Askin AS is dedicated to handling your personal data with respect and responsibility, in compliance with Norwegian and European privacy legislation. This privacy policy outlines how we process personal data, what personal data we collect, and the purposes for processing it. Askin AS acts as the data controller for all personal data processing activities.
Askin operates as a healthcare service provided by authorized medical specialists. We process personal data to deliver our healthcare services to patients, as permitted under Article 9, point 2(h) of the Personal Data Act.
Additionally, we process necessary secondary information, such as payment details, to facilitate the delivery of our services. As a healthcare provider, we are also governed by the Health Personnel Act and the Patient Records Act, ensuring patient safety, service quality, and privacy in compliance with these regulations.
We collect personal data in the following ways:
- When you register for our services, complete a digital consultation, or contact us.
- When others share information on your behalf, such as parents providing information for their children, or a GP or other healthcare personnel referring patients or sharing medical records.
Providing personal data is voluntary, but without it, we may be unable to offer our services, such as processing payments or sending requested information.
We also maintain our company profile and pages on social media platforms. When you visit these pages, such as our company page on Facebook, the social media platform processes your personal data independently. Askin AS has no control over this processing. For more details, please refer to the privacy policy of the respective social media platform.
Protecting your personal data is a top priority for us. We continuously implement physical, technical, and administrative measures to ensure its security. Our data processing practices comply with current legislation, including:
We perform risk assessments and evaluate measures to safeguard personal data against unauthorized access, alteration, or deletion. When working with partners or data processors, we ensure they adhere to this privacy policy and comply with applicable privacy regulations.
Our systems are designed in accordance with the norm for information security and privacy in the health and care sector , and we work according to the Norwegian Data Protection Authority's guidelines and NSM's basic principles for ICT security 2.0.
We store personal data only for as long as it is necessary for the purpose it was collected. In some cases, longer storage periods are permitted or required by law, and we adhere to these regulations.
Anonymized information, which is no longer considered personal data, is not subject to deletion and may be stored indefinitely.
Our systems are designed with privacy as a core principle. Privacy considerations are integrated into every stage of our processes and systems—from idea and design to architecture and implementation. This approach applies to both IT systems and business processes.
We use a development methodology that prioritizes privacy throughout all phases. We adhere to the Norwegian Data Protection Authority’s privacy guidelines and conduct risk and vulnerability analyses (ROS) in accordance with the National Security Authority's (NSM) recommendations. Our information architecture complies with the standards for information security and privacy in the health and care sector.
Key features of our privacy-focused systems include:
- Storing only necessary personal data, with no redundant information.
- Implementing role-based access management to ensure only relevant users and personnel can access necessary information.
- Supporting users' rights to access, correct, delete, and transfer their data.
We follow strict routines and protocols for data processing, with well-defined activities and ongoing audits to assess security risks and privacy impacts. This ensures compliance, reliability, and user trust.
Please note that exercising these rights may result in us not being able to deliver our services to you. For example, we cannot offer our services if we cannot process your payment information.
Please also note that we will always ask you to provide identification if you wish to make use of these rights. This is to ensure that your personal data is not disclosed to anyone other than you.
We are committed to processing personal data in a responsible and respectful manner. If you believe that we do not comply with these terms or the applicable legislation, you can contact us.
The data controller according to this privacy policy is Askin AS (Org. no. 917881456).
Askin AS
Postboks 474 Bedriftssenteret
1411 Kolbotn
E-mail: support@askin.com
or by phone: 64 80 90 90
(weekdays 9am-3pm)
Changes to this privacy policy may occur over time, as a result of changes in legal requirements.
