Falck Healthcare A/S processing of personal data in connection with Falck's Patient Support Program

1. Why does Falck process your personal data in connection with Falck's Patient Support Program? 

To be able to offer you Falck's Patient Support Program, Falck will process personal data about you for various reasons. Here you can see the basis and purposes for which Falck will process your data:

1. Administration of you as a patient in Falck's patient systems.  
2. Receiving, obtaining, and disclosing necessary patient information with healthcare professionals, both internally and externally, regarding your program.
3. Where relevant, to comply with legal obligations such as:
      
   1. To ensure the quality and IT security of Falck's processes and applications.  
   2. To comply with our obligations and your rights under data protection law, including GDPR.  
   3. For us to defend or prove a legal claim.  
   4. To comply with our obligations under Danish health legislation, including the Health Act, the Authorization Act, and the Executive Order on Medical Records.

2. What personal data does Falck process about you?

Falck processes only the personal data about you that is necessary to fulfill the purposes described in section 1 of this privacy policy. These personal data may, to the extent relevant for your specific service, include the following categories of information:

1. Name and address.
2. Contact information, such as phone number, email, etc.
3. Gender, date of birth, and age.
4. Your civil registration number (‘CPR number’).
5. Social, family, and employment circumstances.
6. Health information (e.g., medical record entries, discharge notes, test results, X-ray/scan results, etc.).

3. On what legal basis and for how long does Falck process your personal data?

For Falck to process your personal data for the purposes described under section 1, Falck must have a legal basis for the processing. Relevant legal bases for the processing of personal data are found in the EU General Data Protection Regulation ('GDPR') and in the Danish Data Protection Act.

Falck must also determine how long it is legitimate and proportionate to store your personal data, thereby ensuring that your personal data is never stored by Falck longer than necessary to fulfill the original purpose of the processing.

In accordance with GDPR, Falck uses the following legal bases to process your personal data:

1. Consent and explicit consent, art. 6(1)(a) and art. 9(2)(a).
2. Legitimate interest, art. 6(1)(f).
3. Legal obligation, art. 6(1)(c).
4. Health-related obligation, art. 9(2)(h).

The national legislations that form the basis for Falck's processing and storage of your personal data are:

1. The Danish Authorization Act.
2. The Danish Health Act.
3. The Danish Executive Order on Medical Records.
4. The Danish Data Protection Act.

Falck will process your personal data for different periods, depending on the legal basis for the processing. This period is 5 years.

4. Automated individual decision-making

Your personal data is not processed for the purpose of automated individual decision-making or profiling.

5. Who does Falck share your information with?

Falck will, to the extent necessary and in certain cases only with your consent, share information about you with a number of recipients ('third parties') to be able to offer you a service based on the purposes specified under section 1. These third parties will be independent data controllers with respect to their processing of your personal data.

The third parties we share your personal data with are:

1. Hospital with treatment responsibility for your program.
2. Falck Danmark A/S.
3. The Danish CPR registerdanske CPR-register (under the Ministry of Social Affairs and the Interior).
4. Independent data controllers in special cases, including public authorities (such as the police), other individuals, etc.

In addition to these third parties, Falck will also share your personal data with a number of suppliers ('data processors') who will process your personal data based on instructions from Falck. These data processors are all located in the EU/EEA, and on this basis, no transfer of data to a country outside the EU/EEA ('third country') will occur.

6. Your rights

In connection with Falck's processing of your personal data, you have certain rights that you can exercise if you wish.

You have the right to, among other things:

• access and a copy of the personal data that Falck processes about you.
• within the limits of the law, request Falck to erase the personal data that Falck processes about you.
• rectification of inaccurate or incomplete personal data about you.
• within the limits of the law, restrict Falck's processing of personal data about you.
• data portability.
• object to Falck's processing of your personal data.

You can exercise your rights by contacting Falck via the contact details found under section 7 "Contact details".

In addition to the above rights, you also have the right to lodge a complaint about Falck's processing of your personal data with the national data protection authority in Denmark, 'Datatilsynet' (the Danish Data Protection Agency).

7. Contact details

If you have questions about the processing of your personal data, or if you wish to exercise your rights under applicable law, as described above in section 6, please contact us at +45 70 27 38 57.

You can also contact Falck's Data Protection Officer by sending an email to dpo@falck.com.

Falck Healthcare A/S
Sydhavnsgade 18
2450 Copenhagen SV
Denmark

8. Version history

When changes occur in the processes related to the processing of personal data for Falck's Patient Support Program, this privacy policy will be updated accordingly. The version control for the present privacy policy is shown below.

Your version of the privacy policy will always be the most recently updated.