Privacy Policy
Last updated: March 12, 2026
This privacy policy describes how Alethia ApS collects, processes, and protects your personal data in connection with ADHD assessment and treatment.
1. Data Controller
Alethia ApS is the data controller for the processing of personal data we receive about you.
Alethia ApS
Fiolstræde 14, 1.
1171 København K
CVR: 45959392
Email: [email protected]
Phone: +45 42 62 00 51
2. What personal data do we process?
Contact and booking
- Name, email, phone number
- Booking information (date, time, service)
Clinical treatment
- Health information related to assessment and treatment
- Assessment results and diagnostic conclusions
- Treatment plans and clinical notes
Payment
- Billing information
- Payment history
2b. Legal basis and data processors
We process your personal data on the following legal bases: the Danish Health Act §§ 42a–42d (record-keeping obligation), GDPR Article 6(1)(b) (performance of contract), Article 6(1)(c) (legal obligation), and Article 9(2)(h) (healthcare treatment).
We use the following data processors: Planway (online booking), Dinero (invoicing), Resend (email delivery), and Vercel (web hosting). All processors are subject to data processing agreements and only process data according to our instructions.
We do not share your personal data with third parties beyond the above processors, unless legally required to do so.
3. Retention period
- Patient records: Minimum 10 years after the last entry, per the Danish Record-Keeping Order.
- Accounting records: 5 years from the end of the financial year the material relates to.
- Contact inquiries: Deleted when the inquiry has been answered and no client relationship has been established.
4. Your rights
Under the GDPR, you have the right to access, rectification, erasure, restriction, objection, and data portability. Note: Patient records generally cannot be deleted due to the record-keeping obligation.
Contact us at [email protected] to exercise your rights.
We process requests within 30 days. For complex or numerous requests, the deadline may be extended by up to 60 days, and we will inform you within the first month.
5. Cookies and website
Our website only uses technically necessary cookies. We do not use tracking cookies or third-party cookies. We collect anonymous usage statistics via Vercel, which contain no personal information and use no cookies. We do not use Google Analytics or other third-party analytics tools.
6. Complaint to the Danish Data Protection Agency
You have the right to file a complaint with the Danish Data Protection Agency: