Privacy, Records & Your Rights

Information about Your Rights, Confidentiality, Medical Records, GDPR, and Complaints
Licensed Psychotherapist: Helena Löfgren

1. Your Rights as a Patient

As a patient, you have the right to:

  • safe, secure, and respectful care
  • information about your health and your treatment
  • participation in decisions about your care
  • giving consent to treatment
  • a new medical assessment (second opinion)
  • continuity and a clear contact pathway
  • information about how your personal data is handled

Legal basis: Patient Act (2014:821).

2. Confidentiality and Professional Secrecy

All information you provide is protected by strict confidentiality.

I may not disclose any information about you to anyone without:

  • your consent, or
  • a legal obligation, for example in situations involving danger to life.

Exceptions (required by law)

  • Danger to life or serious harm → I may contact emergency services (112).
  • Concern that a child is at risk → I am required to contact Social Services.
  • Courts, police, or authorities may in certain cases request information according to law.

Legal basis: Patients’ Safety Act (PSL) Chapter 6, Sections 12–13; Public Access to Information and Secrecy Act (OSL) Chapter 10, Section 18; Social Services Act (SoL) Chapter 14, Section 1.

3. Medical Records

I keep medical records as required by law. Your record includes:

  • background information relevant to your care
  • assessments and interventions
  • information provided to you
  • your decisions and preferences
  • planning and follow‑up

You have the right to:

  • read your medical record
  • receive copies
  • request correction of inaccurate information
  • see who has accessed your record (log list)

Legal basis: Patient Data Act (2008:355).

4. Handling of Personal Data (GDPR)

I process your personal data in order to provide healthcare. This includes:

  • name and contact details
  • personal identity number
  • medical record information
  • invoicing information
  • healthcare provision (GDPR Art. 9.2 h)
  • contract (GDPR Art. 6.1 b)
Security
  • medical records are kept in CTnotes with BankID login
  • video sessions take place via CTnotes + Zoom with secure access
  • SMS/email are used only for practical matters; all other communication can take place within CTnotes
  • sensitive information is documented in the medical record and deleted from phone/email after care is completed
  • invoicing is handled in BL Administration
Your GDPR rights

You have the right to:

  • receive information about how your data is used
  • request correction
  • request restriction of processing
  • obtain copies
  • file a complaint regarding data handling

Legal basis: GDPR Articles 12–23.

5. Communication

Secure communication

All care‑related communication takes place in CTnotes:

  • chat
  • assessments
  • homework assignments
  • video sessions
  • bookings
SMS and email

Used only for:

  • rescheduling
  • practical questions

Sensitive information must not be sent via SMS/email.

6. Digital Care

During digital sessions:

  • you log in with BankID in CTnotes
  • Zoom is launched through CTnotes to ensure correct patient connection
  • your identity is verified automatically
  • technical interruptions are handled through rescheduling or phone contact

7. Complaints and Feedback

If you have feedback or complaints, you may:

  1. Contact me directly
  2. Contact IVO (The Health and Social Care Inspectorate)
  3. Contact the Patient Advisory Committee
  4. Apply for compensation through Patient Insurance LÖF (in case of healthcare injury)

Information is available on my website and provided at first contact. I document that you have received this information.

Legal basis: Patient Act Chapter 11; Patients’ Safety Act (PSL) Chapter 3, Section 4.

8. Children as Next of Kin

If you have children and your mental health affects them, you have the right to:

  • information
  • advice
  • support

If there is concern that a child is at risk, I am required to contact Social Services.

Legal basis: Health and Medical Services Act (HSL) Chapter 5, Section 7; Social Services Act (SoL) Chapter 14, Section 1.

9. Continuity in Case of Absence

In case of illness or other absence where I am unable to contact you:

  • an appointed colleague will contact you
  • the colleague is bound by professional secrecy
  • the colleague has access only to your contact details, not your medical record
  • you will be informed about cancelled appointments and further contact routes

10. Contact

Löfgrens Analys AB
Helena Löfgren, Licensed Psychotherapist
Email: helena.lofgren@lofgrensanalys.se
Phone: 070‑819 77 77
Website: lofgrensanalys.se