Javascript is required
logo-dastralogo-dastra

GDPR Data processing modelCurrent computerized management of a medical or paramedical practice

By: Ludwig Karneth
PrivatePublicHealthMedical Practice
This processing model relates to the current computerized management of a medical or paramedical practice

Purposes (7)

A purpose is the objective pursued by the setting up of your file. It indicates what the processing of personal data will be used for, its purpose. This purpose must be clear and understandable

1
Appointment management
Legitimate interest
2
Medical records management and prescription editing
Legal commitment
Article R1112-2 code de la santé publique
3
Management and maintenance of individual care records
Legal commitment
Article R1112-2 du code de la santé publique
4
Preparation and electronic transmission of medical claims forms
Legal commitment
Article R161-40 code sécurité sociale
5
Mailing to colleagues
Legitimate interest
6
Bookkeeping
Legal commitment
7
Statistical studies for internal use
Legitimate interest

Data categories (4)

Personal data is any information relating to an identified or identifiable natural person. A natural person can be identified either directly (eg surname and first name) or indirectly (eg phone number, social security number, email or postal address, but also voice or image)

Personal life

Data details


Number of pregnanciesoptionalsensitive data
Number of childrenrequired
Marital status

Definition

Single, married, cohabiting etc.

required

Data conservation rules

Active base:

5 ans

Intermediate archiving:

15 ans

lifestyle information

depending on the context, as long as it is collected with the patient's consent and is necessary for the diagnosis and care of the patient

Data details


leisurerequired
diet and eating behaviorrequired
exercise

Definition

intensity, frequency, duration

required
assistance

Definition

aide-ménagère, familiale

required
dependence

Definition

alone, institutionalized, independent, bedridden

required

Data conservation rules

Active base:

5 years

Intermediate archiving:

15 ans

Patient identity data

Data details


Supplementary scheme membership number and reimbursement raterequired
Social security number and reimbursement rate

Definition

Social security number and reimbursement rate

required
phone numberrequired
Genderrequired
Date of birth

Definition

person's date of birth

required
first and last namerequired

Data conservation rules

Intermediate archiving:

15 years under security conditions equivalent to those of other data stored in the application

health data

Data details


Data directly related to optical defectsrequiredsensitive data
medical devicesrequiredsensitive data
Products issued

Definition

Products issued by the optician

requiredsensitive data
Adaptation measuresrequiredsensitive data
prescriptionsrequiredsensitive data
Prescriptionsrequiredsensitive data

Data conservation rules

Active base:

5 years

Intermediate archiving:

15 years 90 days for duplicate care sheets

Data subject (1)

A data subject is any person whose data is collected, retained or processed by the data processing. e.g. In a recruitement process, any candidate for a position proposed in recruitement management process

  • Other

Author:
Ludwig Karneth
Ludwig Karneth

Created at:2023-08-08T12:04:09.6857123

Updated on:2023-11-29T12:05:52.9439617

License: © Creative commons :
Attribution / Pas d'utilisation commerciale
CC-BY-NC AttributionPas d'utilisation commerciale

Nb using:1


Access the full processing template

Try Dastra now to access all of our data processing templates that you can customize for your organization.It's free and there's no obligation for the first 30 days (no credit card required)

Add to my data processings record
Subscribe to our newsletter

We will send you a few emails to keep you informed of our news and what's new in our solution

* You will always be able to unsubscribe on each newsletter. Learn more.