Privacy and Cookies Policy

Processing of Your Information

I am obliged to collect and process a range of personal data in connection with psychological treatment of you, pursuant to the Act on thights and Duties of Psychologists of 2018 with the implementing regulation (Psykologloven og Bekendtgørelse om ordnede optegnelser for psykologer). I am also the data controller. This privacy policy describes how I use, and in some cases disclose, your personal data collected for the purpose of treatment.

This privacy policy describes how I use, and in some cases disclose, your personal data collected for the purpose of treatment.

Types of Information

Psykolog Joanna Nyboe collects and processes the following types of personal data about you (as relevant to your treatment og som and as you have provided):):

General categories of personal data:

  • Name, address, email address, phone number, gender

  • Family relations and social relations, employment relations, and education

Special categories of personal data ("sensitive personal data"):

  • Health information

Purpose

I process your personal data for the following purposes:

  • My treatment of you

  • Preparation of certificates for authorities, insurance companies, etc.

  • Billing

  • Compliance with the obligations under applicable law, including the EU General Data Protection Regulation, the Danish Data Protection Act, and other relevant health legislation, e.g.:

    • Documentation obligations

    • Compliance with basic principles for processing personal data and legal grounds for processing

    • Implementation and maintenance of technical and organizational security measures, including but not limited to preventing unauthorized access to systems and information, preventing receipt or distribution of malicious code, stopping overload attacks (denial-of-service attacks), and damage to computer systems and electronic communication systems

    • Investigation of suspected or known security breaches and reporting to individuals and authorities

    • Handling inquiries and complaints from registered individuals and others

    • Handling inspections and inquiries from supervisory authorities

    • Handling disputes with registered individuals and third parties

Voluntariness

When I collect personal data directly from you, you do so voluntarily. You are not obliged to provide this information. The consequence of not providing your personal data may be that I cannot fulfill the purposes outlined above, including that I will not be able to treat you.

Disclosure of Personal Data

To the extent necessary for the specific treatment of you, your personal data will be disclosed and shared with the following recipients:

  • Information may be disclosed to the Danish Patient Safety Authority (Styrelsen for Patientsikkerhed), The Danish Supervisory Board of Psychological Practice (Psykolognævnet), the Danish Labour Market Insurance (Arbejdsmarkedets Erhvervssikring), to the extent required by applicable law.

  • As a client, you have access to your own information (right of insight).

Legal Basis for Collection, Processing, and Disclosure

  • For general patient treatment, ordinary personal data are collected, processed, and disclosed pursuant to Articles 6(1)(c) and (d) of the GDPR, while sensitive personal data are collected, processed, and disclosed pursuant to Articles 9(2)(c) and (h).

  • Additionally, we are obliged to process certain personal data about you during regular patient treatment in accordance with the Psychology Act and the Regulation on psychologists’ duty to maintain orderly records.

  • Information for billing purposes for treatment is sent once a month to the regional billing office according to the rules in the Agreement on Psychological Assistance of July 2016.

  • Your personal data are only disclosed to insurance companies with your prior consent, pursuant to Articles 6(1)(a) and 9(2)(a) of the GDPR.

Withdrawal of Consent

The processing of your personal data is based on consent and you have the right to withdraw that consent. If you withdraw consent, it does not affect the processing carried out before the withdrawal, including disclosures based on consent.

External Processing of Data

Your personal data are processed and stored by me on an offline external hard drive and on my email server stored in the EU with SEOHOST.

SEOHOST Sp. z o.o.

ul. Obornicka 330
60-689 Poznań
Poland
NIP: 9721323212 REGON: 520718284 KRS: 0000939910

Storage and Deletion Policy

I retain personal data about you as long as necessary to fulfill the purposes outlined above. However, according to the record-keeping regulation § 15, I am obliged to store these for at least 5 years after the last entry in the journal. There may be cases where I need to retain your data longer, such as in connection with complaints or compensation cases, where the information will be kept until the matter is finally resolved.

Your Rights

You have — subject to legal restrictions — certain rights, including the right to access your personal data, the right to correct incorrect data, the right to delete data, the right to restrict processing, the right to data portability, and the right to object to the processing of your data.

Regarding deletion, this right is limited by the Regulation on psychologists’ duty to maintain orderly records, which states that deletion from patient journals is not permitted, only correction or addition.

You also have the right to lodge a complaint with a supervisory authority, including the Danish Data Protection Agency (Datatilsynet).

Confidentiality

As a psychologist, I am bound by confidentiality under Chapter 9 of the Health Act, meaning that the information about you and your treatment is treated confidentially. However, there may be situations where I am legally obliged to breach confidentiality. I am required to break confidentiality.

I am required to break confidentiality if I learn that you pose a danger to yourself or others. If I am called as a witness in court, I must appear and inform the court about my confidentiality obligation. It is then up to the court to decide whether I should testify and thereby be released from confidentiality, pursuant to the Administration of Justice Act §§ 168 and 170.

Cookies

https://joannanyboe.dk does not collect cookies. Cookies might be collected be external tools used on the website such as Google Maps.

Contact

If you have questions regarding the processing of your personal data or wish to exercise your rights, you are welcome to contact me.

Joanna Nyboe
Kirkebakkevej 8a

4190 Munke Bjergby
Danmark
+4560516578
kontakt@joannanyboe.dk

 

Date 18.8.2025