This is a translation of the Danish original. In case of any divergence, the Danish version will prevail.
The processing of data
In connection with our investigation, diagnosis and treatment of you as a patient specialists Ursula Bentin-Ley and Hans Krog I/S / Danish Fertility Clinic P/S will gather and process a range of personal information about you.
Types of information
Medial specialists Ursula Bentin-Ley and Hans Krog I/S / Danish Fertility Clinic P/S collects and processes the following types of personal information about you (to the extent it is relevant for just you):
General categories of personal data:
- Name, address, email address, phone no., personal number (CPR number), gender, family relationships and social relationships, working relationships.
- Health information (e.g. Medical records, test results, tests, x-rays, scan results etc.), Sexual preference, race or ethnic origin.
- Our investigation, diagnosis and treatment of you
- Preparation of medical reports
- Preparation of certificates for use by authorities, insurance companies, etc.
- Communication with reference to other healthcare personnel, physicians, hospitals and hospital laboratories
- Ordination of medication, including prescriptions
- Reporting to clinical databases
- Reporting of laboratory tests to hospital laboratories
- settlement purposes
Special categories of personal data ( "sensitive personal data"):
We will process your personal data for the following purposes:
- Adhering to our obligations under applicable law, including the EU Data Protection Regulation, the Data Protection Act and other relevant health legislation, for example.
- Documentation requirements
- Compliance with the basic principles of processing of personal data and the legal basis for data processing
- Implementation and maintenance of technical and organizational security measures, including but not limited to preventing unauthorized access to systems and information, restricting the reception or distribution of malicious code, stopping the denial (denial-of-service attacks) and damage to computer systems and electronic communication systems
- Investigation of suspicion or knowledge about security breaches and reporting to the individuals and authorities
- Handling of inquiries and complaints from data subjects and others
- Handling of inspections and inquiries from regulators
- Handling of disputes with data and third parties.
- Statistical studies and scientific research
- Transmitting information to other health professionals if it is necessary for an actual treatment
- Transmitting information to other authorities, clinical databases, the Danish Vaccination Register, Agency for Patient Safety, Fælles Medicinkort, police, social authorities, Social Enterprise Security to the extent that there is an obligation to do so under applicable law.
- You as a patient have access to your own information (own-access)
- By referring patients, information on health topics will be disclosed to persons to which the reference is sent.
- When reporting laboratory samples, the tests are passed to the hospital laboratories.
- By submitting information in connection with the settlement of patient care, information is communicated to the regional accounting offices or to our internal accountant.
- When issuing prescriptions, information is disclosed to the pharmacies and Danish Medicines Agency via prescription server.
- In reporting to clinical databases, for instance the IVF Register, details of the treatment you have received is disclosed.
- Upon disclosure of discharge summaries, information is divulged to the referring physician and in some cases to the referring hospital
- In other cases, information may be disclosed to relatives or insurance companies.
When we collect personal information directly from you, you give the personal data voluntarily. You are not required to provide such personal information to us. The consequence of not providing us with the personal data will be that we cannot fulfil the above objects, including, in some cases, we cannot examine, diagnose or treat you.
Transfers of personal data
As far as necessary for the specific examination, diagnosis or treatment of you, your personal information will be disclosed and shared with recipients:
Legal framework for the processing and transmission of personal data
The legal basis to collect, process and disclose your personal data are:
- For the use of the ordinary patient care, personal data are collected, processed and passed in accordance with data protection of Article 6 (1) (c) and (d), while the sensitive personal data are collected, processed and passed on in accordance with data protection Article 9 (2) (c) and H).
- Clinical patient data are transmitted to clinical databases under the provisions of the Health Act §§ 195-196 and the Order on the reporting of information to clinical databases etc. Data can also be transmitted based on a specific consent from you as a patient.
- Discharge summaries, which is a brief summary of the patient's medical history and treatment, are sent to the referring physician and in some cases to the referring hospital under the provisions of the Health Act Chapter 9.
- In deceased patients, certain personal data are transferred to the deceased's next of kin, the deceased's general practitioner and the doctor who had deceased in treatment under the provisions of the Health Act § 45.
In addition, we are required to treat a range of personal information about you in the general treatment of patients pursuant to the Authorization Act Chapter 6, Ordinance on healthcare personnel records (record keeping Order) particularly §§ 5-10 and Health Act Chapter 9.
Health information for further processing in the referral of patients, is disclosed under the provisions of Agreement on specialized medical help §§ 20-23 and the Danish Health Act.
Reporting of laboratory tests for hospital laboratories takes place under the rules of Health guideline on the management of paraclinical investigations under the Authorization Act.
Information for billing for public patient care is forwarded once per month to the region's clearinghouse in accordance with Agreement on Specialized Medical Care § 49 and the Health Act.
Medication prescriptions are sent through an electronic prescription server under the provisions of the Health Act Chapter 42 and Executive Order on Prescriptions and Dose Dispensing of Medicines, especially chapter 3.
Your personal data are only transmitted to insurance companies with your prior consent cf. Data protection under Article 6 (1) (a) and 9 (2) (a).
Your personal information is solely disclosed for your relatives with your prior consent under the provisions of the Health Act § 43.
Withdrawal of consent. If the processing of your personal data is based on consent, you have the right to withdraw your consent. If you revoke consent, it does not affect the treatment prior to withdrawal of consent, including disclosure based on prior consent.
Using data processors
Your personal data is processed and stored in our data processors that holds them on behalf of and as instructed by us. Our processors are currently
- Danish Medical Datacenter
- Ordenisagerne by Kristine Lund
We store personal information about you, as long as we need to perform the above specified purposes. We are, however, according to the record keeping Order obliged to keep them for at least 10 years after the last record keeping to the Journal. There are cases where we are obliged to keep your personal information for longer, for example, as per the European Tissue Act (Act no. 273 of 1 April 2006 on the requirements for quality and safety in handling human tissues and cells, with the changes imposed of § 3 of law no. 534 of June 17th, 2008, § 2 of law no. 605 of June 18th, 2012, § 2 of law no. 653 of June 12th, 2013 and § 2 of law no. 1313 of November 27th, 2013), or in connection with a complaint or damages where the information in this case will be kept until the case is finally closed.
You have - with legal restrictions - certain rights, including the right of access to your personal information, the right to change incorrect information, the right to erasure, the right to obtain limited information, the right to data portability, the right to object the processing of personal data in relation to automated individual decision making ("profiling").
You also have the right to complain to a competent regulatory authority, including the Danish Data Protection Agency.
If you have any questions regarding the processing of your personal data or exercise of your rights, please contact us at the clinic.
Address information at the clinic:
Speciallægerne Ursula Bentin-Ley and Hans Krog I/S
Danish Fertility Clinic P/S
Seedorffs Vænge 2, 1st floor
DK - 2000 Frederiksberg
Date: May 1st, 2018