Privacy policy

Data controller

Hudkræftklinikken.dk ApS is the data controller for the processing of the personal data we receive about you.

If you have any questions about how we process your information, you are welcome to contact us.

When you contact us

If you write to us using the contact form or by email, we process the information you give us: your name, email address, phone number if provided, and your message. If your message describes a skin change or a health problem, that is health information.

We use the information to reply to your enquiry and, if relevant, to find an appointment for you. The form is sent to us as an email via our web hosting provider.

Legal basis: Article 6(1)(b) GDPR (to be able to enter into an agreement with you) and Article 6(1)(f) GDPR (our interest in replying to enquiries). For health information, Article 9(2)(h) GDPR (healthcare treatment).

Please do not write your Danish personal identification number (CPR number) or detailed health information in the contact form. We would rather take that when we talk to you.

When you book an appointment

Our online booking is provided by patientportal.dk. When you book an appointment, the information you enter in the booking system is registered, such as your name, contact details and the time you choose. The provider processes the information on our behalf as a data processor.

Legal basis: Article 6(1)(b) GDPR (to be able to book and carry out your appointment) and Article 9(2)(h) GDPR for any health information.

When you are a patient with us

As a healthcare provider, we are required to keep patient records. In your patient record we register information about you and your treatment, such as your name, CPR number, contact details, examinations, diagnoses, pictures of skin changes, test results and treatment.

Legal basis: Article 6(1)(c) GDPR (legal obligation) and Article 9(2)(h) GDPR (healthcare treatment), in accordance with the Danish Health Act (sundhedsloven) and the rules on keeping patient records. We also process payment information in accordance with the Danish Bookkeeping Act (bogføringsloven).

Who do we share information with?

We only disclose information about you when it is necessary for your treatment, when you have given your consent, or when the law requires it. This may for example be to:

• your GP or the doctor who referred you
• laboratories that examine tissue samples
• public hospitals, if you need further treatment – for example for melanoma
• your Danish region, if you are treated under the Danish extended free choice of hospital scheme
• your insurance company, if your health insurance pays for the treatment and you have given your consent
• public authorities and registers, when we are required to report to them

We also use suppliers who process information on our behalf (data processors): our web hosting and email provider (Hostinger), our booking system (patientportal.dk), our patient record system and – if you have given your consent – Google Analytics. We have data processing agreements with them.

How long do we keep your information?

• Enquiries via the form and email: We delete them when your enquiry has been dealt with, and no later than after 12 months – unless the information forms part of your patient record.
• Patient records: At least 10 years after the last entry, as required by the rules on keeping patient records.
• Accounting records: 5 years after the end of the financial year, as required by the Danish Bookkeeping Act.
• Statistics from Google Analytics: 14 months.

The website and cookies

We use Google Analytics to produce statistics on how our website is used – for example which pages are visited and where visitors come from. This helps us improve the site. Google Analytics sets cookies and is only switched on if you say yes to statistics in our cookie banner.

If you say yes to marketing, we use Google Ads to measure whether our ads work – that is, whether a visit that starts with a click on one of our ads leads to a booking, a phone call or a message through the contact form. Google Ads is only told that it happened – not what you wrote or what information you gave in the booking calendar.

Legal basis: Your consent, under Article 6(1)(a) GDPR and the Danish Executive Order on cookies (cookiebekendtgørelsen).

The information is processed by Google Ireland Limited as a data processor and may be transferred to Google LLC in the USA. Google is certified under the EU-U.S. Data Privacy Framework, which provides a lawful basis for the transfer. We keep the statistics for 14 months. We do not use the information to show you targeted ads.

We store your choice in your browser for 12 months, so you are not asked on every visit. This is not a cookie, and the information is not sent to us. You can change or withdraw your consent at any time under Cookie settings at the bottom of the page.

The fonts on this site are stored on our own server, so no information about you is sent to anyone else when a page loads.

The booking calendar on the Book an appointment page is loaded from patientportal.dk, which may set the cookies needed for the booking to work. When you confirm a booking, the calendar tells our website that it happened – but not what you entered – so we can count bookings in our statistics and, if you have said yes to marketing, in Google Ads.

If you click a link to other websites, such as Google Maps or sundhed.dk, their own rules on personal data apply.

Your rights

Under the GDPR you have a number of rights. You have the right to:

• access the information we process about you
• have incorrect information corrected
• have information deleted when we are no longer required or have reason to keep it
• have the processing of your information restricted
• object to the processing
• receive the information you have given us yourself in a commonly used format (data portability)
• withdraw your consent, if the processing is based on consent

We cannot delete information in your patient record before the retention period has expired, but you can always access your record. Contact us at info@hudkraeftklinikken.dk or +45 30 14 00 14 if you would like to exercise your rights.

Complaints

If you are unhappy with how we process your information, please contact us first. You can also complain to the Danish Data Protection Agency (Datatilsynet). If you live outside Denmark, you can also complain to your local data protection authority.