The Caen Normandy University Hospital's health data warehouse is primarily a repository of pseudonymized data and files, allowing for the consolidation of information from various databases within a hospital information system into a single location . Data and files are retrieved regularly using connectors.

Personal, administrative, and medical information about you is collected during your visit to the Caen Normandy University Hospital (CHU Caen Normandie) or during a teleconsultation offered by the CHU Caen Normandie. The CHU Caen Normandie (hereinafter "We"), as a healthcare institution, is committed to ensuring that the processing of personal data complies with French and European regulations, in particular the General Data Protection Regulation (EU) 2016/679 of 27 April 2016, known as the "GDPR," and the French Data Protection Act of 6 January 1978, as amended. Personal health data is also governed by the French Public Health Code, the French Social Security Code, and the French Penal Code. This Notice aims to inform patients and any other concerned individuals about how the CHU Caen Normandie processes personal data, particularly within the CHU Caen Normandie Health Data Warehouse. You have the option of discussing this with the doctor at the university hospital who is treating you.

This policy may be updated in order, in particular, to take into account legislative and regulatory changes that apply to us.

In order to facilitate the carrying out, from certain administrative and medical data collected for care (pseudonymous data) , of health research, studies to improve and optimize care and strategic management of hospital activity, a Health Data Warehouse ( EDS ) has been set up at the Caen Normandy University Hospital on the legal basis of the public interest mission with which the University Hospital is entrusted.

The Health Data Warehouse established by the Caen Normandy University Hospital declared its compliance with the RS-002 standard on August 9, 2022.

Depending on your care, we may need to collect different categories of personal data necessary for administration, the creation of the medical file and the billing of care.

The medical file includes:

• Patients' health information, particularly that entrusted to the department's doctors (medical history, health status, treatments and follow-ups…)
• Information relating to the characteristics of your care (admission and discharge dates, method of care, people to contact, doctors)
• The results and conclusions of clinical, radiological and laboratory examinations performed, etc.

The data integrated into the health data warehouse relates to patient information from the last 20 years.

A general health information systems security policy (PGSSI-S) sets out the security requirements for digital health services. Based on this framework, a specific adaptation is implemented at Caen Normandy University Hospital (CHU Caen Normandie) through an information system security policy. This policy defines the guidelines and security requirements implemented and adapted at the institutional level, taking into account the nature of the data processed and the activities. Appropriate physical, logical, and organizational security measures are in place to guarantee data confidentiality and, in particular, to prevent any unauthorized access. Mechanisms are in place to ensure that subcontractors provide appropriate guarantees for the security and confidentiality of personal data.

The data collected by the Caen Normandy University Hospital is used to conduct research aimed at improving the quality of care, both within the framework of internal/single-center (care team) and external (multi-center) . Some research also involves the development and improvement of artificial intelligence algorithms.

A Health Data Warehouse has been established at Caen University Hospital to enable the use of data collected for patient care to conduct certain non-interventional research, clinical trial feasibility studies, and hospital activity monitoring studies. Data from previous research can also be integrated. All research conducted within the Health Data Warehouse is subject to prior review by the Scientific and Ethics Committee ( SEC ). Through partnerships developed by Caen University Hospital, non-individual results consisting solely of aggregated data (grouping several patients) may be shared with external partners involved in research. Discoveries from research projects (results, scores, algorithms, etc.) may be published in scientific journals. They may also lead to patents: the licenses granted for these patents are likely to generate financial returns.

You may, at any time and without providing a reason, object to the use of your data for research by contacting the director of the hospital where you (or your child) received treatment or by completing the online objection form available at the following address: https://exercicedesdroits.chu-caen.fr/arno-app/login . Your objection will in no way affect the quality of medical care or treatment provided, nor your relationship with the hospital physician.

To obtain information on the new processing of your data, the data controller has set up this dynamic website (“transparency portal”) which you can consult regularly and prior to the implementation of each new processing. 

To exercise your rights over your personal data or for any information on the processing of personal data managed by the Caen Normandy University Hospital, you can first contact the healthcare professional coordinating the study.