Privacy Policy

Information about My Processing of Personal Data I Collect about You.

1. I Am the Data Controller – how Do You Contact Me?

Bindevævs-Akademiet By Katrine Wennerwald
Gammel Strandvej 22 c 1.th.
2990 Nivå

CVR: 25152573

Phone: 22 36 25 46
kontakt@bindevaevsterapi.dk

2. The Purposes and Legal Basis for Processing your Personal Data

I process your personal data for the following purposes:
As a physiotherapist, I am required to obtain your CPR number and full name. I record this in your paper file, where your visits to the clinic are registered. Here I record your symptoms/treatment requests, as well as my considerations and what treatment you have received, in order to provide the best treatment course.
Additionally, I register your contact information to provide services such as appointment reminders and cancellations due to illness.
In connection with a Rolfing course, I offer to take before and after photos so we can see together what has happened to your posture during the course.

3. The legal basis for our processing of your personal data follows from:

Article 6, paragraph 1, letters b and f of the Data Protection Regulation. In certain cases, we also process information after obtaining your consent. You will have been specifically informed about this when we obtained the consent.

Legitimate interests pursued by the processing
As mentioned above, our processing of your personal data occurs ((partly)) based on the balancing of interests rule in Article 6, paragraph 1, letter f of the Data Protection Regulation. The legitimate interests that justify the processing are to be able to offer efficient organization of our tasks for you, including management of appointments and time bookings, registration of completed treatments with a view to establishing treatment courses.

4. Categories of Personal Data

I process the following categories of personal data about you:
General categories of personal data:

1. Full name, CPR number, possible address, phone number, possible email address, possible SE number/CVR number, company address, work area, possible marital status and children. Possible photos of you.

Special categories of personal data (“sensitive personal data”):

2. Health information in the form of medical records with a list of treatment courses.

5. Recipients or Categories of Recipients

Advisors and data processors.

6. Transfer to Recipients in Third Countries, Including International Organizations

I will not transfer your personal data to recipients outside the EU and EEA.

7. Storage of your Personal Data

1. Your contact information is stored as long as it is your wish.

2. Your paper medical record with special personal data is stored according to law securely for five years after your last visit, after which it is destroyed.

3. Before and after photos are stored by me separately – without registration of personal data.

As soon as you have received them by email after the course, I delete them from my devices.

You can choose to have the photos deleted earlier at any time.

8. The Right to Withdraw Consent

Consent is obtained regarding sensitive personal information and photos.

According to law, I must keep your medical record for five years after your last visit. You can choose to have contact information and photos deleted at any time. This is done by contacting me using the contact information shown in point 1.

9. Your Rights

Under the Data Protection Regulation, you have a number of rights regarding my processing of information about you. If you want to exercise your rights, you must contact me.

Right to access information
You have the right to gain insight into the information I process about you, as well as a number of additional details.

Right to rectification (correction)
You have the right to have incorrect information about yourself corrected.

Right to erasure
In special cases, you have the right to have information about you deleted before the time for general deletion occurs.

Right to restriction of processing
In certain cases, you have the right to have the processing of your personal data restricted. If you have the right to restrict processing, we may only process the information in the future – apart from storage – with your consent, or for the purpose of establishing, exercising or defending legal claims, or to protect a person or important societal interests.

Right to object You have the right in certain cases to object to my lawful processing of your personal data.
You can also object to processing of your information for direct marketing.

Right to data portability
In certain cases, you have the right to receive your personal data in a structured, commonly used and machine-readable format and to have this personal data transferred from one data controller to another without hindrance.

You can read more about your rights in the Danish Data Protection Agency’s guide on data subjects’ rights, which you can find at datatilsynet.dk.

10. Complaint to the Danish Data Protection Agency

You have the right to file a complaint with the Danish Data Protection Agency if you are dissatisfied with the way we process your personal data. You can find the Danish Data Protection Agency’s contact information at datatilsynet.dk.