Mindmore only stores pseudonymized data from completed cognitive tests. Despite pseudonymization, some of this personal data is considered sensitive as it constitutes health data, read more here.

​

Mindmore stores the following pseudonymized patient data as a personal data processor:

​

• Results from cognitive tests in the form of images, number of correct answers, number of errors, response times and transcriptions.

• Responses from completed self-assessment scales.

• Audio files from the RAVLT, CERAD, FAS and BNT subtests to enable manual correction of results.

• Transcriptions from the RAVLT, CERAD, FAS and BNT subtests from manual correction and voice recognition.

• The test taker's indication of educational level.

• The test taker's self-assessment on a scale of 1-5 regarding hearing, vision, stress and rest.

• The test taker's comments about the test taker or the test occasion that were stated before the test was started. Free text answers.

• Possibly. information about how the test taker felt during the test (e.g. headache, stress, tired eyes, etc.)

• Any feedback from the test taker and the test taker after the test was completed regarding how the test was experienced, difficulties and interruptions. Structured data and free text responses.

• The test taker's indication of handedness (ambidextrous, left-handed, right-handed)

• Registration code.

 

When invited to take a test remotely, the patients email address and first and/or last name are entered by the test taker so that an invitation email with a test link can be sent out. The test taker's email address is used, together with a public key, to use a cryptographic function to create a hash sum that is saved in the database. This is to prevent anyone with access to the system or database from being able to link a created registration code and a created test opportunity with the test taker's email address. The test taker's email address is stored encrypted for 3 months with the email provider Flowmailer so that the email can be sent and deleted afterwards. The email address is not stored with the sub-processor where all pseudonymized test data is stored.

​

As the data controller, Mindmore also stores the first and last names, email addresses, organizational affiliation and mobile phone numbers (if multi-factor authentication is used) of the employees of the clinics/companies that use the test application and the results portal. This is to enable the service to be used with individual login and assignment of authorization roles.