Privacy on Helsenorge
This privacy statement describes what personal data we process, why, and how. You will also find information about your rights and how to exercise them.
Privacy before logging in to Helsenorge
Norsk helsenett is the data controller. This means that we are responsible for the processing of personal data on Helsenorge's public pages. We are also responsible for the operation and maintenance of the website.
Links to external websites
Helsenorge provides links to other organisations and companies. Please note that the privacy statement at Helsenorge does not apply to those other websites. When you visit those websites, the guidelines for the website in question apply.
Website visits
When you visit Helsenorge, we process your IP address in order to be able to show you the webpage content.
Contact form
If you have any questions about the services, self-service solutions, or the information provided on Helsenorge, you can contact us through our contact form. Your message will then be forwarded to Helsenorge (phone number: 23 32 70 00).
If you use the contact form, your name, email address, and the content of your message will be stored. The message will be deleted after the service centre has responded to your inquiry.
We kindly ask that you do not provide any sensitive information, such as health information or social security numbers, as the contact form is not secure (encrypted).
The chatbot hosted at Helsenorge is provided by the Norwegian Directorate of Health, which is the data controller for any processing of personal data that occurs in the chatbot.
Norsk helsenett does not process personal data in connection with the use of the chatbot, but facilitates the availability of the chatbot on Helsenorge. The communication is between you and the Directorate's service provider.
If you have further questions about the chatbot's processing of personal data, please contact the Norwegian Directorate of Health's Data Protection Officer by e-mail: personvernombud@helsedirektoratet.no.
Helsenorge uses the Adobe Analytics analysis tool. All IP addresses are anonymised before the data is stored and used so that it cannot be traced back to you. Only anonymous data will be stored.
Examples of data collected include
- how many browsers visit Helsenorge
- which websites users come from
- how long users are on the website
- which browsers are being used
Privacy after I have logged in to Helsenorge
If you want to use the services for which you have logged in at Helsenorge, we require your consent in order to process your personal data.
Consent for the processing of personal data at Helsenorge has been split into different levels. This means that you can choose to consent to a few, more or all services at Helsenorge. You can read more about the different levels of consent here.
The information on this page explains how we process your personal data. Processing will vary depending on the services you want to use and the consent you have given.
The full terms of use of Helsenorge services can be found here (pdf).Personal data refers to information and assessments that may be linked to you as an individual, e.g. national ID number, IP address, address and your prescriptions. Processing of personal data may refer to collection, storage, registration or disclosure of such data.
Norsk helsenett is the data controller for information about you in connection with your use of Helsenorge and its services.
With regard to external services that are available via Helsenorge, the various different service providers will be the data controllers for their respective services. Information about the data controller must be available when the different services are used.
The data processor is the party that processes personal data on behalf of a data controller.
Norsk helsenett (NHN) is the data processor and undertakes the technical operation and maintenance of Helsenorge.
Your national ID number may be disclosed in certain cases, as such personal data is necessary in order to identify you in connection with your use of the services. This applies, for example, to the use of video consultations, dialogue services and the mailbox function.
Your national ID number is also stored in technical logs to enable troubleshooting and error rectification in the services. Your national ID number will not be passed on, disclosed or used for any other purpose.
Your privacy settings may be disclosed to external parties when the settings also apply to these external providers. This may, for example, include information about authorizations to use Helsenorge on behalf of others, and whether you have consented to or reserved yourself from using certain services.
Other personal data is not disclosed.
Some of the services at Helsenorge are display services for which we retrieve data from other sources when you log in. Such personal data is not stored at Helsenorge. We also store your data for as long as you use Helsenorge and for as long as is necessary for the purpose for which the data was collected.
Norsk helsenett employees are subject to a duty of confidentiality.
Employees have access to your personal data only when necessary for the secure operation of the services and in cases where you request assistance from our employees with the use of the services.
You can rest assured that your data is secured properly. We have implemented a number of security measures to protect the personal data we process against unauthorised access, alteration and destruction.
This includes that we:
- encrypt communication to and from our services.
- restrict access to personal data for our employees, as well as data processors and subcontractors that process such data on our behalf.
- have implemented extensive physical, technical and organisational measures to secure data in the best possible way.
We use personal data to compile statistics on the use of health services at Helsenorge. We do so to improve our services and to gain more insight into how they are used. The statistics will also be shared with and used by the health sector and health authorities to improve access and quality of health services in Norway.
We use the following data:
- Demographic data (such as your age, gender, and the municipality in which you live)
- Data on your use of the services on Helsenorge (for example, number of forms submitted, number of bookings)
Such data is compiled in a way that it cannot directly lead back to individuals. Our statistics design follows the data protection policy for the use of personal data for statistical purposes. The results of the statistics we create cannot lead back to you.
My rights
As a user, you have the right of access to the personal data we process concerning you, as well as the data we have processed about you in connection with your use of Helsenorge. You also have a right of access to information about the security measures we apply to safeguard your privacy, for as long as such access can be given without reducing the security of our solutions.
You can request the rectification of any data relating to you that is incorrect or incomplete.
You can also request erasure of data if you believe that the data is unnecessary for the purpose in question.
For rectification and erasure of data in external services that you access via Helsenorge, you will need to contact the enterprise that provides the service, e.g. the Norwegian Tax Administration concerning data from the Norwegian National Population Register (such as your address or family relations).
When healthcare professionals have access to important health information about you, they can provide you with safe and good treatment when you need it. Only those who can document the need are allowed to read your health information. If there is information you do not want to share, you can change your privacy settings at Helsenorge. Read more about your rights (in Norwegian).
If you do not want us to collect or analyse data about your visit in the web statistics, you can opt out.
When you click on the link below, a cookie will be embedded in your browser, which tells our analytics tool that it should not collect data about your visits to Helsenorge.
If you delete the cookies that show that you have opted out or switch to another computer or browser, you will need to opt out again.
You can withdraw or change your consent to allow Helsenorge to use your health information at any time. If you withdraw your consent, you will still have access to all content on Helsenorge that does not require logging in.
There are also other options you can choose when you do not want to use the services on Helsenorge.
Contact details
Guidance Helsenorge
Call 23 32 70 00
Monday – Friday 08:00–15:30
Data Protection Officer
You will find contact details for NHN's Data Protection Officer here.
The Norwegian Data Protection Authority
The Data Protection Authority is the supervisory body and is responsible for ensuring that laws and regulations applying to the processing of personal data are being followed.
Telephone number: 22 39 69 00
Email: postkasse@datatilsynet.no
Organisation number: 974761467
datatilsynet.no