Patient Privacy Policy

Processing of Information

In connection with our examination, diagnostics, and treatment of you as a patient, Dr. Lisbeth Bonde, as data controller, collects and processes personal data about you. We are obliged to do this under Chapter 6 of the Danish Authorisation Act and the Journal Keeping Executive Order.

This privacy policy describes how the clinic processes, uses, and discloses your personal data.

Types of Data

Dr. Lisbeth Bonde collects and processes the following types of personal data (to the extent relevant to you):

• General categories: Name, address, email address, telephone number, civil registration number (CPR), gender, family and social relations, work relations, and education.
• Special categories (sensitive data): Health information (e.g. journal entries, lab results, tests, X-rays, scans, etc.), sexual orientation, race or ethnic origin, and religious beliefs.

Purpose

We process your personal data for the following purposes:

• Clinical examination, diagnosis, and medical treatment
• Preparation of medical certificates and reports for authorities or insurance companies
• Communication with or referrals to other healthcare professionals, hospitals, or laboratories
• Medicine prescriptions and pharmacy orders
• Reporting to clinical quality databases
• Billing and settlement purposes with the region
• Compliance with data protection (GDPR) and healthcare legislation.

Voluntary Disclosure

Providing your personal data to us is voluntary, but necessary. If you choose not to share this information, we may not be able to fulfill the purposes above, including our ability to examine, diagnose, or treat you as a patient.

Sources

In some cases, we receive medical data about you from other healthcare professionals (e.g. hospital discharge summaries or electronic health records). We process all incoming information in accordance with this privacy policy.

Disclosure of Personal Data

To the extent necessary for your medical diagnostics and treatment, your personal data will be shared with:

• Other healthcare professionals involved in your active treatment plan.
• RKKP (quality databases), Patient Safety Authority, Health Data Authority (FMK).
• Regional billing offices (for treatment settlement).
• Pharmacies and the Medicines Agency when issuing prescriptions.
• Relatives or insurance firms (solely with your prior consent).

Use of Data Processors

Your personal data is processed and stored by our trusted system providers on behalf of the clinic:

• Novax (Electronic Health Records - EHR)
• DAK-E (Digital care plans)
• DMDD, Webreq, and Webpatient (Laboratory order and results systems)

Retention Period

We keep your personal data as long as necessary. However, according to the Danish Journal Keeping Executive Order § 15, we are legally obliged to store medical records for a minimum of 10 years after the latest entry. In some instances, it may be kept longer (e.g., during ongoing complaints or insurance disputes).

Your Rights

Within the limits of Danish law, you have the right to:

• Access your medical records and data.
• Request rectification of incorrect details (note: deletion of medical journals is prohibited by law; only corrections and addendums can be made).
• File a complaint with the Danish Data Protection Agency (Datatilsynet).