GDPR and personal data management.

GDPR.

GDPR, also known as the Data Protection Regulation, is a piece of legislation that aims to increase control over how information about individuals is handled and at the same time improve security around the processing of their personal data. Personal data includes any type of information that can be used to identify a specific person. In addition to the GDPR, there are also other regulations, such as those relating to patient records and privacy laws. More detailed information on how Mentera - therapy for us men (hereinafter "the business") handles personal data follows below.

Purpose.

The business uses the information you provide to ensure that you receive high-quality and safe care. These tasks are also included in the continuous process of patient safety work. During the period of care, the information is regularly registered in our record system and it is also intended as a source of information for you as a client.

By law, licensed psychotherapists are required to document the care they provide. It is important to point out that the operation is under the supervision of the Inspectorate for Care and Care (IVO). In the event of supervision by IVO, patient data play a central role.

Rights.

You have the right to receive information about how your personal data is processed. According to the Patient Data Act, you also have the right to request correction of your personal data, to request that it be deleted, to request restrictions on the processing in certain situations and in certain cases to object to the processing.

​

Disclosure.

Data is shared with third parties only if you give your consent. However, there are certain specific situations when the business may be obliged by law to disclose information. This obligation arises under the following laws:

• The Social Services Act, if it concerns the well-being of a child. The Social Insurance Code, when it concerns information required for decisions in social insurance matters.

Rules.

Regarding all patient data, regardless of whether it comes from you or is used by the business in the medical record, it is subject to confidentiality rules according to the regulations of the Patient Safety Act.

Complaint.

You have the opportunity to file a complaint about how the business handles your personal data. These complaints must be submitted to the Swedish Data Protection Authority (IMY).

Claim.

The Patient Data Act and the regulations issued by the National Board of Health and Welfare specify the necessary content requirements for the patient record. According to these rules, it is mandatory for the business to include the following information in the record: your identity, essential information about your medical history, assessments made by the business, planned and implemented actions. Furthermore, it is required that the business notes what information has been shared with you.

Journal system.

The business uses Kaddio AB's journal system. Kaddio AB is in turn responsible for handling the personal data collected in Kaddio.

Storage time.

The business will delete your personal data in accordance with the provisions of the Patient Data Act, which means that the data will be deleted no earlier than ten years after the last journal entry.