Consent for Processing Personal Data

European Union

1. Introduction and Purpose

Sword Health Physio, Unipessoal LDA (“Sword”) collects and processes certain of your health information as a data controller to provide Physical Therapy Services (“Services”). To fulfill your treatment plan, and with your consent, we share specific health data with a Prescription Provider Knokhealth Portugal, Lda (the "Prescription Provider") so it can issue a prescription for suitable cases when medically necessary. The sharing of information with the Prescription Provider enables the direct collection of relevant personal health data within the Sword platform and the secure sharing of necessary medical information with authorised healthcare professionals for the purpose of issuing a clinical prescription. 

Under the GDPR, your health data is classified as "Special Category Data". We require your explicit, freely given, specific and informed consent to share this data with the Prescription Provider.

2. What Data We Will Collect and Share

Sword may collect and use the following data, in accordance with our Privacy Statement in order to provide the Services: 

• Identity Data: full name and contact details (physical address, email address, telephone number).

• Health data: information and medical history you provided to us, your medical records, images, information gathered or created during your telehealth visits;

• Demographic Data: gender, date of birth; 

• Device data: IP address, movement and motion tracking information and your voice. These data will be collected from the devices connected to your personal Sword account as part of the Services.

For the Prescription Provider to issue you a clinical prescription, Sword will share the following information with the Prescription Provider:

• Identity Data: Full name, date of birth, gender and contact details (phone number and email).

• Clinical Data: body area, side, pain level, medication, Patient Reported Outcome Measures (PROM), subjective and objective exam and specific physical symptoms.

3. Purpose of the Transfer

The transfer of your data to the Prescription Provider will be performed by Sword for the exclusive purpose of issuing a clinic prescription, which includes the following processing activities:

• Verifying the clinical appropriateness of the prescribed treatment;

• Setting the parameters including frequency and duration of the prescribed treatment in the prescription;

• Issuing a prescription for your treatment, which will be made available to you and Sword.

   

Please note that the Prescription Provider will be acting as an Independent Data Controller of the data they receive. Make sure you consult and understand the Prescription Provider’s privacy notice to fully understand how they will process your personal data. 

4. Right to withdraw consent 

You may withdraw this consent at any time by contacting privacy@sword.com. 

Please note that withdrawing consent will not affect the lawfulness of processing based on consent before its withdrawal.

5. Data Retention and Security

Sword employs rigorous technical and organizational measures (such as encryption and access controls) to protect your data. Your records will be kept only as long as necessary for clinical care and to comply with statutory medical record retention periods.

6. Additional Information

For more information on the processing of your personal data, your rights as data subject and how you may exercise them, please consult Sword’s Privacy Statement.

Consent Declaration

I consent to Sword collecting and processing my personal data (namely my identity data, health data, demographic data, and device data) for the purpose of providing the Physical Therapy Services.

I consent to Sword sharing my personal data (namely, my identity and clinical data) with the Prescription Provider for the purpose of issuing a clinical prescription.