Privacy Policy
Nordstrandklinikken is very concerned about information security. This privacy policy describes how we collect and process personal data.
Personal data is information and data that can be linked to you as an individual. This could be your name, phone number, email address, or your health information.
The use of personal data is regulated by several laws, including the Personal Data Act, the Privacy Regulation, the Patient Records Act, the Health Registry Act, the Health Personnel Act, the Accounting Act, the Patient and User Rights Act, and the Marketing Act.
Treatment and responsibility
Nordstrandklinikken is responsible for processing your personal data. All employees at Nordstrandklinikken confidentiality.
Data processor
A data processor is an external company that processes your personal data on behalf of Nordstrandklinikken (for example, a digital medical record system). The data processor has signed a data processing agreement with Nordstrandklinikken and may only process personal data on behalf of Nordstrandklinikken . Nordstrandklinikken ensures that all data processors are bound by a duty of confidentiality.
What data we collect
Your first contact with Nordstrandklinikken usually by phone, email, or by submitting a contact form. We store the information you provide to us.
When you submit the contact form to us, your personal data will be processed by Nordstrandklinikken's healthcare personnel.
We use a form solution on our website. This is used by anyone who wishes to contact the clinic by means other than telephone, email, or in person.
All information submitted via this form has been entered by the user of their own free will and is intended for us at the clinic. We would never recommend entering health details or other sensitive personal information in such forms (either on this website or others), but if the user does so, we consider this to be consent for us to carry out the necessary processing of this information. Upon submission, the user will be required to read through a request to omit such information and check a box to indicate that they understand the relevant content.
The submitted data will be forwarded to our email inbox, where employees will read it and initiate any further necessary contact. After this, the submitted information will either become part of the patient record or be deleted if it is not necessary. We do not use it for anything other than its intended purpose at the time of submission.
If you have any questions regarding privacy or personal data, please send your inquiry to us by email atnordstrandklinikken.
During a physical consultation, we collect data about your health so that we can provide appropriate healthcare. When you arrive at the clinic, you will be asked to fill out a health information form where you answer questions about your health that are relevant to your treatment. After the consultation, the form will be scanned into your medical record and shredded.
Many people who live far away would like to have a video consultation. For video consultations, we use an encrypted and approved solution for use in the healthcare sector, where you log in with BankID. This consultation is recorded in the same way as a physical consultation.
Before any operation, an encrypted contract will be sent via a secure solution using Bank ID. When returned to us, this will be scanned into your medical records.
In the event of surgery, an anesthesia journal will be created, which will be logged on the day of the operation and scanned into your digital journal. Information about your relatives who pick you up will not be stored, but will be shredded on an ongoing basis as this is not critical information.
The results of any X-ray examinations, blood tests, and tissue samples are scanned into your medical record and then destroyed.
What data is shared
The data processor stores relevant data on behalf Nordstrandklinikken .
Nordstrandklinikken , only after agreement with the patient, send referrals for X-rays, blood tests, tissue samples, sick leave certificates, etc. in cases where this is relevant.
Nordstrandklinikken does not use any data for marketing or newsletters.
Public authorities
If required by law or if there is suspicion that a crime has been committed in connection with the use of our services, the information we have stored about you may be disclosed to public authorities.
Correction and deletion of personal data
You have the right to access your personal data. If you would like to know what personal data about you is stored in our systems, please contact the clinic.
Correction
It is important that the information we have about you is correct and up to date. If you discover an error, we encourage you to contact us so that the information can be corrected. With regard to information in patient records, access to correct information is limited by the rules in the Health Personnel Act.
Deletion
You can also contact us if you want information to be deleted. When it comes to information in patient records, access to have information deleted is very limited due to regulations in the Health Personnel Act.
As a general rule, we will not store personal data for longer than is necessary to fulfill the purpose of the processing and our legal obligations. Different rules apply to personal data stored in patient records.
Marketing and newsletters
Social media
Nordstrandklinikken has its own Facebook page and Instagram account. For privacy reasons, we do not communicate with patients via these channels. Patients are asked to contact us by email, contact form, or telephone.
Newsletters and advertising
Nordstrandklinikken does not use newsletters, and we will not use your contact information for anything other than communicating with you.
Images
Some patients wish to give permission for images to be used, for example, for consultation purposes. Those who wish to do so must sign a written statement confirming that this information will only be used for the purposes specified by the patient.
No images will be used without the patient's permission, and you can request that we delete this data at any time. We do not publish any images without written consent. Images are stored in encrypted form on hard drives.
Data portability
You have the right to data portability. This means that you have the right to receive your personal data in a machine-readable format. When we process health data, we are subject to several laws and regulations, and this will be a somewhat more complicated and complex issue.
About cookies
Nordstrandklinikken.no, like most other websites, uses cookies. These are small text files that are placed on your computer when you download a website. We use these for various purposes, including statistics, technical monitoring, and underlying technical functionality.
The storage of information collected by cookies and the processing of this information is not permitted unless the user has been informed and has given their consent to the processing. The user must be informed of and approve what information is being processed, the purpose of the processing, and who is processing the information.
This does not pose any security risk to you, but you can refuse consent to the storage of cookies at any time.
Statistics and analysis
We use cookies to, among other things,
- Record and calculate traffic and usage patterns on the website (statistics).
- Enable the website to recognize regular visitors from one visit to another and between websites.
- Customize content and functionality on the website.
- Segment and target marketing so that ads are tailored to the target group to which the user belongs and irrelevant marketing can be reduced.
- Develop and improve the website.
A cookie does not contain any personal information and cannot be used to identify individual users.
Examples of data that may be stored include:
- How many people visit the various subpages on the website.
- How long the visit to the various pages lasts.
- Which websites (external and internal) the user comes from when they arrive at a new page.
- Which browser the user is using on their computer (this allows us to ensure that the content works well for everyone, regardless of browser).
Subcontractors
We use Google Analytics and the various products it offers for analysis and marketing (Google Ads).
Google service cookies record the user's IP address, providing insight into the user's movements on the web. The data collected is processed at an aggregate level, meaning that all data is combined into a group and not processed individually.
The information collected by Google is stored on Google servers in the United States. The information received is subject to Google's privacy policy.
