Medicus privacy policy
This privacy policy explains how we collect, use and protect your personal information, including health information. Personal information is any information that can be linked to you as an individual. Health information is any information that is linked to your health.
The General Data Protection Regulation (GDPR) is intended to give you, as an individual and customer, better control over the information you provide. In order to perform our job, we collect and process certain information about you as a customer. Read more about this here.
Processing of information about you
Medicus has many different tasks. Our main tasks are patient care and in this connection we process personal data/health information about you as a patient.
We have a statutory obligation to keep patient records. The Patient Records Act and the Health Personnel Act with associated regulations set requirements for what the record should contain, how the record should be secured, what options there are to correct or delete information, and what rights the data subject has to access their own information in accordance with the Patient and User Rights Act.
The patient record is electronic and one record is created per patient. This includes information about who you are (name and social security number) and contact information. In addition to this, we record information about your health condition and document the health care you have received and been offered. The information may be collected through your conversations with healthcare professionals or through examinations and treatment you undergo with us. It may also be collected from others who have treated you, but this is after your consent.
Your electronic patient record consists of information stored in several systems, which are designed to ensure proper processing of health information. For example, there are separate systems for handling images of embryos or statistics from treatment. We have an overview of which systems we use to process health information.
How we handle the information
When you contact us via the website, whether it is to ask a question, book an appointment or something else, we take care of information such as name and contact information. Most of our forms generate an electronic message that ends up in a secure zone in the Norwegian Health Network. We normally follow up on this by telephone. To the extent that you contact us via our email address, we encourage you not to send us sensitive information.
We have some specially developed forms where we ask for more information. These are located in various places on the website, such as under “Book an appointment” and “Contact us”. These are secured according to security level 4 which is recommended within the norm for information security.
We will never sell personal information, and only share information in cases where it is necessary to use a third party, such as a subcontractor, to provide the service you request.
Cookies and website statistics
Through Google Analytics, we use cookies to obtain information about how our websites are used by those who visit. This allows us to further develop the site and ensure that it is as user-friendly as possible. The information is anonymized, and we only get access to the number of visitors, where they come from and which pages they have visited.
You can choose to block cookies in your browser, without noticing any difference in the functionality of our site.
We use Facebook pixel tags and this means that it places a cookie on your computer that can send a notification to Facebook to inform Facebook that you have visited the website to which the Facebook pixel tag is linked. This technology can be used to display messages from Medicus to you or people similar to you in your Facebook “feed”. Use your privacy settings on Facebook to limit your exposure to such marketing.
If you would like to know more or access your cookie preferences, please visit this page – how we use cookies.
Newsletter
When you sign up for our newsletter, you consent to us storing your first name and email address. We also ask about the topics you are interested in. For privacy reasons, we ask for as little as possible, normally just your first name and email. Here we use the third-party solution HubSpot, and the information is also stored there. Login to Hubspot is secured with two-factor authentication. Beyond that, the information is safely stored with us. And it will be until you (unless you) unsubscribe. You do this by using the link in the newsletter or by contacting us.
If you receive an email from Medicus today, it should be because you have signed up for our newsletter.
Contact form
If you send a message via our contact form, we will store this information in our system. This is so that we can provide you with the best possible follow-up and service.
Who is responsible for processing?
The CEO of Medicus is the data controller for personal data in connection with the use of our website and newsletter, or when you are in contact with us in other ways. We do what we can to follow the rules that apply at any time. We also have a separate data protection officer.
How are we allowed?
Our processing of your personal data may be based on one or more of the following grounds: your consent, performance of an agreement with you, compliance with a legal obligation or for purposes related to a legitimate interest.
Your rights
The new regulations give you the right to access, correct and delete the personal information we have stored about you. Please note that the right to delete does not apply to all information and that there are other laws that override this right. Please contact the CEO if you wish to do this – or if you have any questions.
Updating the privacy policy
We reserve the right to adjust this statement if we change our practices. Our website provider has a version log that makes it possible to see which changes occurred when.
Last updated March 30, 2023 by Magnus Finset Sørdal, CEO.
