The Caen Normandy University Hospital health data warehouse corresponds firstly to a warehouse of pseudonymized data and files making it possible to bring together in a single location information elements from different databases of a hospital information system . Data and files are retrieved at a regular pace using connectors.

Personal, administrative and medical information about you is collected during your visit to CHU Caen Normandie or during a teleconsultation offered to you by CHU Caen Normandie. Caen Normandie University Hospital (hereinafter “We”), as a healthcare establishment, undertakes to ensure that the processing of personal data complies with French and European regulations, in particular the (EU) Regulation. general on data protection of April 27, 2016 known as “GDPR” and the Law relating to data processing, files and freedoms of January 6, 1978 amended known as the “Informatics and Freedoms Law”. Personal health data is also governed by the Public Health Code, the Social Security Code and the Penal Code. The purpose of this Notice is to inform patients and any person concerned about the way in which Caen Normandy University Hospital processes personal data, particularly in the Caen University Hospital Health Data Warehouse.

This policy may be updated in order, in particular, to take into account the legislative and regulatory developments imposed on us.

In order to facilitate the realization, from certain administrative and medical data collected for care (pseudonymous data) , of health research, studies of improvement and optimization of the care and strategic management of the hospital activity, a Health Data Warehouse ( EDS ) has been set up at CHU Caen Normandie on the legal basis of the public interest mission with which the CHU is invested.

The Health Data Warehouse established by Caen Normandy University Hospital declared its compliance in accordance with the RS-002 standard on August 9, 2022.

Depending on your care, we may need to collect different categories of personal data necessary for the administration, the constitution of the medical file and the invoicing of the care.

The medical record includes:

• Patient health information, in particular that entrusted to the department's doctors (history, state of health, treatments and follow-ups, etc.)
• Information relating to the characteristics of your care (dates of entry and exit, mode of care, people to contact, doctors)
• The results and conclusions of clinical, radiological and laboratory examinations carried out, etc.

The data integrated into the health data warehouse concerns patient information from the last 20 years.

A general health information systems security policy (PGSSI-S) sets the security requirements for digital health services. On the basis of this frame of reference, a variation specific to the CHU Caen Normandie is applied through an information system security policy to define the guidelines and security requirements implemented and adapted at the level of the establishment at the regard to the nature of the data processed and to the activities. Appropriate physical, logical and organizational security measures are provided to guarantee the confidentiality of the data, and in particular to prevent any unauthorized access. Systems ensure that subcontractors provide appropriate guarantees to ensure the security and confidentiality of personal data.

The data collected by Caen Normandy University Hospital is used to carry out research to improve the quality of care, within the framework of internal/monocentric (care team) or external (multicenter) . Some research also involves the development and improvement of artificial intelligence algorithms.

A Health Data Warehouse has been set up at the Caen University Hospital to enable the carrying out, based on data collected for care, of certain so-called non-interventional research, feasibility studies of clinical trials and studies of management of hospital activity. Data from previous research can also be integrated. All research conducted in the EDS is subject to prior advice from the Scientific and Ethics Committee ( CSE ). As part of partnerships developed by the Caen University Hospital, non-individual results consisting solely of aggregated data (grouping together several patients) could be shared with external partners involved in research. Discoveries from research projects (results, scores, algorithms, etc.) may be the subject of scientific publications. They can also give rise to patents: the licenses granted on these patents are likely to be financially valued.

You can, at any time and without giving any reason, express opposition to the use of your data for research by contacting the director of the hospital where you (or your child) were treated or by completing the form electronic opposition available at the following address: https://exercisedesdroits.chu-caen.fr/arno-app/login . Your possible opposition will in no way affect the quality of the medical treatment or care provided, nor the relationship with the hospital doctor.

To obtain information on the new processing(s) of your data, the data controller has set up this dynamic website (“transparency portal”) which you can consult regularly and prior to the update. implementation of each new treatment. 

To exercise your rights over your personal data or for any information on the processing of personal data managed by the Caen Normandie University Hospital, you can first contact the health professional coordinating the study.