Javascript is required
logo-dastralogo-dastra

GDPR Data processing modelComputerized pharmacy management and statistical analysis of its sales

By: Ludwig Karneth
PrivateHealthPharmacy
This processing model is used to manage the file and payments, as well as to draw up, edit and teletransmit care sheets and subrogatory invoices, and to edit and send letters to healthcare professionals and the pharmaceutical opinion to the prescriber. Also the editing of a summary statement for the cash registers, the maintenance of the scheduler and the maintenance of registers for products whose delivery is subject to compulsory registration.

Purposes (9)

A purpose is the objective pursued by the setting up of your file. It indicates what the processing of personal data will be used for, its purpose. This purpose must be clear and understandable

1
Participation in epidemiological studies
Legitimate interest
2
Statistical studies based on anonymized information
Legitimate interest
3
Payment management
Legitimate interest
4
Editions of a cash register summary slip
Legal commitment
Pursuant to article R. 123-174 of the French Commercial Code, all accounting records must specify the origin, content and allocation of each item of data, as well as the references of the supporting document.
5
Edition and dispatch of letters to healthcare professionals and of the pharmaceutical opinion to the prescriber
Contract
6
Preparation, printing and electronic transmission of medical claims forms and subrogated invoices
Legal commitment
Article L161-33 ; Article R161-39 ; Article R161-40 code de la sécurité sociale
7
Management of the patient's pharmaco-therapeutic follow-up file
Legitimate interest
8
Record keeping for products subject to mandatory registration
Legal commitment
Article R5132-9 du code de la santé publique
9
Scheduler maintenance
Legal commitment
Stems from the obligations of articles R5132-10 ; R5132-12 ; R5132-13 ; R5132-14 of the public health code

Data categories (4)

Personal data is any information relating to an identified or identifiable natural person. A natural person can be identified either directly (eg surname and first name) or indirectly (eg phone number, social security number, email or postal address, but also voice or image)

Information about the patient's lifestyle habits

Data details


Coordinates of relatives mandated to withdraw delivered products may be collected with the patient's consentrequired

Data conservation rules

Active base:

3 years from the last intervention on the patient's file

Intermediate archiving:

Archived 15 years on separate media. - 10 years for prescriptions. - 10 years for the register of narcotics from the last mention. - 40 years for the blood derivatives register. - 90 days for the duplicate of care sheets in the case of teletransmission

Health data

Data details


Data directly related to optical defectsrequiredsensitive data
Medical devicesrequiredsensitive data
Products delivered

Definition

Products delivered by the optician

requiredsensitive data
Adaptation measuresrequiredsensitive data
Ordonnancesrequiredsensitive data
Prescriptionsrequiredsensitive data

Data conservation rules

Active base:

5 ans

Intermediate archiving:

15 ans 90 jours pour le double des feuilles de soin

Pharmacy patient identity data

Data details


Supplementary scheme membership number and reimbursement raterequired
Support raterequired
Social Security Numberrequiredsensitive data
Telephone numberrequired
Sexerequired
Date of birth

Definition

person's date of birth

required
Name and surnamerequired

Data conservation rules

Active base:

3 years from the last intervention on the patient's file

Intermediate archiving:

15 years on separate media. - 10 years for the prescription book. - 10 years for the register of narcotics from its last mention. - 40 years for the register of blood-derived medicinal products. - 90 days for the duplicate of care sheets in the case of teletransmission

Prescriber's identity

Data details


Conventional situationrequired
Specialty

Definition

Medical Specialty

required
Identification numberrequired
name

Definition

Name of the person

required

Data conservation rules

Active base:

3 years from the last intervention on the patient's file

Intermediate archiving:

Archived 15 years on separate media. - 10 years for prescriptions. - 10 years for the register of narcotics from the last mention. - 40 years for the blood derivatives register. - 90 days for the duplicate of care sheets in the case of teletransmission

Data subject (1)

A data subject is any person whose data is collected, retained or processed by the data processing. e.g. In a recruitement process, any candidate for a position proposed in recruitement management process

  • Other

Author:
Ludwig Karneth
Ludwig Karneth

Created at:2023-08-08T12:04:10.8684973

Updated on:2023-11-29T12:06:23.7033288

License: © Creative commons :
Attribution / Pas d'utilisation commerciale
CC-BY-NC AttributionPas d'utilisation commerciale

Nb using:1


Access the full processing template

Try Dastra now to access all of our data processing templates that you can customize for your organization.It's free and there's no obligation for the first 30 days (no credit card required)

Add to my data processings record
Subscribe to our newsletter

We will send you a few emails to keep you informed of our news and what's new in our solution

* You will always be able to unsubscribe on each newsletter. Learn more.