to the server, then hands the message to the hosting provider’s mail service. TLS encryption during delivery depends on the email infrastructure. Ordinary email is nevertheless not an end-to-end encrypted medical channel.

The website does not put form fields in the page address or save them in persistent browser storage. Share only necessary information. Contact reception if you prefer another way to transmit your request.

Subject to GDPR conditions, you may request access, correction and restriction, as well as erasure or portability where applicable. You may object to legitimate-interest processing for reasons relating to your particular situation and withdraw consent for future processing, without affecting earlier lawful processing.

Erasure is not absolute: legal retention duties, including those for patient records, may prevent deletion. Proportionate identity verification may be needed. GDPR requests receive a response within one month; this may be extended by two months for complexity or numerous requests, with notice within the first month.

Contact jd@docteurdereant.lu about the website, or info@centremedicalprimera.lu naming the relevant physician for your care. Do not send an identity document or unrelated medical details with your initial request.

You may complain to the Commission nationale pour la protection des données, 15 boulevard du Jazz, L-4370 Belvaux, Luxembourg. The CNPD provides a complaint form and guidance. You may contact us to seek a solution without losing your right to contact the authority.