Privacy Policy

DATA PROTECTION POLICY

CAMIRA, operated by Statsautoriseret Fodterapeut Joanna Szemela (hereinafter referred to as the “Clinic”), processes personal data in accordance with Regulation (EU) 2016/679 of the European Parliament and of the Council (GDPR) and the applicable Danish Data Protection Act (Databeskyttelsesloven). This means, among other things, that the Clinic is required to inform you about what personal data it processes and what rights you have in connection with such processing.

1. DATA CONTROLLER

CAMIRA

Joanna Szemela

Hvidtfeldtsvej 5,

8700 Horsens

E-mail: joanna.szemela@gmail.com

CVR 44019248

Statsautoriseret Fodterapeut: ID. 0FT3Z

2. PERSONAL DATA AND PURPOSE

In connection with your treatment at the Clinic, including appointment bookings, maintaining medical records, communication with your relatives or, where applicable, legal guardian, and cooperation with other healthcare professionals, such as physiotherapists, doctors, nurses, orthopedic shoemakers and other specialists, the Clinic processes and stores, to the extent necessary to provide healthcare services, the following categories of personal data:

• first and last name,
• residential address,
• e-mail address,
• telephone number,
• CPR number,
• health information,
• information about relatives,
• information about guardians.

The legal basis for processing personal data is:

• Article 6(1)(c) GDPR – compliance with a legal obligation to which the data controller is subject,
• Article 9(2)(h) GDPR – processing of health data for the provision of healthcare,
• where applicable, Article 6(1)(f) GDPR – the legitimate interests of the data controller.

The processing of personal data is necessary for maintaining medical records and providing healthcare services. The Clinic is required to collect, process and retain medical records in accordance with applicable law, including documenting information concerning the patient’s health in accordance with regulations governing the maintenance of medical records by authorized healthcare professionals.

Due to applicable legal requirements, the Clinic is also required to use the CPR number when maintaining the patient’s medical records.

The Clinic may also process the CPR number for the purpose of ensuring unambiguous identification of the patient and in cases required by law, in particular in connection with communication with public authorities and other healthcare professionals, in accordance with the applicable rules concerning the processing of CPR numbers.

3. PERSONAL DATA PROCESSED THROUGH THE WEBSITE

Strona internetowa Kliniki została zbudowana w oparciu o system WordPress. W związku z korzystaniem ze strony internetowej Twoje dane osobowe mogą być przetwarzane za pośrednictwem formularza kontaktowego, systemu rezerwacji wizyt CBIT oraz usługi Google Maps.

Contact form

If you use the contact form, the Clinic processes the data voluntarily provided by the user, in particular their name, e-mail address, telephone number and the content of the message. This data is used solely for the purpose of responding to the submitted enquiry or contacting the user. Data provided through the contact form is stored only for the period necessary to handle the enquiry.

Appointment booking system

Appointments are booked through the CBIT system. When making an appointment, the Clinic processes the data necessary to arrange and provide the appointment, in particular the first and last name, telephone number, e-mail address, CPR number and other information provided by the patient in connection with the provision of healthcare services. This data is processed in accordance with applicable law and data protection regulations.

Google Maps

The website uses Google Maps to enable users to easily locate the Clinic and plan their route. Use of this service may involve the processing by Google of technical data, such as IP address, device information or user location data, in accordance with the principles set out in Google’s privacy policy.

Personal data processed through the website is used only to the extent necessary to fulfil the stated purposes and in accordance with Regulation (EU) 2016/679 of the European Parliament and of the Council (GDPR) and the applicable Danish Data Protection Act (Databeskyttelsesloven).

4. RECIPIENTS AND DATA PROCESSORS

Your personal data is processed by the Clinic and by data processors acting on its behalf, solely to the extent necessary to fulfil the purposes described in this policy. Your data will, where necessary, be disclosed, for example, to public authorities, other healthcare professionals, including doctors, nurses, physiotherapists, orthopedic shoemakers and others, as well as persons renting treatment rooms at the Clinic and other podiatrists with whom the Clinic cooperates in connection with your treatment.

Your personal data may also be disclosed to your relatives or, where applicable, your legal guardian. In addition, your personal data may be disclosed to your insurance company if you have health or sickness insurance, for example through “danmark”.

Data will be disclosed on the basis of applicable law or, where required by law, on the basis of your consent.

Your personal data may also be disclosed to our cooperating partners if such disclosure is appropriate or necessary for your treatment at the Clinic.

In connection with the creation and maintenance of your medical records in the Clinic’s IT systems, your data will, to the extent necessary, be disclosed to data processors acting on behalf of the Clinic: CBIT (a system for clinic management and patient record keeping) and Microsoft 365 (e-mail system).

5. RIGHT OF ACCESS, RECTIFICATION, ERASURE, RESTRICTION OR OBJECTION

You have the right to obtain access to the information that the Clinic has registered about you. Upon your request, the Clinic will provide a copy of the personal data being processed, to the extent provided for by the GDPR.

You have the right to request the rectification of inaccurate or incomplete personal data and, in cases specified by the GDPR, to request restriction of its processing or its erasure.

The right to erasure may be restricted where the law requires medical records to be retained for a longer period. The Clinic may not delete or alter the content of medical records in a manner contrary to applicable law. Any additions or corrections to medical records may only be made in accordance with the rules governing the maintenance of medical records by authorized healthcare professionals.

You may also object to the processing of your personal data in cases provided for by the GDPR. If an objection to data processing or a request to restrict processing concerns information necessary for providing your treatment, the Clinic may not be able to continue providing healthcare services.

In accordance with the GDPR, there may be situations in which the Clinic is not required to comply with a specific request if the restriction of such a right follows from applicable law.

If you wish to obtain:

• access to your personal data,
• rectification of your data,
• restriction of its processing,
• submit an objection or other concerns regarding the processing of your data,

please contact CAMIRA at: joanna.szemela@gmail.com.

6. DATA PORTABILITY

In certain cases, you have the right to receive your personal data or transfer it to another data controller.

7. RETENTION PERIOD

Medical records are retained for the period required by applicable law. After this period has expired, the data is deleted in accordance with the applicable rules concerning the retention and deletion of medical records.

8. TRANSFER OF DATA OUTSIDE THE EUROPEAN ECONOMIC AREA AND AUTOMATED DECISION-MAKING

The Clinic does not transfer personal data to countries outside the European Economic Area (EEA) or to international organizations.

The Clinic does not use automated decision-making, including profiling, as referred to in Article 22 of Regulation (EU) 2016/679 of the European Parliament and of the Council (GDPR).

9. COMPLAINT

If you believe that the processing of your personal data violates the GDPR or applicable law, you have the right to lodge a complaint with the Danish Data Protection Agency (Datatilsynet):

Datatilsynet

Carl Jacobsens Vej 35, 2500 Valby, Denmark

Telephone: +45 33 19 32 00

E-mail: dt@datatilsynet.dk

https://www.datatilsynet.dk