This privacy policy explains how we collect, use and protect your personal information, including health information. Personal information is any information that can be linked to you as an individual. Health information is any information that is linked to your health.
The General Data Protection Regulation (GDPR) is intended to give you, as an individual and customer, better control over the information you provide. In order to perform our job, we collect and process certain information about you as a customer. Read more about this below.
Medicus has many different tasks. Our main tasks are patient care and in this connection we process personal data/health information about you as a patient.
We have a statutory obligation to keep patient records. The Patient Records Act and the Health Personnel Act with associated regulations set requirements for what the record should contain, how the record should be secured, what options there are to correct or delete information, and what rights the data subject has to access their own information in accordance with the Patient and User Rights Act.
The patient record is electronic and one record is created per patient. This includes information about who you are (name and social security number) and contact information. In addition to this, we record information about your health condition and document the health care you have received and been offered. The information may be collected through your conversations with healthcare professionals or through examinations and treatment you undergo with us. It may also be collected from others who have treated you, but this is after your consent.
Your electronic patient record consists of information stored in several systems, which are designed to ensure proper processing of health information. For example, there are separate systems for handling images of embryos or statistics from treatment. We have an overview of which systems we use to process health information.
When you contact us via the website, whether it is to ask a question, book an appointment or something else, we take care of information such as name and contact information. Most of our forms generate an electronic message that ends up in a secure zone in the Norwegian Health Network. We normally follow up on this by telephone. To the extent that you contact us via our email address, we encourage you not to send us sensitive information.
We have some specially developed forms where we ask for more information. These are located in various places on the website, such as under "Book an appointment" and "Contact us". These are secured according to security level 4 which is recommended within the information security norm.
We will never sell personal information, and only share information in cases where it is necessary to use a third party, such as a subcontractor, to provide the service you request.
Our website uses cookies and similar technologies, such as tracking pixels and local storage in the browser. The first time you visit medicus.no, you choose in the consent banner which categories you allow: necessary, statistics and marketing. Necessary cookies are required for the website to function and cannot be opted out. Statistics and marketing are only activated if you consent, and the consent only applies to the purpose you have approved. You can change or withdraw your consent at any time on the page how we use cookies — there you will also find a complete and continuously updated overview of the cookies on the website.
We use Google Tag Manager to control which of the tools below are loaded, in line with your consent choice.
Statistics. We use Google Analytics 4 to understand how the website is used: how many people visit us, which pages they read, where they come from and what they do on the site — for example, whether an appointment is started. The statistics are used at an aggregate level to improve the website.
Marketing. Medicus advertises on Facebook/Instagram, Snapchat and Google. If you consent to marketing, tracking pixels from these platforms are used on our website:
When you consent to marketing, your browser shares information about your visit with these platforms — including which pages on medicus.no you visit. Meta, Snap and Google are independently responsible for their further use of the information, as described in their own privacy statements. The tracking only applies to use of our websites: the advertising platforms do not have access to your patient record or information you provide to us as a patient.
In addition to the consent option, you can block or delete cookies in your browser settings.
When you sign up for our newsletter, you agree to us storing your first name and email address. We also ask about the topics you are interested in so that the content is relevant to you. For privacy reasons, we ask for as little as possible.
For the registration form and sending of newsletters, we use the service Brevo. Brevo stores the information on our behalf and cannot use it for its own purposes. We can see whether the newsletters are opened and which links are clicked, and use this to make the content more relevant. The information is stored until you unsubscribe. You can do this via the link in the newsletter, or by contacting us.
If you are receiving a newsletter from Medicus today, it should be because you have signed up yourself.
If you send a message via our contact form, we will store this information in our system. This is so that we can provide you with the best possible follow-up and service.
The CEO of Medicus is the data controller for personal data in connection with the use of our website and newsletter, or when you are in contact with us in other ways. We do what we can to follow the rules that apply at any time. We also have a separate data protection officer.
Our processing of your personal data may be based on one or more of the following grounds: your consent, performance of an agreement with you, compliance with a legal obligation or for purposes related to a legitimate interest.
The Privacy Policy gives you the right to access, rectify and delete the personal information we have stored about you. Please note that the right to delete does not apply to all information and that there are other laws that override this right. Please contact the CEO if you wish to do this – or if you have any questions.
We reserve the right to adjust this statement if we change our practices. Our website provider has a version log that makes it possible to see which changes occurred when.
Last updated September 18, 2026 by Magnus Finset Sørdal, CEO.