Legal
Privacy Policy
What we collect, why we collect it, how long we keep it and the rights you have over it. Written to be read rather than to satisfy a checklist.
Background
EuroEyes processes personal data in accordance with the EU General Data Protection Regulation (GDPR). This policy describes how EuroEyes collects and processes personal data and fulfils its data-protection obligations.
Changes to this privacy policy
EuroEyes reserves the right to amend this privacy policy. If the policy changes, you will be informed of how the change affects the processing of your personal data.
1. Processing in connection with patient care
EuroEyes keeps records of all patient care, following the provisions of the Danish Health Act and the Danish Health Authority's regulations on record-keeping. In connection with the examination, diagnosis and treatment of you as a patient, EuroEyes' clinics collect and process a range of personal data about you.
2. Types of personal data we process
General categories: We always store your name, address, telephone number, civil registration (CPR) number and gender. Where relevant, we also note your email address, family and social relations, work relations and education.
Special (“sensitive”) categories: Health information such as medical-record text, test results, visual-field tests, images of the retina and scan results. Where relevant to diagnosis and treatment, we may also note sexual relationships, race or ethnic origin.
Payment information: including payment and credit-card details (card number, CVV code and expiry date), invoice details and bank account number.
3. Purpose of processing
EuroEyes' clinics process your personal data to examine, diagnose and treat you safely, to keep the medical records required by law, to administer your appointments and payments, and to communicate with you about your care.
4. Legal basis
Our processing is based on the performance of your treatment agreement, our legal obligations under Danish healthcare law, our legitimate interests, and – where applicable – your consent.
5. Sharing your data
We treat your information confidentially and do not use it for marketing. We share it only where necessary for your care or to meet legal requirements – for example with clinical staff, or trusted processors acting on our behalf under strict agreements.
6. Retention
We keep personal and medical data only for as long as necessary for the purpose and as required by Danish healthcare and accounting law.
7. Your rights
Under GDPR you have the right to access, correct, delete or restrict the use of your data, to object to processing and to data portability. You may also lodge a complaint with the Danish Data Protection Agency (Datatilsynet).
8. Contact
To exercise your rights or ask any questions about your data, contact EuroEyes ApS, CVR 20406135, Per Henrik Lings Allé 4, 3., 2100 Copenhagen Ø – [email protected] or 7027 4553.
This English version is a translation of EuroEyes' Danish privacy policy for patients; the Danish version remains the master document and should be confirmed before publication.
Expert care at EuroEyes