About

Information on the processing of personal data

The GDPR or Data Protection Regulation is a law that applies across the EU from 25 May 2018. It is intended to give us all better control over the handling of data about us and to increase security when processing our personal data. Personal data is any data that can be directly or indirectly linked to an individual. The Data Protection Regulation is supplemented by other rules that apply, for example, to the requirements for patient records (Patient Data Act) and the laws on secrecy and confidentiality.

​

The following information is intended to explain how Otrén Psykologi AB handles your personal data. If you have any questions about our processing of personal data, please contact Martin Otrén.

 

Purpose and legal basis for the processing

Otrén Psykologi AB uses the information you provide to help the company provide you with good and safe care. It is also used in systematic and continuous patient safety work. During the period of care, the information is continuously entered into the medical record system. The information also serves as a source of information for you as a patient.

​

The company's legal basis for processing your personal data is that healthcare is a task of the so-called public interest, i.e. an activity that is fundamental to the functioning of our society. Licensed psychologists are required by law to document care through records (including the Patient Data Act). My business, like all care providers, is under the supervision of the Swedish Health and Care Inspectorate (IVO), and in the event of their supervision, patient information fulfils an important function.

 

Storage time

Otrén Psykologi AB will delete your personal data in accordance with the provisions of the Patient Data Act, i.e. at the earliest ten years after the last journal entry.

 

Your rights

You have the right to obtain information about the processing of your personal data. You also have the right to have your personal data corrected or deleted with the restrictions resulting from the Patient Data Act, to request the restriction of data processing in certain circumstances, and to object to processing in certain circumstances.

You may also be entitled to compensation if your personal data in the medical record is processed in breach of the provisions of the Patient Data Act.

 

Recipients of data

Information is only provided to external parties if you consent to it in a particular case. However, there may be specific situations where we are required by law to disclose information, such as when children are suffering.

​

Obligation to provide information according to the law

In specific cases, Otrén Psykologi AB may be legally obliged to disclose information. Such an obligation to provide information applies following the rules in:

• The law on social services when a child suffers

• The Social Security Code, concerning information needed for a decision in a social security case.

 

Privacy and security rules for the data

All patient information, both that which you provide and that which we use, for example in the medical record, is subject to the rules on professional secrecy arising from the provisions of the Patient Safety Act.

 

The right to lodge a complaint

You have the right to lodge a complaint with the Swedish Data Supervisory Authority about the company's processing of your personal data.

 

Information is required by law

Under the Patient Data Act and the National Board of Health and Welfare regulations, requirements are set for specific content in the patient record. The requirements that are set include us having to enter information about your identity, essential information about the context of the care, the assessments that the organisation is undertaking, the plans that are being made, and the actions that are being implemented. Also, we must indicate what information we have provided to you as a patient, about the choice of treatment options, certificates and referrals issued, and incoming and outgoing documents.