Data Protection Policy for Stork IVF Klinik A/S

Data processing 

In connection with our investigations, making a diagnosis and providing treatment, StorkKlinik collects and processes a lot of personal data. You can read below about how StorkKlinik processes, uses and discloses your personal data. Types of data StorkKlinik collects and processes general and sensitive personal data.

Types of data 

StorkKlinik collects and processes general and sensitive personal data.

General personal data

General data are amongst others; Name, address, e-mail address, telephone number, personal identification number, gender, family and social relationships, work relationships and education.

Sensitive personal data

Sensitive data are amongst others; Health data (e.g. data from your medical journal, test results, tests, X-rays, scan results, etc.), sexual matters, racial or ethnic origin and religious matters. We use your data for the following purposes:

• To investigate, diagnose and treat you
• To prepare medical reports
• To prepare certificates for authorities, insurance companies, etc.
• Communication with or referral to other healthcare personnel, doctors, hospitals or laboratories
• Drug orders including the issuing of prescriptions
• Reports to statutory clinical databases
• Reporting laboratory tests to hospital laboratories
• Invoicing
• Comply with existing legislation including EU data protection regulation, the Danish Data Protection Act and other relevant health legislation, e.g.; the Danish Authorization Act, the Danish Health Care Act, the Agreement on Specialized Medical Assistance and the Danish Executive Order on Human tissue and cells
• Handling queries regarding inspections, complaints and/or statistics/research

When we collect personal data directly from you, you consent to the processing of your personal data. You are not obliged to give this personal data; however, we will not be able to investigate, diagnose or treat you without the above data.

Other sources

In some cases, we collect personal data about you from other healthcare personnel, e.g. hospitals or the referring doctor. We process the data we receive in accordance with this Data Protection policy. 

Disclosure of personal data:

To the extent that it is necessary for the concrete investigation, diagnosis or treatment of you, your personal data will be disclosed and shared with the following recipients:

 

• If it is necessary with regard to your treatment, your data will be disclosed to other healthcare personnel.
• Your data will be disclosed to other authorities, clinical databases, The Danish Patient Safety Authority, The Shared Medical Record, The Danish National Police, social authorities, and insofar as that there is a legal obligation to do so in accordance with existing legislation.
• On referral data will be disclosed to the healthcare personnel to where the referral is sent.
• When reporting laboratory tests, the tests will be disclosed to the laboratories.
• When disclosing data in connection with invoicing for patient treatment, the data will be disclosed to the account office.
• When issuing prescriptions, data will be disclosed to Danish pharmacies and the Danish Medicines Agency via the prescription server.
• When forwarding discharge summaries, data will be disclosed to the referring doctor and in some cases to the referring hospital.

Legal basis for the processing and disclosure of personal data 

The legal basis for the collection, processing and disclosure of personal data means:

• For use in general patient treatment, general personal data is collected, processed and disclosed in accordance with article 6(1)(c) and (d) of the EU Data Protection Regulation, while sensitive personal data is collected, processed and disclosed in accordance with article 9(2)(c) and (h) of the EU Data Protection Regulation.
• We are also obliged to process a lot of personal data about you during general patient treatment, in accordance with Chapter 6 of the Danish Authorization Act Regarding Healthcare Journals (the Danish Executive Order on Entries in Medical Journals) particularly §§ 5–10, as well as Chapter 9 of the Danish Health Care Act.
• Retention of patient treatment information pursuant to the Danish Tissue Act and its associated Danish Executive Order on Human tissue and cells.
• Health data for use in further processing when referring patients is disclosed in accordance with the rules in the Agreement on Specialized Medical Assistance as well as §§ 20–23 of the Danish Health Care Act.
• Reporting laboratory tests to laboratories in accordance with the rules in the Danish Health Authority’s guide on handling Para clinical investigations in accordance with the Danish Authorization Act
• Data in connection with invoicing for patient treatment will be forwarded to account office in accordance with the rules in § 49 of the Agreement on Specialized Medical Assistance and the Danish Health Care Act.
• Drug orders in prescriptions will be sent via the prescription server IT service in accordance with the rules in Chapter 42 of the Danish Health Care Act and the Danish Executive Order on Prescriptions and Dose Dispensing particularly Chapter 3.
• Clinical patient data is disclosed to clinical databases in accordance with the rules in §§ 195–196 of the Danish Executive Order on Reporting of Data to Clinical Quality databases, etc. Data can also be disclosed with your consent if you e.g. want to participate in a research project.
• Discharge summaries, which are short summaries of the patient’s case history and treatment, are sent to the referring doctor and, in some cases, to the referring hospital in accordance with the rules in Chapter 9 of the Danish Health Care Act.
• Your personal data will only be disclosed to your relatives with your prior consent in accordance with the rules in § 43 of the Danish Health Care Act.
• For deceased patients, certain personal data may be disclosed to the deceased’s next of kin, the deceased’s GP and the doctor who was treating the patient in accordance with the rules in § 45 of the Danish Health Care Act.

Storage period 

We store your personal data for as long as we need to fulfil the above purposes. However, in accordance with the Danish Executive Order on Human tissue and cells, we are obliged to store these for a minimum of 30 years following the latest entry in the medical journal. There may be instances where we are required to store your personal data for longer periods of time, e.g. in connection with a complaint or a compensation case. If so, data will be stored until the case has been concluded. 

Right regarding your data 

Subject to certain legal restrictions, you have certain rights, including the right to access your personal data, the right to have incorrect data changed, the right to have data deleted, the right to access restricted data, the right to data portability, the right to object to the processing of personal data, including in relation to automated, individual decision making (“profiling”).

You also have the right to complain to a competent supervisory authority, including the Danish Data Protection Agency.

Withdrawal of consent 

You can at any time withdraw your consent. If you withdraw your consent, it does not affect the processing of your personal data prior to the withdrawal of your consent including disclosure based on that consent. 

The use of data processors

Your personal data may be processed and stored by our data processors, who store it on our behalf and based on our instructions in according to agreements with data processors. Our data processors are amongst others:

• Formatex
• FocalScope

Cookies

Our internet pages use cookies. Cookies are text files which are placed on a computer system through an internet browser and saved.

Many internet pages and servers use cookies. Many cookies include a so-called cookie-ID. A cookie-ID is a definitive identification of the cookie. It consists of a series of letters or numbers via which internet pages and servers which an internet browser has visited can be determined by the cookie saved there. This makes it possible for the visited internet sites and servers to differentiate the individual browser of the person in question from other browsers. A certain internet browser can be recognized and identified via the cookie-ID.

Through the use of cookies we can present to you user-friendly services which would not be possible without the placing of cookies. Using cookies enables us to optimize the information and offerings on our website to you. As already stated, cookies enable us to identify you who visit our website more than once. The intention of this recognition is to make the use of our website easier for you. Thus you as a user of a website which uses cookies, for instance, must not re-enter your user data each time you visits our site, because this information is taken from the internet site and the cookie placed in your computer system.

You can prevent the placement of cookies by our website at any time through the appropriate setting in your computer browser and thereby permanently reject cookies. Additionally, previously placed cookies may be deleted at any time by an internet browser or other software programs. This is possible in all common internet browsers. If you should deactivate the placement of cookies in the browser you are using, then it is possible that not all functions of our website will be available to their full extent.

Contact

If you have any questions regarding the processing of your personal data or how to exercise your rights, please contact us.

The data controller for VivaNeo Denmark (CVR 36909293) and StorkKlinik (CVR No.33034911) is Director Maria Hamm and DPO Lisa Wagner.

The business addresse:

St. Kongensgade 38, 1. th. 
1264 København K 
Telefon: +45 32 57 33 16/+45 70 60 60 90 
Mail: info@StorkKlinik.dk
Website: www.StorkKlinik.dk
Valid from 25. May 2018