Processing of information
In connection with my examination, diagnosis and treatment of you as a client, Schema Therapy Denmark ApS. collects and processes a number of personal data about you.
Types of information
Schema Therapy Denmark ApS. collects and processes the following types of personal information about you (to the extent that it is relevant to you):
Common categories of personal data:
Name, address, possibly e-mail address, telephone number, social security number, gender, family and social relations, work relations and education.
Special categories of personal data (“sensitive personal data”):
Health information (e.g. journal information, test answers, tests, radiographs, scan responses, etc.), sexual relations, race or ethnic origin, and religious conditions.
I process your personal information for the following purposes:
• My examination, diagnostic and treatment of you.
• Preparation of medical certificates.
• Preparation of certificates for use by authorities, insurance companies, etc.
• Communication with or referral to other healthcare professionals, doctors, hospitals or hospital laboratories, if you have consented.
• Medication prescriptions, including prescriptions.
• Reporting of laboratory samples to hospital laboratories.
• Settlement Purpose.
• Comply with our obligations under applicable law, including the EU Data Protection Regulation, the Data Protection Act and other relevant health law, such as
- Documentation requirement.
- Compliance with basic principles for the processing of personal data and legal basis for processing.
- Implementation and maintenance of technical and organizational security measures, including but not limited to preventing unauthorized access to systems and information, preventing malicious code reception or distribution, denial-of-service attacks and computer system and electronic damage communications systems.
- Investigation into suspicion or knowledge of security breaches and reporting to individuals and authorities.
- Handling inquiries and complaints from data subjects and others.
- Handling inspections and inquiries by regulators.
- Handling disputes with registered and third parties.
When I collect personal information directly from you, you provide the personal information voluntarily. You are not required to provide this personal information to me. The consequence of not providing me with the personal information will be that I cannot fulfil the purposes above, including that in some cases I will not be able to examine, diagnose or treat you.
Disclosure of personal data
To the extent necessary for the specific examination, diagnosis or treatment of you, your personal data will be disclosed and shared with the following recipients:
• Information is passed on to other healthcare professionals if necessary, for a current course of treatment.
• Information is provided to other authorities, clinical quality databases, the Danish Vaccination Register, the Danish Agency for Patient Safety, the Common Medicines Card, the Police, Social Authorities, the Labor Market Occupational Insurance to the extent that there is a duty to do so in accordance with current legislation.
• As a patient, you have access to your own information (self-access).
• When referring patients, information is passed on to the healthcare professionals to whom the referral was sent.
• When reporting laboratory samples, the samples are passed on to the hospital laboratories.
• When settling for patient treatment, information is passed on to the clinic’s IT settlement system.
• When issuing prescriptions, information is passed on to the country’s pharmacies and the Danish Medicines Agency via the prescription server.
• When transmitting discharge summaries, information is passed on to the appropriate medical institution.
• In other cases, information is passed on to relatives or insurance companies.
Legal basis for the processing and transmission of personal data
The legal basis for collecting, processing and disclosing your personal information is:
• For the purposes of ordinary patient care, general personal data is collected, processed and disclosed pursuant to Articles 6 (1) (c) and (d) of the Data Protection Regulation, while the sensitive personal data is collected, processed and disclosed pursuant to Article 9 (2) of the Data Protection Regulation (2) ( c) and (h).
• In addition, I am obliged to process a number of personal data about you in the ordinary patient care pursuant to Chapter 6 of the Authorization Act, the Order on Health Persons’ Journals (Journaling Order), in particular Sections 5-10, and Chapter 9 of the Health Act.
• Health information for further treatment when referring patients is disclosed in accordance with the Health Act.
• Reporting of laboratory samples to hospital laboratories is done in accordance with the rules of the National Board of Health’s guidance on handling paraclinical examinations pursuant to the Authorization Act.
• Medication prescriptions for prescriptions are sent via the IT service the prescription server in accordance with the rules in Chapter 42 of the Health Act and the Executive Order on Prescriptions and Dosage Dispensing of Medicines, especially Chapter 3.
• Clinical patient data is transmitted to clinical quality databases in accordance with the rules in sections 195-196 of the Health Act and the Executive Order on reporting information to clinical quality databases, etc. Data may also be disclosed on the basis of specific consent from you as a patient.
• Discharge summary, which is a brief summary of the patient’s medical history and course of treatment, is sent to the relevant medical institution in accordance with the rules in Chapter 9 of the Health Act.
• Your personal information will only be disclosed to insurance companies with your prior consent, in accordance with Articles 6 (1) (a) and 9 (2) (a) of the Data Protection Regulation.
• Your personal information is only disclosed to your relatives with your prior consent in accordance with the rules in section 43 of the Health Act.
• In the case of deceased patients, certain personal data may be passed on to the deceased’s next of kin, the deceased general practitioner and the physician who had the deceased in treatment in accordance with the rules in section 45 of the Health Act.
Withdrawal of consent
If the processing of your personal data is based on consent, you have the right to withdraw the consent. If you revoke the consent, it will not affect the processing prior to the revocation of the consent, including a consent-based disclosure.
Using Data Processors
Your personal information is processed and stored with my data processors who store it on behalf of and following instructions from me. My data processors are:
• Danastar / Rmail
I will keep personal information about you for as long as we need to fulfil the stated purposes. However, according to the Journaling Order, I have a duty to keep these for a minimum of 10 years after the last entry to the journal. There may be instances where I have to keep your personal information for a long time, e.g. in connection with a complaint or damages case, in which case information will be stored until the case is finally closed.
You have – with the limitations of the law – certain rights, including the right to access personal data, the right to have incorrect information changed, the right to delete information, the right to have limited information, the right to data portability, the right to object to the processing of personal data, including in relation to automated, individual decision making (“profiling”).
You also have the right to appeal to a competent supervisory authority, including the Data Inspectorate.
If you have any questions regarding the processing of your personal data or the exploitation of your rights, please contact me at:
Phone: + 45 27 29 09 29
Schema Therapy Denmark ApS.
Gammel Mønt 12, 1.th.