Privacy Notice for Egg Matching

This privacy notice explains how European Egg Bank ApS (“EEB”, “we”) collects, uses, and discloses information about you as part of your search for egg matching and related services.

Controller and contact details

European Egg Bank ApS
Struenseegade 9, 2 sal
DK-2200 Copenhagen N
CVR no. 27506372
Telephone: +45 38 34 36 00
Email: egg@fertio.com
Contact to our Data Protection Officer: dataprotection@europeanspermbank.com

Processing Activity

Initial sign-up through email, phone, or online

  • Content: Name, date of birth, contact details
  • Purpose: To register you in our system, create and manage your profile, and contact you regarding matching, clinic referrals, and relevant services
  • Legal Basis: GDPR Art. 6(1)(b) – performance of a contract and Art. 6(1)(a) – consent where applicable
  • Storage Period: Up to 5 years after last interaction

Additional information voluntarily provided by you

  • Content: Family constellation, preferred treatment country, preferred clinic, partner ID, phenotype, other preferences
  • Purpose: To guide you to the optimal match and provide information about treatment options tailored to your situation
  • Legal Basis: GDPR Art. 6(1)(f) – legitimate interest
  • Storage Period: Up to 5 years or anonymised if no match is made

Medical and genetic information

  • Content: Infertility reason, genetic carrier status, ethnicity, health data, saliva or blood samples
  • Purpose: To perform medical and genetic matching and assist in identifying suitable donors and treatment options
  • Legal Basis: GDPR Art. 6(1)(a) and Art. 9(2)(a) – explicit consent
  • Storage Period: Up to 30 years due to traceability requirements

Photo matching

  • Content: Photo of your face
  • Purpose: To find a donor match with similar facial features, either digitally or manually
  • Legal Basis: GDPR Art. 6(1)(f) – legitimate interest
  • Storage Period: Deleted after matching result is communicated

Matching with a donor

  • Content: Your full identity, chosen donor, chosen treatment clinic, payment information
  • Purpose: To facilitate treatment planning, send referrals, and issue invoices
  • Legal Basis: GDPR Art. 6(1)(b) – contract performance
  • Storage Period: Minimum 5 years (accounting laws)

Referral to a treatment clinic

  • Content: Your identity, contact details, chosen donor
  • Purpose: To share your information with the clinic for medical assessment and treatment planning
  • Legal Basis: GDPR Art. 6(1)(b) – contract performance
  • Storage Period: Up to 30 years due to legal traceability requirements

Treatment outcome

  • Content: Treatment data from clinics
  • Purpose: To receive and store outcome data for compliance with legal obligations and traceability
  • Legal Basis: GDPR Art. 6(1)(c) – legal obligation
  • Storage Period: Up to 30 years

CPR / national ID processing

  • Content: CPR number or equivalent ID
  • Purpose: To uniquely identify you and comply with human tissue legislation and traceability requirements
  • Legal Basis: GDPR Art. 6(1)(c) – legal obligation
  • Storage Period: Up to 30 years

Unintended incidents / adverse events

  • Content: Health data, medical records from healthcare professionals
  • Purpose: To investigate and manage unintended incidents
  • Legal Basis: GDPR Art. 9(2)(a) – explicit consent
  • Storage Period: Up to 30 years

Clinic cooperation

  • Content: Contact details of clinic staff
  • Purpose: To coordinate treatment and matching services with clinics
  • Legal Basis: GDPR Art. 6(1)(f) – legitimate interest
  • Storage Period: As long as cooperation is active

Newsletter

  • Content: Name and email address
  • Purpose: To send marketing communications and updates
  • Legal Basis: GDPR Art. 6(1)(a) – consent
  • Storage Period: Until consent is withdrawn

Website usage

  • Content: Online identifiers, browsing behaviour
  • Purpose: To analyse usage and improve our website and services
  • Legal Basis: GDPR Art. 6(1)(f) – legitimate interest
  • Storage Period: Up to 2 years

Recipients

When necessary, your personal data may be shared with:

  • Your fertility clinic
  • Partner clinics involved in your treatment
  • Accredited laboratories performing genetic testing or screening
  • Public authorities where required by law

All recipients are subject to confidentiality obligations.

If EEB discontinues its activities, relevant personal data may be transferred to another licensed tissue establishment to comply with legal traceability requirements.

Transfer to third countries

Your personal data may be transferred to clinics or laboratories located outside the EU/EEA.

Such transfers may be necessary to:

  • Perform our contract with you
  • Comply with legal obligations
  • Ensure traceability
  • Manage adverse reactions
  • Perform screening

Where required, transfers are safeguarded by EU Standard Contractual Clauses.

Data Protection Officer (DPO)

If you have questions about how we process your personal data, you can contact: dataprotection@europeanspermbank.com

Your Rights

Under the GDPR, you have the right to:

  • Access your personal data
  • Rectify inaccurate data
  • Request erasure (in certain cases)
  • Restrict processing
  • Object to processing
  • Data portability

You can read more at: www.datatilsynet.dk

Withdrawal of Consent

You may withdraw your consent at any time by contacting: dataprotection@europeanspermbank.com

Withdrawal does not affect processing carried out prior to withdrawal.

Please note that due to legal requirements (e.g. traceability in human tissue legislation), certain data may still be retained even after withdrawal.

Correction of Personal Data

If you wish to update, access, or delete your data, please contact: dataprotection@europeanspermbank.com

Complaints

If you wish to complain, you may contact:

European Egg Bank ApS (see contact details above)

or

Datatilsynet (Danish Data Protection Agency)
Borgergade 28, 5th floor
DK-1300 Copenhagen K
Email: dt@datatilsynet.dk

Links to Other Websites

Our website may contain links to third-party websites.

EEB is not responsible for their content or privacy practices.