In order to use Kintella/Kintella Care, you must agree to Kintella processing your information in the app and on the web. By downloading and/or using Kintella/Kintella Care, you accept this privacy policy and terms and conditions.

Introduction

At Kintella, we are delighted that you are using our service. We take the confidentiality of your personal information very seriously and are committed to protecting it. To do so, we have established procedures to ensure that your information is processed responsibly and in accordance with applicable data protection and privacy laws. 

This privacy policy describes the information we collect about you and how we use, process, disclose, and protect your information. 

The legal entity responsible for processing your personal data is:

Kintella ApS
CVR-nr 40876138
Frederiksborgvej 53d
4000 Roskilde

Kintella ApS develops and owns Kintella/Kintella Care (collectively referred to as “the service/our services”), which are interconnected web and mobile applications that help service users, relatives, and staff communicate, coordinate, and navigate within and across the care and health sectors in everyday life. 

When does Kintella process personal data? 

When you use Kintella/Kintella Care, you will provide information that is necessary for Kintella to offer you our services. 

We process personal data when you:

·      enter into a contract with us

·      participate in demonstration meetings (physical/digital)

·      receive service-related communications from us

·      interact with Kintella's website, www.kintella.dk

·       communicate with us, e.g. our support team

·       download the app from the App Store or Google Play

·       create a profile in Kintella/Kintella Care

·       share images or participate in marketing initiatives with us.

Purpose of using personal data 

We collect and process your data for the following purposes: 

·      Delivery of our service: When a municipality or private company is a customer of Kintella, we receive and process your personal data in connection with the delivery of the service. This happens, for example, in connection with administering the collaboration as well as contacting you and providing you with support related to the collaboration.

What information we use: General personal data such as first name, last name, email address, and telephone number at your employer, your role, organization name, case history, credit or debit card details, and billing address.

Legal basis for processing: Performance of a contract – GDPR Art. 6(1) (b)

·      Service notifications: When a municipality or private company is a customer of Kintella, we receive and process your personal data in connection with the delivery of the service. This happens, for example, in connection with administering the collaboration and contacting and providing you with support in connection with the collaboration. 

What information we use: General personal data such as name and email address. 

Legal basis for processing: Legitimate interest – GDPR Art. 6(1)(f). The legal basis for sending you service messages is based on our legitimate interest, where the interest in sending you service messages takes precedence over your interests and fundamental rights, as sending service messages is necessary to ensure timely care for information to our customers and users that is not related to marketing.

·      Statistics to improve and develop the service: This includes developing new features, identifying trends, and evaluating results. 

What information we use: When we process usage and activity data, this involves counting interactions (e.g., the number of times logged in or the number of times a feature is used). This data does not identify you individually, as we aggregate and anonymize the data. 

Legal basis: Legitimate interest – GDPR Art. 6(1)(f). Our legitimate interest in compiling statistics and reports takes precedence over your interests and fundamental rights where the processing of your personal data is necessary for us to ensure the best possible service.

·      Creating a profile: To use our services as a user, you must create a profile.

What information we use:
Technical data: Kintella also processes technical information related to your smartphone (such as: IP address, device configuration, and country of origin) or related to the service (such as: log and history of all data transactions, log and history of actions).

Identification data: This data includes information about your identity (name, phone number, social security number, email address, relationship to other users) and demographics (age and, if applicable, languages spoken). You also have the option of adding a profile picture.

The first time you log in to Kintella/KintellaCare, you must use MitID so that your identity is linked to your profile. If you do not have MitID, you will need to confirm your profile via two-factor authentication, typically via email and phone number. When logging in, you can create a PIN code and, if desired, enable biometrics (fingerprint or facial recognition) to make it easier to log in to the app later. 

Legal basis: Kintella's processing of information for the purpose of creating a profile is based on Article 6(1)(e) of the General Data Protection Regulation (GDPR) (and Article 9(2)(b)).

When Kintella processes your CPR number in connection with the creation and validation of your profile, this is done in accordance with Section 11(2)(3) of the Data Protection Act.

·      Contact by email: Personal data is used to contact B2B and B2G individuals by email for the purpose of discussing collaboration. This may be based on information we have obtained from lists, websites, or other publicly available sources.

What information we use: General personal data such as name, employer email address, telephone number, job title, and name of organization. 

Legal basis for processing: Legitimate interest – GDPR Art. 6(1)(f). Our legitimate interest in contacting you by email takes precedence over your interests and fundamental rights, where the processing of your personal data is necessary for us to communicate with you. 

·      Behandling forud og i forbindelse med salg: Personoplysninger, der afgives via online formularer og emails mv. forud for et salg, benyttes til behandlingen af den specifikke henvendelse, fx henvendelser vedr. demonstration af vores service, bestilling af brochurer og priser, tilbud eller anmodninger om kontakt af anden art. 

What information we use: General personal data such as name, email, telephone number, job title, and name of organization. 

Legal basis for processing: Performance of a contract – GDPR Art. 6(1) (b)

When does Kintella process personal data as a data processor on behalf of a data controller?

When a municipality, hospital, and/or other private business organization offers our services to you, we process personal data on behalf of the organization in question, to which you are affiliated and to which you have given your consent.

When you provide personal information in Kintella/Kintella Care, we are obliged to follow the instructions issued by the municipality, hospital, and/or company organization you are affiliated with (the data controller). We must process your personal information solely in accordance with the data controller's purpose of offering you our service. This means that Kintella is the data processor. 

The purpose of personal data processing for the municipality, hospital, and/or business organization is that the relevant data controller wishes to strengthen dialogue and coordination between you, staff, and relatives regarding your everyday life. 

Personal data about you will be shared with staff and relatives if you have agreed to give them access to your profile in our service. Access to your profile includes staff and relatives being able to invite more relatives to become part of the community in your own relative group.  

The types of personal data that will be processed about you in our service will be your name, social security number, affiliated organization, house and apartment number, email address, telephone number, calendar activities, life history, photos, and the names, relationships, and contact information of relatives. Relatives can see each other's names, email addresses, telephone numbers, and information shared in text and images.

When you use our service, we process communication data such as calendar activities, news posts, and messages to staff and relatives. 

You may withdraw your consent at any time. This must be done to the relevant organization with which you are affiliated. If you withdraw your consent, we will close your access to your profile in Kintella and your personal data will be deleted. In this connection, we would like to point out that the data processing that has taken place up until the withdrawal of consent will continue to be lawful.  

If you have any questions or wish to exercise your rights in relation to this processing, please contact the municipality, hospital, and/or private company organization with which you are affiliated.

You can often read more about how these organizations process personal data and your rights in this regard on the respective organizations' websites. 

Disclosure of personal data to third parties

Apart from Kintella and selected and trusted sub-processors with whom we collaborate in order to provide our services to you, personal data will not be shared with or otherwise accessed by third parties. 

Information may be disclosed to sub-processors who are authorized to use your information in connection with login administration and storage.

It is Kintella's responsibility to ensure that your personal data is not misused. Therefore, we always ensure that our sub-processors guarantee that your personal data is protected.

We only use data processors in the EU or in countries that can provide your information with adequate protection.

Storage and deletion of personal data

We store your personal data for as long as necessary for the purpose or purposes for which the data is processed. As a general rule, the data is stored for 5 years from the individual processing, but in special cases there may be shorter or longer storage periods, including to comply with legal requirements for deletion or storage. 

We use technical and organizational measures to protect against unauthorized access and use, destruction, alteration, or disclosure of your personal data.

To ensure the best possible protection of your data, we have adopted internal rules on information security, which contain both instructions and measures to protect your personal data. In addition, all Kintella employees must follow internal procedures and rules for handling personal data. Training in and on the correct handling of personal data is also provided on an ongoing basis.

Please note that in cases where Kintella acts as a data processor, you must contact the data controller if you wish to have your personal data deleted ahead of schedule. 

Your rights

As a user of Kintella, you can request access to the information we have processed about you, where it comes from, and what we use it for.

You may also object to the use of this information at any time. If your profile information is incorrect, incomplete, or irrelevant, you have the right to have it corrected. You can correct the information in your profile yourself or contact us at: support@kintella.com. 

If you no longer want us to process your personal data or want us to restrict the processing of your personal data, you can also send us a request to this effect to the above email address. Please note that it is not possible to use our services without accepting our privacy policy, terms, and conditions.

You may at any time lodge a complaint with a supervisory authority regarding our processing of your personal data. The Danish supervisory authority is the Danish Data Protection Agency, Carl Jacobsens Vej 35, 2500 Valby. The Danish Data Protection Agency can also be contacted by email: dt@datatilsynet.dk.

Kintella ApS

Last updated: 01.02.2025