Handling of information
When you are a patient at aCure Private Hospital in connection with examination, diagnostics, and treatment, aCure Private Hospital, as the data controller, collects and processes a range of personal information about you.
We need your personal information to ensure you receive the best possible treatment.
Below is a description of how aCure Private Hospital uses and discloses your personal information.
Types of information
aCure Private Hospital may collect and process the following types of personal data about you:
Common personal information:
- Name, address, email address, phone number, social security number, gender, family relationships, and social relationships, referring institution, work relationships, and education.
Sensitive personal information:
- Health information:
- Medical records
- Test results and medical tests
- X-ray images, scanning results, etc.
- Sexual relationships, race or ethnic origin, as well as religious beliefs.
The information is only collected and processed to the extent necessary to ensure your care.
In some cases, we may collect personal data about you from other healthcare professionals, such as hospitals, referring doctors, or through lookups in electronic medical record systems. We process the obtained information in accordance with this privacy policy.
Purpose
The purpose of collecting and processing your personal data is to offer you the best possible healthcare. Your personal information is processed securely, and health information is handled in accordance with the "Regulation on Authorized Healthcare Professionals' Patient Records."
The disclosure of health information is often crucial for successful treatment and a cohesive process. Information may only be collected/transmitted to the extent necessary. Therefore, the staff will always assess relevant information to be forwarded.
We process your personal data for the following purposes:
- Our examination, diagnosis, and treatment of you
- Preparation of medical certificates
- Preparation of certificates for use by authorities, insurance companies, etc.
- Communication with or referral to other healthcare professionals, doctors, hospitals, or hospital laboratories
- Prescription of medications, including issuing prescriptions
- Reporting to clinical quality databases
- Reporting of laboratory samples to hospital laboratories
- For billing purposes/billing
- Fulfilling our obligations under current legislation, including the EU General Data Protection Regulation, the Data Protection Act, and other relevant healthcare legislation, for example:
- Documentation obligation
- Fulfillment of basic principles for the processing of personal data and legal basis for the processing
- Implementation and maintenance of technical and organizational security measures, including but not limited to preventing unauthorized access to systems and information, preventing the reception or distribution of malicious code, stopping denial-of-service attacks, and protecting computer systems and electronic communication systems from harm
- Investigation of suspicion or awareness of security breaches and reporting to individuals and authorities
- Handling inquiries and complaints from registered individuals and others
- Handling inspections and inquiries from regulatory authorities
- Handling disputes with registered individuals and third parties
- Statistical studies and scientific research
Voluntariness
It is voluntary if you want to provide aCure Private Hospital with this personal information. If you do not provide us with this information, we cannot be sure that we can fulfill the purposes mentioned above, and therefore, in some cases, we may not be able to examine, diagnose, or treat you.
Disclosure of personal data
To the extent necessary for the specific examination, diagnosis, or treatment of you, your personal data will be shared with the following recipients:
- The information is shared with other healthcare professionals if it is necessary for the current treatment process.
- The information is shared with other authorities, clinical quality databases, the Danish vaccination register, the Danish Patient Safety Authority, the National Prescription Database, the Police, social services, and the Danish Labour Market Insurance, to the extent required by current legislation.
- When referring patients, information is shared with the healthcare professionals to whom the referral has been sent.
- In the reporting of laboratory samples, the samples are sent to hospital laboratories.
- In the reporting of information related to billing for patient care, the information is sent to the regional billing offices or insurance companies.
- In the prescription of medications, the information is sent to the country's pharmacies and the Danish Medicines Agency via the prescription server.
- In reporting to clinical quality databases.
- In the disclosure of discharge summaries, the information is sent to the referring doctor and, in some cases, the referring hospital.
- In other cases, information is shared with family members.
Storage time
We retain personal data for as long as necessary to fulfill the purposes stated above. However, we are obligated to retain them for at least 10 years after the latest addition to the journal. There may be cases where we are required to keep your personal data for a longer period, such as in connection with a complaint or compensation case, in which case the data will be retained until the matter is conclusively resolved.
Your rights
You have - within the limits of the law - certain rights, including the right to access personal data, the right to correct inaccurate information, the right to erasure of information, the right to restriction of information, the right to data portability, the right to object to the processing of personal data, including in relation to automated individual decision-making ('profiling').
You also have the right to lodge a complaint with a competent supervisory authority, including Datatilsynet.