Privatlivspolitik

Helbredspartner respects your privacy and ensures that you can feel confident about how your personal data is handled by us. This privacy policy explains how Helbredspartner collects and processes your personal data when you use the “Din Helbredspartner” service ("the Service"). It also describes your rights in relation to us and how you can exercise your rights.

Helbredspartner is the data controller for your personal data processed in the Service. You can always contact us with questions about your personal data by sending an email to info@helbredspartner.dk or by calling us at +4530570705.

By using the Service, you accept this privacy policy and that your personal data will be collected and processed as described below. It is important that you read and understand this policy before using the Service.

This policy may be changed or updated from time to time, for example, if features are added to or changed in the Service. In such cases, you will be informed within the Service or by other appropriate means, so that you have the opportunity to consider the change before it takes effect.

1. PERSONAL INFORMATION COLLECTED ABOUT YOU

The following personal data is collected and processed by Helbredspartner in connection with your use of the Service:

Information you provide us:

– Personal information and contact details. When you create a user account in the Service, you must provide us with information such as your name, social security number, email address, mobile phone number, etc.

– Health information. When you use the Service, you may share information about your physical and mental health. This may include information about your illness, medical history, or your physiological (e.g., rash) or biomedical conditions (e.g., blood values). Health information may be collected when you verbally or in writing inform a doctor, psychologist, or other individuals you are in contact with within the Service (“Provider”). Health information may also be collected when you answer questionnaires from the Provider or upload images or other files within the Service.

Information may also be collected if you provide feedback on the Service. You can always choose not to share information with us, but this may make it difficult or impossible for us to provide the Service to you. For example, the Provider may sometimes require you to answer selected questions before you can book an appointment on the Service. Incomplete or incorrect health information may also be crucial for the performance of the health check and thus the Provider's ability to give you the right treatment.

Information collected in other ways

– Health information. Health information about you may also be added by the Provider in the Service or in your medical record, such as information about a diagnosis, performed and planned actions, medical certificates, prescribed medication, medication instructions, exercise programs, or test results. The Provider adds this information as part of their obligation to you as a patient.

– Screenshots. The Provider has the option to take a so-called “screenshot” (a still image of the screen) in the Service, for example, if the Provider needs to document physiological conditions during or after the meeting. The Provider will always ask for your consent before taking a screenshot. It is entirely voluntary for you to give your consent. You also have the right to withdraw your consent at any time and request that the screenshot be deleted.

– Technical data. When using the Service, information about your device (computer or mobile device) is collected, such as IP address, language, browser type and version, operating system and screen resolution, and date and time of your visit. Audio and video recordings are not recorded or stored. Audio and video recordings are deleted in real-time and are not stored in any way after the meeting. Please note, however, that images and files that you upload yourself in the Service are collected and stored.

2. HOW YOUR INFORMATION IS USED

Your personal data is primarily used to provide, perform, and improve the Service. Helbredspartner processes your personal data for the following purposes based on the following legal grounds:

– To provide the Service. Your personal and contact information is processed to manage your account and provide the Service to you (i.e., to fulfill the agreement between us). For example, your personal information is used to verify your identity when you log into the Service with MitID, payment information to process and manage your payments for the Service, and technical data to ensure the Service is presented in the best possible way to you and your device.

– To communicate with you. Your personal and contact information (e.g., email and mobile phone number) may be used to send notifications and messages to you, such as reminders and booking confirmations. This is done to provide the Service and for other legitimate interests, including the Health Partner's interest in ensuring that scheduled appointments are not forgotten, as well as the ability to send important information to you.

– To carry out medical check-ups and maintain records, etc.. Your personal data (including health data) will be processed for consultation and treatment. Your personal data will also be used to maintain records and prepare other documentation, as well as to comply with legal requirements concerning patient data and other applicable laws. Some of the information may, for example, be required to be reported to national health databases.

– To deliver customer service. Your personal data (excluding health information) may be used to investigate, respond to, and resolve complaints and issues with the Service (e.g., errors). This is done in order to provide the Service to you and for other legitimate interests, including Health Partner's interest in ensuring that the Service functions for holding meetings with you and others.

– To compile aggregated statistics. Your personal data (including health data) may be used to compile statistics in an aggregated form, where the data is not identifiable. The statistics may include, for example, reasons for meetings in the Service, how often meetings are canceled or rescheduled, how long meetings typically last, as well as the average age and geographic distribution of users in the Service. Health data is processed when necessary for Helbredspartner's administration of its health services, including the Service. Other personal data is processed based on legitimate interests, including Helbredspartner's interest in developing and improving the Service and its use.

– To develop and improve the Service. Technical data (including general feedback) and aggregated statistics may be used as a basis for further development and improvement of the Service and the user experience. This is based on legitimate interests, including Health Partner's interest in developing and streamlining its ways of delivering healthcare services.

3. HOW LONG YOUR INFORMATION IS STORED

Your personal data will only be stored for as long as the data is necessary to fulfill the purpose of the processing, as described above.

Your personal and contact information is generally stored in the Service for as long as you have an active account. If you have not used your account for 1095 days, it will be automatically deleted from the Service along with your personal and contact information. Technical data is deleted or anonymized by default 30 days after the meeting. If you log in within 1094 days of your last login, a new 1095-day retention period for your personal and contact information will begin in the Service.

Personal data processed based on your consent will be deleted if you withdraw your consent. Please note that withdrawing your consent does not affect Helbredspartner's right to process the data prior to the withdrawal.

However, your personal data may need to be stored for a longer period if required to comply with legal obligations (e.g., under patient data legislation). For example, your medical record must be kept for at least ten years after the last entry.

Your information can be shared with others

Your personal data may in certain cases need to be transferred or shared with others when necessary or justified. For example, your personal data may be shared with:

– People who work for us. Your personal data may be shared with individuals working for Helbredspartner, but only if that person is involved in your treatment or otherwise needs the information in connection with their work in the healthcare sector.

– Suppliers and subcontractors. Your personal data may be transferred to or shared with selected companies that provide various types of services to Helbredspartner. For example, the digital platform for the Service is developed and provided by Curoflow Technology AB (“Service Provider”) on our behalf.

The Service Provider only processes data that arises within the Service. The Service Provider does not have access to your health information or other information in your medical record. The Service Provider and other providers are subject to the same confidentiality rules that apply to Health Partner and may only process your personal data in accordance with our instructions.

– Authorities. Health Partner may also be required to disclose necessary information to authorities (e.g., the Danish Health Authority, the Danish Emergency Management Agency, the police, or other authorities) if required by law or if you have consented to it. You have the right to receive more information about the duty of disclosure that Health Partner may have under the legislation.

5. YOUR INFORMATION IS PROCESSED WITHIN THE EU/EEA

Helbredspartner only processes your personal data in Denmark or within the EU/EEA. Your personal data will not be transferred to or processed in any country outside the EU/EEA without your express consent.

6. YOUR RIGHTS
These are your personal data. You have the right to receive information about and control how your personal data is processed by Helbredspartner. Below you will find a brief overview of your rights.

– Right to object to processing. You have the right to object to the processing of your personal data, which is carried out on the basis of legitimate interests. In such cases, Helbredspartner must either demonstrate that there are legitimate grounds for the processing that outweigh your interests, or stop the processing. You can always contact us for more information about the balancing of interests that has been carried out.
– Right to access and transfer your data. You can request a free copy of your personal data at any time, as well as information about how it has been collected, used, shared, etc. This also applies to information in your medical record.
Right to receive log extracts. When someone reads an electronic patient record, this is logged. As a patient, you have the option to request an extract from the log to see who has viewed your record.
Right to data deletion. You have the right to request the deletion of your personal data if it is no longer necessary for the purpose for which it was collected, or if there is no legal basis for processing the data.
– Right to block data. You have the right to request that information in your medical record be blocked from electronic access. Please note that blocking can only be performed in an electronic medical record, not in a paper-based record. You may revoke the blockage at any time.
– Right to data rectification. You have the right to have inaccurate or incomplete information about yourself corrected. If you believe that information in your medical record is incorrect or misleading, you have the right to request that this be noted in the record.
– Right to restriction. You have the right to request that the processing of your personal data be restricted until incorrect information has been corrected or an objection from you has been investigated.
– Right to compensation. You have the right to claim compensation if you have suffered damages due to your personal data being processed in a way that violates the law.

There may be additional requirements or provisions that limit or expand your rights. For example, there may be legal obligations that prevent us from disclosing or transferring parts of your information or from blocking or deleting your information. These obligations arise, among other things, from legislation on patient data and other health legislation, confidentiality, archival legislation, and accounting and tax legislation. If your information must be stored due to legal obligations, the information will only be used to fulfill those obligations and for no other purpose.

You have the right to receive more information about the confidentiality and security provisions that apply to your personal data and its processing.

7. YOU CAN ALWAYS CONTACT US

Helbredspartner is registered with the Danish Business Authority under CVR number 45226786 and has its headquarters at Ringstedgade 5, 1st floor, right, 2100 Copenhagen Ø, Denmark.

Helbredspartner is the data controller for the processing of your personal data as described above. Helbredspartner complies with Danish data protection legislation, including the General Data Protection Regulation (GDPR).

You can always contact us if you have questions about your personal data by sending an e-mail to info@helbredspartner.dk or calling us at +4530570705.

8. COMPLAINTS

You have the right to contact and complain to the data protection supervisory authority if you believe your personal data has been processed incorrectly by us.