Privacy Policy


In Valida Health's privacy policy you can read about how we handle your personal and health information and on what basis this happens. In addition, the privacy policy provides information about what special rights you have as a registered user in relation to the processing of your personal and health information.

Who are we?

Valida Health is a private clinic and laboratory company. We perform medical treatments, including preventive treatments, and advanced molecular analysis for both private individuals, companies and the public healthcare sector.

Our address and contact information are:

Valida Health ApS

Strandvejen 130B

2900 Hellerup

Denmark

Phone: +45 31 40 22 44

CVR: 41344806

What is your personal and health information used for?

Valida Health collects and processes personal and health information from individuals as part of our diagnostic, prognostic, clinical and scientific tasks as well as our sales and marketing efforts. Personal and health information about individuals will therefore be processed when you contact us or become a customer of Valida Health.

The following policy applies to the processing of personal and health information that takes place in connection with Valida Health's website, the performance of biological analyses, treatments and any inquiries to Valida Health.

When personal and health information is processed in other systems where Valida Health is the data controller, please refer to the separate information texts.

When you, as a private individual or company, visit Valida Health's website, cookies are used for statistical purposes to create an overview of how many visitors there are on the website and which parts of the website are visited.

Valida Health processes personal data about you in connection with inquiries and in connection with diagnostic tasks, treatments and other healthcare services that concern you or your company.

When you write to us or enter into an agreement to perform diagnostics and biological analyses, your inquiry and your personal and health information are registered in our electronic case and document management system and electronic health record. You will also receive electronic correspondence from us in the form of emails. If you wish to unsubscribe from newsletters, you can always do this by clicking "unsubscribe" at the bottom of the email.

When you purchase treatments and analyses from Valida Health, information is collected in the form of name, email, telephone number, biological gender, address, contact information and CPR number as well as information about the specific inquiry, diagnosis and treatment, your biological and genetic data information. We process and store this information securely and encrypted in accordance with GDPR regulations, the Danish Health Act and the Retention Order. We will obtain medical information about our clients for our assessments. This means that our medical staff will have access to and obtain your medical records.

When you become a client of Valida Health, an encrypted electronic health record is created and stored on our secure servers with your data in it. We use the data for our precision analysis so that we can provide the best possible clinical health advice tailored to you. Your data, together with our other client data, large populations and clinical databases, makes this possible. It allows us to conduct real-time scientific research and translate it into evidence-based and easy-to-understand personalized health recommendations for you. When you become a client of Valida Health, you agree that your medical data will be accessed, collected and used for scientific research and in clinical practice to provide the best treatment options for you and our other clients.

Legal basis

The legal basis for the processing of your information in connection with the newsletter is the General Data Protection Regulation, Article 6(1)(a) - consent.

The legal basis for the processing of your information in connection with the necessary collection of data for carrying out biological analyses follows from the General Data Protection Regulation, Article 6(1)(f) - legitimate interest in carrying out biological analyses, documenting correct handling of the process and compliance with the law, scientific research and clinical practice as a legitimate interest in providing you with a test result, interpretation and health advice.

The legal basis for the processing of your information in connection with the patient record follows from the General Data Protection Regulation, Article 6, paragraph 6, no. 1, letter c - legal obligation and 9, paragraph 2, no. 9, letter h - medical diagnosis and treatment, consent as described in the Health Act, §15, paragraph 1, and the Retention Order, §15, paragraph 1.

The legal basis for the processing of your information in connection with the transfer of data to the Danish public healthcare system, the Danish Patient Safety Agency and the State Serum Institut follows from the General Data Protection Regulation, Article 6(1)(c) - legal obligation and Article 9(2)(i) - public interest in the area of ​​public health.

A) Our interest in processing information about you in connection with carrying out biological analysis and health advice, as we would otherwise not be able to do so.

B) Our interest in documenting your information so that we can comply with applicable laws and regulations.

For processing based on consent, you have the right to withdraw your consent, but this will not affect processing that has already taken place before the withdrawal of consent.

You can revoke your consent by contacting us via email or telephone.

Categories of personal and health information

Regarding general personal data in connection with inquiries, Valida Health will process your name, contact information and the personal data you provide in the inquiry.

Special personal data (health information) in connection with the performance of biological analyses, Valida Health will process your name and the personal and health information necessary for the performance of the biological analysis, including email, mobile phone number, address, CPR number, date of birth, biological gender, medical history and other relevant health information, including questionnaires, the result of your test(s), biological data, infection status, genetic data, diagnosis and prognosis and medication prescriptions.

Are there other recipients of your information?

Valida Health transfers health data to your treating physician and the public health record system. Data will be limited to only the personal and health information that is necessary and required as part of the proper performance of our specific clinical and diagnostic tasks for you or your company.

In addition, Valida Health transfers biological samples to our collaborating laboratories for analysis and information to our external data processors, who analyze data for us, and host our clinical and scientific software as well as our electronic medical record systems. Anonymized data will be used internally for scientific research as well as for internal and external quality control.

We do not sell, license or distribute your data to anyone, except for the controlled and secure transfer to our collaborators, entities and data processors where we have legitimate purposes for your correct processing and analysis, and only when we have reliable data sharing agreements in place, with the sole purpose of providing you with the best possible treatment and accurate diagnostic advice.

Genetic analysis

For all genetic analyses, separate consent agreements are always obtained. Before deciding to have a genetic analysis, you should always carefully consider 1) the impact and ethical considerations that a genetic analysis may have for yourself, and 2) the impact and ethical consequences it may have on family members who may not wish to receive information that you may provide them in connection with a discovery, and 3) whether you wish to receive information about secondary findings. You will always be asked both verbally and in writing, separate from this Privacy Policy, before any genetic analysis, to decide on these three important questions. If you change your mind later, you can always contact us and change your mind, in cases where it is still possible.

Biological samples

Biological samples that are transferred are generally always safely disposed of after analysis is complete, with the exception of certain cases where we will retain samples for a shorter period of time in order to reanalyze them without having to take new samples. In some cases, we will ask if we can retain your sample for our biobank if we have specific ongoing scientific studies. You will always be asked clearly and separately and can always say no if you do not wish to participate in these studies.

Transfer to recipients in third countries, including international organisations

We transfer your personal data to recipients outside the EU and EEA if necessary for your processing and analysis of results. This includes laboratories, clinics and hospitals as well as external data processors located in the UK, the US and Switzerland. The category of data includes sensitive personal data and health data, biological and scientific data obtained or generated through processing, examination and analysis. For the UK and Switzerland, the European Commission has made an adequacy decision on the level of protection in these countries, which ensures that your data is stored securely and handled in accordance with applicable regulations. The same applies to the US, although it applies to entities that comply with the GDPR compliance rules or have entered into agreements on the EU-US Data Privacy Framework. You can always ask us to obtain a copy of the procedures and certification for these entities.

How long do we keep your information?

Valida Health only stores and processes your personal and health information for as long as is necessary and required in relation to the stated purposes. In certain areas, there is also a statutory period for how long personal and health information must be stored. In these cases, the law has decided how long there is a purpose for storing and processing personal and health information. When the purpose of the processing no longer exists, your personal and health information will be deleted, anonymized or transferred to an archive in accordance with the rules of the archiving legislation.

Your data is safe with us.

When we receive your information at Valida Health, we take the necessary measures to ensure that it is processed securely. We have implemented a number of technical and organizational security measures that protect against accidental or unlawful destruction, loss or deterioration of information. In addition, measures have been taken to ensure that your information does not come into the possession of unauthorized persons and is not misused or otherwise processed in violation of the General Data Protection Regulation. Please note that regular e-mail to Valida Health is not encrypted. Please use mit.dk or other encrypted e-mails if you want to send personal health information to us.

Your data is always transferred and stored in a secure encrypted format, in certified and GDPR and HIPAA compliant medical EMR systems and portals, scientific data analysis pipelines, with SSL and AES256 encrypted data transfer and storage. Only authorized personnel have access to it. Your data is never shared with anyone without your consent.

Your rights

You have a number of rights in connection with the processing of your personal and health information at Valida Health.

These include:

Right to access your personal and health information

Right to correction of your personal and health information

Right to erasure of your personal and health information (to the extent permitted by law)

Right to restriction of processing of your personal and health information

Right to data portability and right to object to the processing of your personal and health information.

If Valida Health makes decisions based solely on automated processing, including profiling, you have the right in certain cases not to be subject to this processing. Please note that there are exceptions to these rights, which means that you may not always be able to exercise all of your rights.

If you wish to exercise your rights, please contact us by email or telephone. We take your data security and privacy seriously.

Complaints

If you wish to complain about Valida Health's processing of your personal and health information, please do so by sending us a message from the contact form on our website.