Privacy and cookie policy

Privacy policy

All nurses are bound by professional confidentiality. This covers the information they gain access to while caring for and treating their clients: information about their health as well as information of a more private nature, including living arrangements, finances and more.

When we take your medical history, we always ask for your consent to obtain and share information about your health and other confidential information with other healthcare bodies. You can withdraw your consent at any time.

All personal data is processed in accordance with the applicable data protection rules.

Processing of information

In connection with the treatment Private Nurse provides to you as a patient, Private Nurse collects and processes a range of personal data about you. In addition, Private Nurse collects and processes information about you that is used to adapt and improve Private Nurse’s content, maintain security and increase the value of the services Private Nurse offers you. If you do not want information to be collected, you should delete your cookies and stop using the websites.

This privacy policy describes how Private Nurse processes, uses and discloses personal data.

Types of information

Private Nurse collects and processes the following types of information about you, to the extent that it is relevant to you.

General categories of personal data:

• A unique ID and technical information about your computer, tablet or mobile phone, your IP address, geographical location and which pages you visit. To the extent that you give your explicit consent and enter the information yourself, that information is also processed.
• Name, address, email address, phone number, civil registration number, gender, family and social relationships, education and payment details.

Special categories of personal data (“sensitive personal data”):

• Health information (e.g. medical records, test results, tests, X-rays, scan results etc.), sexual matters, race or ethnic origin and religious matters.

Cookies

We use cookies and other similar technologies to provide our websites and services.

This document explains why and how we use cookies on Privatenurse.dk

When you visit our website, information about you is collected and used to adapt and improve our content and to increase the value of the services we can offer you. Below, we explain in more detail what information is collected, its purpose and which third parties have access to it.

What is a cookie?

Cookies are small text files stored on your computer, mobile or similar device in order to recognise it, remember settings, compile statistics and target ads. Session cookies are deleted automatically when you close your browser, while persistent cookies remain until you or your browser delete them or they expire. Cookies cannot contain harmful code such as viruses.

Does Private Nurse use cookies?

Yes. We use cookies and other similar technologies such as tracking pixels and tags. We use both session cookies and persistent cookies. When you access our domains, we set our own cookies, and we also use third-party cookies such as Google Analytics.

How does Private Nurse use cookies?

Some cookies are linked to your user account and are used to remember that you are logged in and to record your purchases and payments. Others are anonymous and allow us to analyse how our users use our services, even if they are not logged in. When you use our service, we collect and process a range of information. This happens, for example, when you read an article, sign up for our newsletter, register as a user or book a consultation. Some of this information is collected using cookies.

We typically collect and process the following types of information: a unique ID and technical information about your computer, tablet or mobile phone, your IP address, geographical location and which pages you click on.

Authentication:
If you are logged in to privatenurse.dk, we use cookies to show you your personal data.

Security:
Some cookies help us maintain security and detect malicious activity.

Personalisation:
Cookies can also be used to keep track of your personal preferences so that, for example, you can fill in forms more quickly.

Marketing:
We may also use cookies to see how well our marketing works. For example, we can measure whether a user who has read one of our articles is more likely to book a consultation than one who has not. We typically use third-party cookies for marketing purposes.

Analytics:
Cookies allow us to learn how users use our services so that we can prioritise our development resources. For example, do many people use privatenurse.dk from both their computer and their mobile phone?

How are cookies used for marketing?

Cookies and other technology such as tracking pixels and tags help us market our business more effectively to users we believe may be interested in our services. They also help us with analysis and reporting and tell us when you have seen our content.

What can you do if you do not want cookies to be set or want to remove them?

Most browsers let you control how the sites you visit may use cookies.

Please note that if you delete or block cookies, the website may not work as well as it should, and there may be content you cannot access.

Each browser provider has published guidance on how to control the use of cookies in their particular browser.

Which third-party cookies do we use?

Privatenurse.dk uses cookies from third parties, which to varying degrees may include:

• Google
• LinkedIn
• Xmedicus.dk
• one.com
• facebook.dk
• instagram.com
• Simply.com
• GoDaddy.com

Security

We have taken technical and organisational measures to prevent your information from being accidentally or unlawfully deleted, published, lost, impaired or disclosed to unauthorised persons, misused or otherwise processed in breach of the law.

Purpose

We process your personal data for the following purposes:

• Our examinations and treatment of you.
• Communication with or referral to other healthcare professionals, doctors, hospitals or hospital laboratories.
• Communication with you.
  • We also use your information to send you administrative emails and important messages about activity on your account. You cannot unsubscribe from these messages.
  • From time to time, we send emails about new features or other news. You can always unsubscribe from these emails.
  • Complying with our obligations under applicable law, including the EU General Data Protection Regulation, the Danish Data Protection Act and other relevant health legislation, e.g.
  • Duty to document
  • Compliance with the basic principles for processing personal data and the legal basis for the processing
  • Implementing and maintaining technical and organisational security measures, including but not limited to preventing unauthorised access to systems and information, preventing the receipt or distribution of malicious code, stopping denial-of-service attacks and preventing damage to computer systems and electronic communication systems
  • Investigating suspected or known security breaches and reporting them to individuals and authorities
  • Handling enquiries and complaints from data subjects and others
  • Handling inspections and enquiries from supervisory authorities
  • Handling disputes with data subjects and third parties
  • Statistical studies and scientific research

Voluntary provision of data

When we collect personal data directly from you, you provide it voluntarily. You are not obliged to give us this personal data. If you do not provide it, we will not be able to fulfil the purposes above, which in some cases means that we cannot examine or treat you.

Sources

In some cases, we collect personal data about you from other healthcare professionals, e.g. hospitals, your referring doctor etc. We process the information we receive in accordance with this privacy policy.

Disclosure of personal data

To the extent necessary for the specific examination or treatment of you, your personal data will be disclosed to and shared with the following recipients:

• Information is disclosed to other healthcare professionals if this is necessary for a current course of treatment.
• Information is disclosed to other authorities, clinical quality databases, the Danish Vaccination Register, the Danish Patient Safety Authority, the Shared Medication Record, the police, social authorities and Labour Market Insurance to the extent that this is required by applicable law.
• As a patient, you have access to your own information (self-access)
• When patients are referred, information is disclosed to the healthcare professionals to whom the referral is sent.
• When information is reported in connection with billing for patient treatment, it is disclosed to the regional billing offices.
• When discharge summaries are sent, information is disclosed to your own/referring doctor and in certain cases to the receiving/referring hospital.
• In other cases, information is disclosed to relatives or insurance companies.

Anonymous data about your use of the website, which ads you receive and possibly click on, your geographical location etc. is disclosed to third parties to the extent that this information is known. You can see which third parties these are further up the page. The information is used to target advertising. We do not disclose or use your health information for advertising or marketing purposes.

Legal basis for processing and disclosing personal data

The legal basis for collecting, processing and disclosing your personal data is:

• For ordinary patient treatment, general personal data is collected, processed and disclosed under Article 6(1)(c) and (d) of the General Data Protection Regulation, while sensitive personal data is collected, processed and disclosed under Article 9(2)(c) and (h) of the General Data Protection Regulation.
• In addition, we are obliged to process a range of personal data about you in ordinary patient treatment under Chapter 6 of the Danish Authorisation Act, the Executive Order on healthcare professionals’ medical records (the Medical Records Executive Order), in particular §§ 5-10, and Chapter 9 of the Danish Health Act.
• Health information used for further treatment when patients are referred is disclosed under §§ 20-23 of the Agreement on Specialist Medical Care and the Danish Health Act.
• Laboratory samples are reported to hospital laboratories under the rules in the Danish Health Authority’s guidelines on handling paraclinical tests pursuant to the Danish Authorisation Act.
• Information used for billing for patient treatment is sent once a month to the region’s billing office under § 49 of the Agreement on Specialist Medical Care and the Danish Health Act.
• Prescriptions for medicine are sent via the Prescription Server IT service under Chapter 42 of the Danish Health Act and the Executive Order on prescriptions and dose dispensing of medicinal products, in particular Chapter 3.
• Clinical patient data is disclosed to clinical quality databases under §§ 195-196 of the Danish Health Act and the Executive Order on reporting information to clinical quality databases etc. Data may also be disclosed on the basis of your specific consent as a patient.
• Discharge summaries, which are a brief summary of the patient’s medical history and course of treatment, are sent to your own/referring doctor and in some cases to the receiving/referring hospital under Chapter 9 of the Danish Health Act.
• Your personal data is only disclosed to insurance companies with your prior consent, cf. Article 6(1)(a) and 9(2)(a) of the General Data Protection Regulation.
• Your personal data is only disclosed to your relatives with your prior consent under § 43 of the Danish Health Act.
• In the case of deceased patients, certain personal data may be disclosed to the deceased’s closest relatives, the deceased’s general practitioner and the doctor who was treating the deceased under § 45 of the Danish Health Act.

Withdrawal of consent

If the processing of your personal data is based on consent, you have the right to withdraw your consent. Withdrawing your consent does not affect processing carried out before the withdrawal, including any disclosure based on consent.

Use of data processors

Your personal data is processed and stored by our data processors, who store it on our behalf and on our instructions. Our data processors are currently:

• one.com
• XMedicus.dk
• Planday.dk

We keep personal data about you for as long as we need it to fulfil the purposes set out above. However, under the Medical Records Executive Order, we are required to keep it for at least 5 years after the last entry in the record. There may be cases where we need to keep your personal data for longer, e.g. in connection with a complaint or a compensation claim, in which case the information will be kept until the case has been finally concluded.