Personal data policies
In connection with your treatment, it is necessary for us to register and process personal data about you.
At Fysio Fanø ApS, we take the protection of your personal data seriously.
We process your information in accordance with applicable legislation, including the General Data Protection Regulation (GDPR).
Below you can read how we handle your information – and what rights you have as a patient.
What information do we process?
In connection with your treatment at Fysio Fanø, we record information about your health conditions as part of the record keeping that we are obliged to keep according to health legislation. The detailed rules for this can be found in Chapter 6 of the Authorization Act and the Executive Order on Records (Bkg. No. 1090 of 28 July 2016 on authorized healthcare professionals' patient records).
In addition to the health information we register ourselves, we may also receive information from other healthcare professionals - e.g. your own doctor - in accordance with the rules in Chapter 9 of the Health Act.
The information is used to ensure safe, effective and professionally sound treatment - and to be able to handle the administrative functions required by the treatment process.
We may also register contact and payment information, including name, address, telephone number, CPR number and insurance information. This is done in accordance with Article 6, paragraph 1, letters b and f of the General Data Protection Regulation.
Disclosure of information
As healthcare professionals, we are bound by confidentiality regarding your health information, cf. sections 40-44 of the Danish Health Act.
Disclosure outside the clinic may generally only take place with your express consent. In certain cases, disclosure may take place without consent, for example to your own doctor or hospital, if necessary and in accordance with the rules in Chapter 9 of the Danish Health Act.
If you are affiliated with an insurance company or have your treatment paid for in whole or in part by, for example, the Danish Health Insurance Company, a municipality or an insurance company, we will disclose relevant information to the relevant body for the purpose of settlement.
We will not disclose your information for marketing or third-party use.
How long is the information stored?
Your medical record is stored in accordance with the rules set by the Danish Patient Safety Agency.
This means that we generally store the medical record for a minimum of 5 years after the last treatment, cf. the Medical Record Executive Order, Section 15, subsection 2.
In special cases, the medical record may be stored for longer.
Information for accounting and billing purposes is stored for as long as necessary according to the Accounting Act.
Your rights regarding the information
You have the right to access the information we have registered about you.
According to Section 24 of the Danish Authorization Act, we are generally not allowed to delete information in your medical record. If you believe that the information is incorrect, you have the right to have your comments added to the medical record.
You have the right to have information that is not part of the medical record (e.g. contact information or payment information) corrected or deleted if it is incorrect or no longer necessary.
You also have the right to object to the processing of your personal data and can withdraw consent if the processing is based on this.
Appeal options
If you disagree with the way your information is processed, you have the opportunity to complain to the following:
Datatilsynet
Carl Jacobsens Vej 35
2500 Valby
Telefon: 33 19 32 00
www.datatilsynet.dk
Supervision of the rules in health legislation is carried out by:
Styrelsen for Patientsikkerhed
www.stps.dk
Data security
We protect your information through technical and organizational security measures, including:
Two-factor authentication
Passwords
Encryption
Secure Email for electronic communication
We use external systems for record keeping, booking and accounting. These suppliers process information on our behalf and under written data processing agreements in accordance with GDPR Article 28.
