Privacy policy
Limiceph AS complies with the General Data Protection Regulation (GDPR).
This privacy policy explains how Limiceph AS collects and uses personal data, and it provides an overview of what happens to your personal data when you visit our website or register as a client in our clinic.
Personal data is information that can be linked to an identifiable individual.
This can be, for example, name, address, telephone number, e-mail address and IP address.
Limiceph AS, represented by the general manager, is the data controller for the company’s processing of personal data.
Where day-to-day responsibility has been delegated, this is stated under each individual point.
The delegation only covers the tasks and not the responsibility.
The statement contains information you are entitled to when information is collected from our website (section 19 of the Personal Data Act) and general information about how we process personal data (section 18, first paragraph of the Personal Data Act).
Processing of personal data on www.hodepine-info.no
Flyt Design AS has the day-to-day responsibility for Limiceph AS’s processing of personal data on hodepine-info.no, unless otherwise stated below.
For personal data related to booking an appointment online, please see the section on electronic health record provider.
Flyt Design AS is our supplier for the development and maintenance of the website.
Hostinger is the operating supplier for hodepine-info.no.
Information collected in connection with the operation of the website is stored on separate servers operated by the supplier.
Only Limiceph AS, Flyt Design AS and Hostinger have access to the information collected.
A separate data processing agreement between Limiceph AS and Flyt Design AS and Hostinger regulates what information the supplier has access to and how it should be processed.
Web statistics
Limiceph AS collects de-identified information about visitors to hodepine-info.no.
The information is processed in de-identified form.
De-identified means that we cannot trace the information we collect back to the individual user.
The purpose of this is to compile statistics that we use to improve and further develop the information offered on the website.
Examples of what the statistics provide answers to are how many people visit different pages, how long the visit lasts, which websites users come from and which browsers are used.
We use the analysis tool Google Analytics on our website.
This is an open source tool (GPL) that is installed on a separate server at the operating provider.
Limiceph AS manages the information from Google Analytics.
The information from this tool is not disclosed by Limiceph AS to other parties.
Nor do the tools collect IP addresses.
For more information about Google Ads and Google Conversion Tracking, you can view Google’s privacy policy here.
Information cookies
Cookies are small text files that are placed on your computer when you download a website.
Storage of data and processing of this data is not permitted unless the user has been informed of and has given their consent to the processing.
The user must be informed of and approve what information is being processed, the purpose of the processing and who is processing the information, cf. section 2-7b of the Electronic Communications Act.
Section 2-7b of the Electronic Communications Act.
The following cookies are used on www.hodepine-info.no:
Our publishing solution (WordPress) places a session cookie (a temporary cookie) on your computer when you visit hodepine-info.no.
This is automatically deleted when you leave the site.
You can configure your browser to inform you about the use of cookies so that you can decide on a case-by-case basis whether to accept or reject a cookie.
Alternatively, your browser can be configured to automatically accept cookies under certain conditions or to always reject them, or to automatically delete cookies when you close your browser.
Disabling cookies may limit the functionality of this website.
How to manage cookies (nettvett.no)
Marketing and sales
Newsletters
It is voluntary to receive newsletters.
The basis for processing is the consent of the individual, unless otherwise specified.
Limiceph AS sends out newsletters approximately 2-4 times a year via e-mail.
In order for us to send e-mails, you must register an e-mail address and consent to receiving newsletters.
Campaign monitor is the data processor for the newsletter.
The email address is stored in a separate database, is not shared with others and is deleted when you unsubscribe.
The email address is also deleted if we receive feedback that it is not active.
Social media
We want to be accessible to our customers and potential customers in social media and therefore have a profile on Facebook, Instagram, LinkedIn and Youtube.
The purpose of these pages is to make our services, contact information and opening hours available to our customers/patients and potential patients.
If you wish to contact us using these channels, we encourage you not to share personal data.
If you have a question that involves sharing your sensitive personal data (e.g. information about your health), we recommend that you contact your clinic by phone instead so that we can help you.
Sharing stories on Instagram and Facebook
If you allow us to share your post about us, it will be temporarily stored in our account for 24 hours before it is permanently deleted.
Sharing of posts from hodepine-info.no
When you share a post, information is entered there and then with the online community you choose.
How the online community in question handles the data further is regulated by your agreement with the online community.
However, information that you have shared a post is not stored with us.
Publishing photos and videos on headache-info.no and in socialmedia
Photos and videos taken for Limiceph AS are owned by Limiceph AS.
Written consent is obtained from the people in the pictures.
Consent can be withdrawn at any time by contacting us by phone at 93249568.
or send an email to martin@hodepine-info.no to have the image/video deleted from our website and social media.
Patient stories
If we publish patient stories, written consent has been obtained from the patient in advance.
Consent can be withdrawn at any time.
Please contact us by phone at 93249568.
or send an email to martin@hodepine-info.no to have your patient story deleted from our website and social media.
Patient surveys
Limiceph AS uses Surveymonkey to conduct satisfaction surveys.
They are sent out by SMS approx.
1-2 times a year if you have agreed to participate and given us a phone number.
We will always inform you about the purpose of the survey, and the surveys are anonymous.
Limiceph AS will not share the information with others or use the information for purposes other than those stated.
We inform that sensitive information that can be linked to individuals must not be stated in the survey.
Journal program and archive system
Limiceph AS has affiliated clinics that use different medical record systems, and the clinics are responsible for them as their own companies.
Most of them use Physica or Pasientsky’s journal programs.
Both players are journal software providers that are GDPR-approved and with which the respective clinics have data processing agreements.
A risk analysis of cloud-based services is carried out at each clinic represented by Limiceph AS.
First-time form
Before your first consultation, you will be asked to fill in a first-time form with personal data and contact information.
We need your date of birth and address to be able to create a medical record for you, which we are required to do by law.
We need your address to send out invoices.
We need your e-mail address if you wish to receive exercises by e-mail, but this is voluntary and based on your consent.
This information will be stored in the journal system.
The form will then be archived in our archive system, together with other documents you may provide to your therapist.
other documents you may provide to your therapist (e.g. results of diagnostic imaging, referrals from specialists, etc.)
Different types of personal data are registered in the archive system.
We register information relating to your health in order to be able to provide sound and good healthcare services.
Registration, storage and retention take place in accordance with archive legislation, with a double lock.
Communication with GP/specialist
Based on your consent, your therapist at Limiceph AS can retrieve information from your GP or your X-ray institute.
The purpose of this is for us to be able to provide sound and good health services.
You will be given the opportunity to consent to this on the initial form you fill out before the first consultation.
Deletion of information in the EHR system
As healthcare professionals, we have a duty to document.
This means that we are required by law to keep the necessary information for accounting and records, cf.
Hpl.
chap.
8 “Regulations on patient records”.
The history of your previous purchases of services and information subject to record-keeping obligations with us can therefore not be deleted.
You have the right to access all other information related to you and the right to have it deleted if you wish. We have introduced routines to ensure that this happens in line with current regulations.
Online booking
When you click on book an appointment at www.hodepine-info.no, you will be transferred to a booking page provided by either Pasientsky or Aspit/Physica.
Both of these companies have a data processing agreement with the clinic you book an appointment with (without Limiceph’s responsibility), and are GDPR-approved.
Depending on which medical record system the clinic you visit uses, i.e. whether the service is provided by Pasientsky or Aspit/Physica, you can save your information to avoid having to log in again next time.
The purpose is only to make the booking page more user-friendly for you, the information is not used for anything else.
One of our online booking providers requires you to log in with a bank ID every time, for security reasons.
Phone and email
Limiceph AS uses your telephone number to contact you regarding agreements you have with us, invoices or insurance information, if you wish to use your health insurance with us.
The clinic owner has the day-to-day responsibility for the processing of personal data in this context.
All our employees who are authorized health professionals have a duty of confidentiality.
Our employees who are not authorized health professionals have signed a declaration of confidentiality.
Relevant information that emerges from telephone conversations is logged.
This information is then processed as described above (see “Journal program and archive system”).
Limiceph AS’s employees also use e-mail in general dialog with internal and external contacts.
When communicating with insurance companies, only de-identified information of patients, case numbers or initials are used.
The individual therapist is responsible for deleting messages that are no longer relevant, and at least once a year review and delete unnecessary content in the e-mail box.
Upon resignation, the e-mail accounts are deleted, but some relevant e-mails will normally be transferred to colleagues.
Sensitive personal data is not sent by email.
Please note that regular e-mail is unencrypted.
We therefore do not encourage you to send confidential, sensitive or other confidential information via e-mail.
Phone calls (phone number from and to, as well as the time of the call) are logged in our call center.
This log is necessary for the administration and operation of the system, as well as being used as a basis for statistics at an aggregate level.
The complete log is deleted after one year.
In addition, employees have an overview of the latest calls on their phones.
If a phone call is linked to an individual case, a note may be written after the call, which is then logged.
There is no other systematic registration of telephone calls where the caller can be identified.
Our clinics use different telephony providers: Phonero.
Data processing agreements will be established with all suppliers.
The information is not shared with anyone other than the above.
Information about employees
Limiceph AS processes personal data about its employees in order to administer salaries and personnel responsibilities. The legal basis follows from the Personal Data Act § 8, first paragraph and § 8 a), b) or f) as well as § 9 a), b) and f). The general manager or accountant has the day-to-day responsibility for this. Information necessary for the payment of salaries is registered, such as basic data, salary level, time registration, tax percentage, tax municipality and union affiliation. Other information about employees is linked to their work instructions and the organization of their work.
In addition, information is registered in connection with key management of entry and exit and information about access management in the IT system.
The information is collected from the employees themselves.
The data is only disclosed in connection with salary payments and other statutory disclosures.
Deletion routines for personnel data follow the Accounting Act and the Archives Act.
Information about name, position and work area is considered public information and can be published on the authority’s website.
Entitlements
Anyone who asks is entitled to basic information about the processing of personal data in a company in accordance with section 18, paragraph 1 of the Personal Data Act.
paragraph.
Limiceph AS has provided this information in this statement, and will refer to it in the event of any requests.
Those who are registered in one of Limiceph AS’s systems have the right to access their own information.
The person also has the right to request that incorrect, incomplete or information Limiceph AS does not have access to process be corrected, deleted or supplemented.
Claims from the data subject must be answered free of charge and within 30 days at the latest.
Contact us by phone at 93249568.
General Manager: Martin Herneblad-Due
Postal address: Smuget 1, 3.
floor, 1383 Asker
Last updated June 2024