Falck Sundhedshjælp and Falck Sundhedshjælp Basis

In connection with the health solutions Falck Sundhedshjælp and Falck Sundhedshjælp Basis (‘Falck Sundhedshjælp (Basis)’), Falck Healthcare A/S ('Falck'), as the data controller, collects and processes certain personal data about you. In this privacy policy, we describe the processing, use, and disclosure of your personal data.

1. Why does Falck process your personal data in connection with Falck Sundhedshjælp (Basis)?

To offer you Falck Sundhedshjælp (Basis), Falck will process personal data about you for various reasons. Here you can see the basis and purposes for which Falck will process your data:

1. Creation, administration, and booking – including sending booking confirmations via SMS and/or email.
2. Receipt and collection of information internally and externally in connection with case processing.
3. Examination, diagnosis, and treatment of you - online/telephone as well as  physical consultation with Falck's own healthcare professionals.
4. Disclosure to external partners in connection with the delivery of services.
5. Recording of telephone conversations when contacting our Health Advisory Center,
6. Ensuring you have the option for online management of your bookings.
7. With your consent, collection and disclosure of information about your case/treatment to your insurance company, etc.  
8. Satisfaction and effectiveness measurements. 
9. Anonymization in connection with reporting and quality assurance. 
10. Invoicing.
11. Where relevant, to comply with legal obligations such as:  
    1. Ensuring the quality and IT security of Falck's processes and applications. 
    2. Complying with our obligations and your rights under data protection law, including GDPR.
    3. Defending or proving a legal claim.  
    4. Complying with our obligations under Danish healthcare legislation, including the Health Act, the Authorization Act, and the Record-Keeping Order.  

2. What personal data does Falck process about you?

Falck processes only the personal data about you that is necessary to fulfill the purposes described in section 1 of this privacy policy. These personal data may, to the extent relevant to your specific service, include the following categories of information:

1. Your name and address
2. Contact information, such as phone number, email, etc.
3. Gender, date of birth and age
4. Your personal identification number 'CPR number'
5. Social, family, and employment-related information, etc.
6. Identification information, such as employee number
7. Health information (e.g., medical records, discharge notes, test results, X-ray/scan results, etc.)
8. Information regarding children and/or spouse/partner in cases where coverage for them has been selected.

3. On what basis and for how long does Falck process your personal data?

For Falck to process your personal data for the purposes described in section 1, Falck must have a legal basis for the processing. Relevant legal bases for processing personal data are found in the EU General Data Protection Regulation (GDPR) and the Danish Data Protection Act. Falck must also determine how long it is legitimate and proportionate to retain your personal data, ensuring that your personal data is never stored by Falck longer than necessary to fulfill the original purpose of the processing.

In accordance with GDPR, Falck uses the following legal bases to process your personal data:

1. Consent and explicit consent, Art. 6(1)(a) and Art. 9(2)(a)
2. Legitimate interest, Art. 6(1)(f)
3. Legal obligation, Art. 6(1)(c)
4. Legitimate interest, Art. 6(1)(f)
5. Healthcare obligation, Art. 9(2)(h)

The national legislations that form the basis for Falck's processing and retention of your personal data are:

1. The Health Act
2. The Insurance Mediation Act
3. The Data Protection Act

Falck will process your personal data for different periods, depending on the legal basis for the processing. The general rule is that we retain your personal data throughout your coverage period, and after the termination of the agreement, we delete the data according to the retention criteria below. This period will vary depending on the service you receive.

4. Automated Individual Decisions

Your personal data is not processed for the purpose of automated individual decision-making or profiling.

5. Who does Falck share your information with?

Falck will, to the extent necessary and in some cases only with your consent, share information about you with a number of recipients ('third parties') to be able to offer you a service based on the purposes specified in section 1. These third parties will be independent data controllers regarding their processing of your personal data.

The third parties we share your personal data with are:

1. Falck Danmark A/S
2. Insurance intermediaries, employers, and subscription owners
3. AM Trust
4. Falck's Treatment Network (External health clinics and treatment centers, HejDoktor, etc.)
5. Public authorities or equivalent

In addition to these third parties, Falck will also share your personal data with a number of suppliers ('data processors') who will process your personal data based on instructions from Falck. These data processors are primarily located within the EU/EEA, but there may be transfers to countries outside the EU/EEA ('third countries'), such as India and the USA, as Falck uses IT services with support functions in these countries. In cases where your personal data is transferred to third countries, you can see on what basis such a transfer takes place in the table under "read more about Falck's sharing of your personal data." Read more about Falck's sharing of your personal data below”.

6. Your rights

In connection with Falck's processing of your personal data, you have certain rights that you can exercise if you wish. You have the right to:

• Access and obtain a copy of the personal data that Falck processes about you
• Request the deletion of the personal data that Falck processes about you, within the limits of the law
• Rectify incorrect or incomplete personal data about you
• Restrict Falck's processing of your personal data, within the limits of the law
• Data portability
• Object to Falck's processing of your personal data

You can exercise your rights by contacting Falck via the contact information provided in section 7 "Contact Details."

In addition to the above rights, you also have the right to file a complaint about Falck's processing of your personal data with the national data protection authority in Denmark, 'Datatilsynet.'

7. Contact details

If you have questions about the processing of your personal data or if you wish to exercise your rights under applicable law, as described above in section 6, please contact fhcsupport@falck.dk

You can also contact Falck's Data Protection Officer by sending an email to dpo@falck.com.

Falck Healthcare A/S
Sydhavnsgade 18, 2450 Copenhagen SV
Denmark

8. Version history

When changes occur in the processes related to the processing of personal data for Falck Sundhedshjælp (Basic), this privacy policy will be updated accordingly. The version control for this privacy policy is shown below.

Your version of the privacy policy will always be the most recently updated.