Privacy notice

Last updated: 2026-04-14

1. Data controller

The controller of your personal data is:

Lungespesialist AS
Tønsberg, Norway
Norwegian company registration number: 931 342 576
Email: lungespesialist@outlook.com

If you have questions about how we process your data, please contact us at the address above.

2. What information we collect

We collect and process the following information about you as a patient:

  • Contact details: name, email address, telephone number
  • Identity details: date of birth
  • Health data: diagnoses, treatment plans, medicines and inhalers, clinical notes
  • Messages: communication within the portal
  • Questionnaire responses: answers you give to questions in the portal
  • Access logs: who opened your record, and when

3. Legal basis for processing

We process your health data on the following bases:

  • The Norwegian Patient Records Act (pasientjournalloven) § 6 and GDPR Article 9(2)(h): processing is necessary for the provision of health care by health personnel bound by a statutory duty of confidentiality.
  • GDPR Article 6(1)(b): processing of contact details is necessary to perform the care relationship.
  • GDPR Article 6(1)(c): processing is necessary to comply with obligations under the Norwegian Health Personnel Act (helsepersonelloven).

The controller is bound by professional secrecy under the Norwegian Health Personnel Act §§ 21–29. Your data will not be shared with unauthorised parties.

4. Retention period

Patient records are kept for at least 10 years after the last entry, in accordance with the Norwegian Health Personnel Act § 25. Separate rules apply to patients who were minors when the record was created.

If you end the care relationship, the data will still be retained as required by law.

5. Your rights

Right of access

You have the right to see all data we hold about you (Norwegian Patients’ Rights Act § 5-1 and GDPR Article 15). You can download your own data directly in the portal under My data, or contact us for a full record printout. We respond within 30 days, free of charge.

Right to rectification

If we hold factually incorrect information about you, you have the right to have it corrected (GDPR Article 16). Contact Lungespesialist directly.

Right to erasure

You may request erasure of record data, but records are not automatically deleted under GDPR Article 17. Separate rules apply to patient records, and erasure is only possible where the conditions in the Norwegian Health Personnel Act § 43 and the Patients’ Rights Act § 5-2 are met.

Right to complain

If you believe we are processing your personal data unlawfully, you may complain to the Norwegian Data Protection Authority (Datatilsynet), or to the supervisory authority in your own country of residence:

Datatilsynet (Norway) · datatilsynet.no
You may also contact the data protection authority in your own EU/EEA country. A full list is published by the European Data Protection Board at edpb.europa.eu.

6. Who we share information with

We do not share your health data with anyone other than:

  • Technical service providers (server hosting, email, SMS) processing data on our behalf under a written processor agreement. They may not use the data for their own purposes.
  • Your treating doctor and authorised health personnel where cooperation on your care requires it. Only with your consent or where the law requires it.

We do not sell, rent out or share your data with third parties for marketing or any other purpose.

7. Information security

We use HTTPS (encryption in transit) for all communication between your device and the portal. Access to patient data is restricted to authorised health personnel with a professional need. All access to patient records is logged.

8. Contact

For privacy questions or to exercise your rights, contact:

Lungespesialist AS · lungespesialist@outlook.com

9. Governing law

Lungespesialist AS is established in Norway, and the processing of personal data is governed by Norwegian law and the EU General Data Protection Regulation (GDPR). This English text is a translation provided for convenience; in the event of any discrepancy, the Norwegian version prevails.