Information about Your Rights, Confidentiality, Medical Records, GDPR, and Complaints
Licensed Psychotherapist: Helena Löfgren
1. Your Rights as a Patient
As a patient, you have the right to:
- safe, secure, and respectful care
- information about your health and your treatment
- participation in decisions about your care
- giving consent to treatment
- a new medical assessment (second opinion)
- continuity and a clear contact pathway
- information about how your personal data is handled
Legal basis: Patient Act (2014:821), Chapters 3–5.
2. Confidentiality and Professional Secrecy
All information you provide is protected by strict confidentiality.
I may not disclose any information about you without:
- your consent, or
- a legal obligation, for example in situations involving danger to life.
Exceptions (required by law)
- Danger to life or serious harm → I may contact emergency services (112).
- Concern that a child is at risk → I am required to contact Social Services.
- Courts, police, or authorities may in certain cases request information according to law.
Legal basis:
- Patients’ Safety Act (PSL), Chapter 6, Sections 12–13
- Public Access to Information and Secrecy Act (OSL), Chapter 10, Section 18
- Social Services Act (2025:400), Chapter on mandatory reporting (replaces former SoL Chapter 14, Section 1)
3. Medical Records
I keep medical records as required by law. Your record includes:
- background information relevant to your care
- assessments and interventions
- information provided to you
- your decisions and preferences
- planning and follow‑up
You have the right to:
- read your medical record
- receive copies
- request correction of inaccurate information
- see who has accessed your record (log list)
Legal basis: Patient Data Act (2008:355), Chapter 3 and Chapter 8.
4. Handling of Personal Data (GDPR)
I process your personal data in order to provide healthcare. This includes:
- name and contact details
- personal identity number
- medical record information
- invoicing information
Legal grounds
- healthcare provision (GDPR Art. 9.2 h)
- contract (GDPR Art. 6.1 b)
Security
- medical records are kept in CTnotes with BankID login
- video sessions take place via CTnotes + Zoom with secure access
- SMS/email are used only for practical matters
- sensitive information is documented in the medical record and deleted from phone/email after care is completed
- invoicing is handled in BL Administration
Your GDPR rights
You have the right to:
- receive information about how your data is used
- request correction
- request restriction of processing
- obtain copies
- file a complaint regarding data handling
Legal basis: GDPR Articles 12–23.
5. Communication
Secure communication
All care‑related communication takes place in CTnotes:
- chat
- assessments
- homework assignments
- video sessions
- bookings
SMS and email
Used only for:
- rescheduling
- practical questions
Sensitive information must not be sent via SMS/email.
6. Digital Care
During digital sessions:
- you log in with BankID in CTnotes
- Zoom is launched through CTnotes to ensure correct patient connection
- your identity is verified automatically
- technical interruptions are handled through rescheduling or phone contact
7. Complaints and Feedback
If you have feedback or complaints, you may:
- contact me directly
- contact IVO (The Health and Social Care Inspectorate)
- contact the Patient Advisory Committee
- apply for compensation through Patient Insurance LÖF (in case of healthcare injury)
Information is available on my website and provided at first contact. I document that you have received this information.
Legal basis: Patient Act, Chapter 11; Patients’ Safety Act (PSL), Chapter 3, Section 4.
8. Children as Next of Kin
If you have children and your mental health affects them, you have the right to:
- information
- advice
- support
If there is concern that a child is at risk, I am required to contact Social Services.
Legal basis:
- Health and Medical Services Act (HSL), Chapter 5, Section 7
- Social Services Act (2025:400), Chapter on mandatory reporting
- The Convention on the Rights of the Child (Swedish law, 2020)
9. Continuity in Case of Absence
In case of illness or other absence where I am unable to contact you:
- an appointed colleague will contact you
- the colleague is bound by professional secrecy
- the colleague has access only to your contact details, not your medical record
- you will be informed about cancelled appointments and further contact routes
10. Contact
Löfgrens Analys AB
Helena Löfgren, Licensed Psychotherapist
Email: helena.lofgren@lofgrensanalys.se
Phone: 070‑819 77 77
Website: lofgrensanalys.se