Private policy for Aleris

Data controller

Aleris Denmark is the data controller responsible for the processing of your personal data and comprises the following companies:

Aleris Hospitaler A/S (CVR no. 71017516)
Aleris Ringsted (CVR no. 25317181)
In-Lab Medico (CVR no. 12505280)
Aleris PP (CVR no. 26850495)

We process the following data
Depending on the specific situation, we may use your Personal Information for the following activities – click on a category to learn more:

1. As a patient at Aleris
2. As a visitor on web and social media 
3. As a member of the CS customer club 
4. As a job applicant at Aleris
5. As an employee at Aleris

Your rights

• You have a right of access to the personal data we process about you
• You have a right to have the personal data we have registered about you rectified and updated
• You have a right to have the personal data we have registered about you erased. If you wish to have your personal data erased, we will erase all data which we do not have a statutory obligation to store.
• If the processing of personal data is based on your consent, you may withdraw this consent in full or in part at any given time

If you have any questions about our processing of your personal data or need more information about your rights, you can contact us at:

Aleris Danmark
Gyngemose Parkvej 66
DK-2860 Søborg
Email: persondata@aleris-hamlet.dk.

Contact details of DPO

Lawyer: Michael Lund Nørgaard
Email: dpo@aleris-hamlet.dk

Security

We protect your personal data and have adopted internal rules on information security that contain measures to protect your personal data from unauthorised disclosure and against unauthorised parties gaining access to or acquiring knowledge about them.
We have established procedures for granting access rights to those of our employees who process your personal data. We control this via logging and supervision. We make regular backups to avoid data loss. We also protect the confidentiality and authenticity of your data by encryption when we send data outside our network.

In the event of a data breach that results in a high risk for you of discrimination, ID theft, financial loss, loss of reputation or other significant inconvenience, we will notify you of the data breach as soon as possible.

Deadlines for erasure and storage of personal data

Medical records
All medical records will be stored in accordance with “Executive Order on medical records processed by authorised medical personnel”.
Patient data must be retained for at least 10 years in accordance with the Executive Order relating to medical records.

Accounting material
Invoices relating to patients, are created and formed as part of the patient record and are not deleted until the retention period after the record order has expired.
The purpose of this is to ensure that we comply with health legislation and in the event of a compensation case to be able to see who has paid for your treatment, as this is decisive for whether it is us or others who are liable for compensation.
Accounting material that is not part of a patient record is deleted when the storage period of 5 years plus the current year after the Accounting Act has expired.

Personal data relating to employees
All information relating to employees, such as employment contracts, records relating to hours worked / holiday / absence, etc. will be retained for 5 [years] after the year in which the employee resigns (5 years plus the current year).

Other personal data
All other personal data will be deleted or anonymised when it is no longer relevant for the purpose for which it was collected.

Complaints body

You may complain about our processing of your personal data to the Danish Data Protection Agency.
See contact details and more about how to complain: www.datatilsynet.dk
You can also contact us at persondata@aleris-hamlet.dk

Updated 11 april 2024