Privacy Policy

Data controller

NordicCare Helsehus, located at Dronning Eufemias gate 16, 0191 Oslo, Norway, is the data controller responsible for the personal and health information collected in connection with your care.

Information we collect

We collect personal information you provide when booking or attending a consultation, including your name, contact details, patient type and the clinical information needed to assess and treat you. Health information recorded during your consultation, including examination findings, test results and treatment notes, forms part of your medical record.

How we use your information

Your information is used to provide clinical care, coordinate treatment across relevant departments, manage appointments and billing, and meet our legal and regulatory obligations as a healthcare provider in Norway. Where you are referred through an insurance policy or corporate health scheme, limited relevant information may be shared with your insurer or employer's occupational health provider, in accordance with the terms of that arrangement and your consent.

Legal basis for processing

We process your personal and health information under the General Data Protection Regulation (GDPR) on the basis of providing healthcare, our legitimate interests as a private medical provider, and, where applicable, your explicit consent. Our information handling practices follow the Norwegian Normen standard for information security and data protection in the health and care sector.

Data security

Access to patient records is restricted to clinicians and staff directly involved in your care. We maintain technical and organisational safeguards designed to protect your information against unauthorised access, loss or disclosure, consistent with Normen and GDPR requirements.

Data retention

Medical records are retained for the period required under Norwegian health record-keeping regulations. Other personal information, such as booking and billing details, is retained only for as long as necessary to fulfil the purpose for which it was collected.

Your rights

Under GDPR, you have the right to request access to, correction of, or in certain circumstances erasure of your personal information, and the right to object to or restrict certain processing. You may also lodge a complaint with the Norwegian Data Protection Authority (Datatilsynet) if you believe your information has not been handled appropriately.

Contact regarding privacy

If you have questions about how your personal or health information is handled, please contact our reception team using the details on our Contact Us page.

Changes to this policy

We may update this Privacy Policy from time to time to reflect changes in our practices or applicable law. The current version is always available on this page.