In connection with our examinations and treatments of you as a patient, we collect and process a number of personal data about you (healthcare services; Midwife consultation, reflexology, ultrasound scan). This is referred to as Group 1 below.
As a customer of our clinic (not health care services: Massage, yoga, birth preparation), we collect and process personal data about you. This is referred to as Group 2 below.
In connection with you being a customer in our webshop, we collect and process a number of personal data about you. This is referred to below as Group 3.
This privacy policy describes how we process, use and disclose your personal data.
We do not share information with third parties unless it is necessary to complete the order.
Jordemoderhuset collects and processes the following types of personal data about you (to the extent that it is relevant to you):
General categories of personal data.
Name, email address, telephone number and address. If you wish to elaborate on this yourself, you can write your employment status and membership group of the Danish Health Insurance in your master data, but this is not necessary. This applies to groups 1, 2 and 3.
CPR number: This applies exclusively to groups 1 and 2.
Special categories of personal data (“sensitive personal data”):
Health information (e.g. medical records, test results, tests, scan results, etc.)
This applies exclusively to group 1.
We process your personal data for the following purposes:
When we collect personal data directly from you, you provide the personal data voluntarily. You are not obliged to provide this personal information to us. The consequence of not providing the personal information may be that we cannot carry out the purposes above, including that in some cases we cannot examine or treat you.
In some cases, we collect personal information about you from other healthcare professionals, e.g., hospitals or doctors. We process the information we receive in accordance with this privacy policy. When collecting personal information from other healthcare professionals or transferring information about you to them, a specific consent form is completed, in which you agree that we may do so.
The legal basis for collecting, processing, and if necessary your personal data is:
– For the purpose of general patient treatment, general personal data is collected, processed and disclosed pursuant to Article 6(1)(c) and (d) of the General Data Protection Regulation, while sensitive personal data is collected, processed and disclosed pursuant to Article 9(2)(c) and (h) of the General Data Protection Regulation.
– In addition, we are obliged to process a number of personal data about you in the course of general patient treatment pursuant to Chapter 6 of the Authorisation Act, the Executive Order on Healthcare Professionals’ Medical Records (the Executive Order on Medical Records), especially Sections 5-10, and Chapter 9 of the Health Act.
– Reporting of laboratory samples to hospital laboratories is carried out in accordance with the rules in the Danish Health Authority’s guidance on handling paraclinical examinations pursuant to the Authorisation Act.
If the processing of your personal data is based on consent, you have the right to withdraw consent. If you withdraw consent, it does not affect processing prior to the withdrawal, including any disclosure based on that consent.
Your personal data is processed and stored by my data processors, who do so on my behalf and in accordance with my instructions. Our data processors are currently:
– Complimenta aps. (booking and medical record system)
– Fetal Medicine Foundation (FMF)
– Natera (Panorama test)
– Woocommerce (webshop)
– Klaviyo (newsletter)
We store your personal data for as long as we need to fulfill the purposes stated above. However, we are required, under the Executive Order on Record Keeping, to retain this for a minimum of 10 years after the last entry in the medical record. There may be cases where we are required to store your personal data for a longer period, e.g., in connection with a complaint or compensation case, in which case information will be stored until the case is finally concluded.
You have – subject to the limitations of the law – certain rights, including the right to access personal data, the right to have incorrect data corrected, the right to have data erased, the right to have data restricted, the right to data portability, the right to object to the processing of personal data, including in relation to automated, individual decision-making (“profiling”).
You also have the right to complain to a competent supervisory authority, including the Danish Data Protection Authority.