Private policy for Aleris
Aleris Denmark respects the right of individuals to have their data processed lawfully, and our data processing will always be in accordance with the applicable legislation and follow our vision to provide services of the highest quality.
Data controller
Aleris Denmark is the data controller responsible for the processing of your personal data and comprises the following companies:
Aleris Hospitaler A/S (CVR no. 71017516)
Aleris Ringsted (CVR no. 25317181)
In-Lab Medico CVR no. 12505280
We process the following data
When you are a patient at Aleris Hospitaler
The purpose of the processing of your personal data is to enable us to provide you with the best possible treatment. In addition, Aleris must be able to document your report, examination and treatment in accordance with the rules in the "Authorization Act" (da: "Autorisationsloven") and the "Record Keeping Order" (da: "Journalføringsbekendtgørelsen").
Your personal data are processed securely and health data are processed in accordance with the "Authorization Act", "The Health Act" (da: "Sundhedsloven") and ‘Executive Order on Authorised Healthcare Professionals’ Patient Case Notes and Records’. Photo documentation in connection with cosmetic treatment/surgery is done in accordance with the ‘Executive Order on Cosmetic Treatment’.
Employees at Aleris Hospitaler are subject to a duty of confidentiality. This means that, as a general rule, they must not exchange data about your health with other parties without your consent. Your consent to exchange of data is connected with your current course of treatment. Exchange of health data is often essential for successful treatment and a consistent course of treatment. Data may only be obtained/disclosed to the extent necessary. Therefore, our staff will always assess the relevance of data that are to be disclosed.
When you use our hospitals, we collect the following personal data:
- General data: Name, address information, email, telephone numbers
- Civil registration (CPR) number
- Sensitive data:
- Health data
- Pre-imaging and post-imaging in connection with cosmetic treatment
- Any ethnic or religious data
- Social circumstances (e.g. if there is a need of home care or municipal rehabilitation)
We may exchange your personal data with:
- Insurance companies if the data processing is paid by these
- General practitioner or specialist physician
- Public hospitals
- Other healthcare professionals, for example private hospitals, physiotherapists, municipalities
- Regions in connection with invoicing if your examination or treatment at Aleris is paid by the public sector
- Internally connected companies at Aleris
Your health journal on Sundhed.dk
When starting a new course at Aleris Hospitals, you must decide whether Aleris may pass on your health information to your health record on Sundhed.dk.
Aleris may only pass on your health information to Sundhedsjournalen if you give your consent, in accordance with Article 6 (1) of the Personal Data Ordinance. Article 9 (1) (a) and 2 letter a and the Health Act § 41, paragraph. If you give your consent, you and other healthcare professionals will after examination / treatment at Aleris Hospitals be able to see your medical records notes from Aleris on your Health Journal at Sundhed.dk. The purpose of sending the information to your Health Journal is to create and complete picture of all your health information from both public and private hospitals.
You can withdraw this consent at any time. After this, Aleris will stop sharing your personal information with your Health Journal on Sundhed.dk. Your revocation of this consent does not affect the processing already carried out before you withdrew your consent. Journal information that has already been sent to Sundhed.dk, Aleris will thus not be able to withdraw, but you have the opportunity to block your data for public and / or private hospitals by privately marking this information at sundhed.dk. You can read more about the processing of your personal information at sundhed.dk at the following link.
Especially regarding psychological journal notes
Journal notes prepared in connection with an interview / consultation with a psychologist do not send to Sundhed.dk.
From and to whom can Aleris automatically collect and disclose information without your consent?
Healthcare professionals and administrative staff internally at Aleris have access to your personal data and health data to the extent that they participate in your treatment or contribute to documentation and invoicing of your course of treatment.
It may be necessary in connection with your treatment here to obtain or pass on relevant health information before and during your visit to Aleris. For example, it may be necessary to look up information in previous records on you that we hold or to request a copy of relevant information from your records, including X-ray or scan images from clinics where you have been treated. We will generally attempt to obtain your consent before doing this.
There may be cases in which Aleris discloses your health data without your consent to ensure a successful and consistent course of treatment if you are transferred to a public hospital for further treatment.
A copy of your case notes is automatically sent to your own doctor after an outpatient visit or surgery at Aleris Hospitaler. If you do not want this, you must notify Aleris Hospitaler.
If the region pays for your examination or treatment, a copy of your case notes will be sent to the referring hospital department. In addition, information about current courses of treatment in the form of diagnostic codes and examinations or operations performed is sent to the regional office in connection with invoicing to the region.
If there is specific information that you do not want to be disclosed, or if there are any healthcare professionals or authorities that you do not want to be informed, please let us know.
The Danish Health Care Act imposes an obligation on the hospital to report information about treated patients to the Danish Health Authority’s National Patient Register (LPR), see ‘Executive Order on Doctors’ Reporting to the National Patient Register of Treatment Performed in Private Hospitals and Clinics’, see ‘Executive Order on Reporting of Approved Clinical Quality Databases and Disclosure of Data to the Danish Health Data Authority’.
The data will never be transferred to third countries (non-EU member states/EEA).
Worth knowing
Prior to your treatment with us, you receive information about and consent to your examination and treatment with us. You will also be asked to consent to the disclosure and collection of information about your health and other confidential information necessary for your treatment. Your consent is given for your current course of treatment and entered in your medical record. In addition, you may be asked to consent to the exchange of information for purposes other than your processing.
Consent to exchange of information for purposes other than treatment is valid for maximum one year.
You can always withdraw your consent in full or in part. You do this by contacting Aleris staff. Your revocation of your consent does not affect the processing that has already been carried out before you withdrew your consent.
Your consent is covered by health legislation. This means that, regardless of whether you withdraw your consent, we are still obliged to keep your record for the statutory retention period after the Executive Order on Records.
Access to patient records
Section 42 a, para. 1 of the Danish Health Act states that when looking up information in electronic systems to the extent necessary, health personnel may obtain information on the health of the patient and other confidential information when this is necessary in connection with the current treatment for the patient.
According to section 42 a, para. 4 of the Danish Health Act, other persons who are subject to a duty of confidentiality in accordance with the legislation may obtain information as stated in para. 1 when looking up details in electronic systems if this is necessary with regard to the overall current treatment of the patient, or if this is necessary for the purpose of providing technical assistance regarding health personnel’s obtaining of information pursuant to the regulation, insofar as the management at the treatment site have granted permission.. Therefore, personnel working as secretaries can both enter data and execute lookups in electronic systems containing health information, etc.
At Aleris Hospitaler, the following health personnel are given permission to electronically obtain the necessary/relevant information concerning patient health and other confidential information for use for the current treatment:
- Dieticians
- Psychologists
- Physiotherapists
- Chiropractors
- Laboratory technicians
When visiting our websites, Facebook or Instagram
When you use our website, we place cookies. See our Cookie Policy here
C&S Universe
By joining C&S Universe as a member, you accept that Aleris Hospitaler A/S stores your profile details as well as usage history, and we also store information about your preferences to enable us to target relevant marketing for you. These data are stored in accordance with the legislation on sensitive personal data.
You always have a right of access to the personal data we have registered about you and to request us to have them rectified or erased if they are inaccurate, incomplete or irrelevant. You can also do this yourself on your personal profile via a link in our emails.
Your data will not be disclosed to any companies or persons outside C&S Universe without your consent.
If you apply for a job with Aleris Hospitaler
If you apply for a job with us, we process the following personal data:
- General data: Name, address information, email, telephone numbers
- CV and application
- Civil registration (CPR) number
- Any photo
- Information about criminal record
The purpose of the data processing is to offer a flexible recruitment procedure in which data security is given top priority. Applications will be erased within six months after the recruitment process has been completed. However, you may contact us if you want to have your personal data erased before then. We will not disclose your personal data to others.
If you are employed with Aleris Hospitaler
We process the following personal data:
- General data: Name, address details, email, telephone numbers
- CV and application
- Civil registration (CPR) number
- Any photo
- Information about criminal record
See Section 12 of the Danish Data Protection Act (Databeskyttelsesloven)
Aleris may disclose the relevant master data regarding the employment relationship to affiliated companies within or outside the EU for use for the above purposes. Some jurisdictions do not provide the same protection of personal data as EU/EEA member states. When transferring your data to such jurisdictions, Aleris-Hamlet will ensure that the transfer complies with any applicable statutory requirements and that an adequate level of protection is provided for your data.
Aleris may also disclose the relevant data regarding your employment if this is found to be necessary in connection with Aleris submission of quotations for work to be performed for third parties. The data may also be disclosed to third parties in connection with a third party’s investment in or purchase and sale of Aleris or part thereof. In connection with disclosure of data, a duty of confidentiality will be imposed on the data recipient regarding these data.
Aleris is the data controller for its own processing of payroll and staff data about the company’s employees. As a member of the Confederation of Danish Employers (DA), Aleris is obliged to participate in DA’s statistics on payroll and HR conditions.
Participation in these statistics means that Aleris-Hamlet discloses personal data about the employees’ payroll and HR conditions to DA. The data are disclosed via the payroll administrative systems and DA’s website indberetning.da.dk. DA is the data controller for the processing of the disclosed personal data for statistical purposes.
Trusted employees at Aleris answer questions about the employees’ payroll and HR conditions on enquiries from DA. DA makes summaries of the data quality available to Aleris on access-restricted pages of indberetning.da.dk, which contain personal data.
If Aleris uses the web-based tool www.NetStat.dk, trusted employees at Aleris may access statistics via this tool, including personal data about own employees in Mine tal (My figures). In order to comply with Aleris obligations under the Danish Act on Statistics Denmark (Lov om Danmarks Statistik), DA discloses the personal data to Statistics Denmark in unprocessed form.
Your rights
- You have a right of access to the personal data we process about you
- You have a right to have the personal data we have registered about you rectified and updated
- You have a right to have the personal data we have registered about you erased. If you wish to have your personal data erased, we will erase all data which we do not have a statutory obligation to store.
- If the processing of personal data is based on your consent, you may withdraw this consent in full or in part at any given time
If you have any questions about our processing of your personal data or need more information about your rights, you can contact us at:
Aleris Danmark
Gyngemose Parkvej 66
DK-2860 Søborg
Email: persondata@aleris-hamlet.dk.
Contact details of DPO
Advokat Michael Lund Nørgaard
mail: dpo@aleris-hamlet.dk
Security
We protect your personal data and have adopted internal rules on information security that contain measures to protect your personal data from unauthorised disclosure and against unauthorised parties gaining access to or acquiring knowledge about them.
We have established procedures for granting access rights to those of our employees who process your personal data. We control this via logging and supervision. We make regular backups to avoid data loss. We also protect the confidentiality and authenticity of your data by encryption when we send data outside our network.
In the event of a data breach that results in a high risk for you of discrimination, ID theft, financial loss, loss of reputation or other significant inconvenience, we will notify you of the data breach as soon as possible.
Deadlines for erasure and storage of personal data
Medical records
All medical records will be stored in accordance with “Executive Order on medical records processed by authorised medical personnel”.
Patient data must be retained for at least 10 years in accordance with the Executive Order relating to medical records.
Bookkeeping material
Invoices relating to patiens, are created and formed as part of the patient record and are not deleted until the retention period after the record order has expired.
The purpose of this is to ensure that we comply with health legislation and in the event of a compensation case to be able to see who has paid for your treatment, as this is decisive for whether it is us or others who are liable for compensation.
Accounting material that is not part of a patient record is deleted when the storage period of 5 years plus the current year after the Accounting Act has expired.
Personal data relating to employees
All information relating to employees, such as employment contracts, records relating to hours worked / holiday / absence, etc. will be retained for 5 [years] after the year in which the employee resigns (5 years plus the current year).
Other personal data
All other personal data will be deleted or anonymised when it is no longer relevant for the purpose for which it was collected.
Complaints body
You may complain about our processing of your personal data to the Danish Data Protection Agency.
See contact details and more about how to complain: www.datatilsynet.dk
You can also contact us at persondata@aleris-hamlet.dk
Updated 14 january 2020
