Privacy Policy
Last updated: October 26, 2026
This privacy policy describes how Alethia ApS collects, processes, and protects your personal data in connection with ADHD assessment and treatment.
1. Data Controller
Alethia ApS is the data controller for the processing of personal data we receive about you.
Alethia ApS
Fiolstræde 14, 1.
1171 København K
CVR: 45959392
Email: [email protected]
Phone: +45 42 62 00 51
2. What personal data do we process?
Contact and booking
- Name, email, phone number
- Booking information (date, time, service)
Clinical treatment
- Health information related to assessment and treatment
- Assessment results and diagnostic conclusions
- Treatment plans and clinical notes
Payment
- Billing information
- Payment history
Providing your information is voluntary, but without it we cannot answer your inquiry or assess and treat you.
2b. Legal basis and data processors
We process your personal data on the following legal bases: the Danish Health Act §§ 42a–42d (record-keeping obligation), GDPR Article 6(1)(b) (performance of contract), Article 6(1)(c) (legal obligation), Article 6(1)(f) (legitimate interest: responding to inquiries, running the website and spam protection), and Article 9(2)(h) (healthcare treatment).
We use the following data processors: Planway (online booking and patient records), Dinero (invoicing), Resend (email for the contact form), Vercel (website hosting), Cloudflare (spam protection for the contact form), Anthropic (the AI assistant on the website), Proton (email) and Hetzner (server hosting in the EU). All processors are bound by data processing agreements. Cloudflare also uses IP address and browser information itself to improve its service.
Transfers to Resend, Vercel and Anthropic (United States) are based on the EU Standard Contractual Clauses (SCCs), to Cloudflare (United States) on the EU-US Data Privacy Framework and to Proton (Switzerland) on the European Commission's adequacy decision. You can obtain a copy of the SCCs by contacting us.
We do not share your personal data with third parties beyond those named above, unless legally required to do so.
3. Retention period
- Patient records: Minimum 10 years after the last entry, per the Danish Record-Keeping Order.
- Accounting records: 5 years from the end of the financial year the material relates to.
- Contact inquiries: Deleted when the inquiry has been answered and no client relationship has been established. Resend deletes form messages within 30 days.
- IP address and browser information: Deleted when no longer needed for running the website and spam protection.
4. Your rights
Under the GDPR, you have the right to access, rectification, erasure, restriction, objection, and data portability. Note: Patient records generally cannot be deleted due to the record-keeping obligation.
Contact us at [email protected] to exercise your rights.
We process requests within 30 days. For complex or numerous requests, the deadline may be extended by up to 60 days, and we will inform you within the first month.
5. Cookies and website
Our website only uses technically necessary cookies, e.g. for the Planway booking calendar. We do not use tracking cookies. We collect anonymous usage statistics via Vercel, which contain no personal information and use no cookies. We do not use Google Analytics or other third-party analytics tools.
Copyright
Photos, texts and graphics on adhdklinik.com belong to Alethia ApS and are protected by copyright law. The content may not be copied, reproduced, adapted or used elsewhere without written permission from Alethia ApS. Short quotations with a clear source reference and a link to the page are permitted. Questions about use of the content can be sent to [email protected].
6. Complaint to the Danish Data Protection Agency
You have the right to file a complaint with the Danish Data Protection Agency: