Notice of Privacy Practices

Your Rights

You have the right to:

• Get a copy of your paper or electronic medical record
• Correct your paper or electronic medical record
• Request confidential communication
• Ask us to limit the information we share
• Get a list of those with whom we’ve shared your information
• Get a copy of this privacy notice
• Choose someone to act for you
• File a complaint if you believe your privacy rights have been violated

Your Choices

You have some choices in the way that we use and share information as we:

• Tell family and friends about your condition
• Provide disaster relief
• Include you in a hospital directory
• Provide mental health care
• Market our services and sell your information
• Raise funds

Our Uses and Disclosures

We may use and share your information as we:

• Treat you
• Run RHI’s organization
• Bill for your services
• Help with public health and safety issues
• Do research
• Comply with the law
• Respond to organ and tissue donation requests
• Work with a medical examiner or funeral director
• Address workers’ compensation, law enforcement, and other government requests
• Respond to lawsuits and legal actions

Your Rights

When it comes to your health information, you have certain rights.  This section explains your rights and some of our responsibilities to help you.

Get an Electronic or Paper Copy of your Medical Record

• You can ask to see or get an electronic or paper copy of your medical record and other health information we have about you. A request for medical records may be submitted in writing to Rehabilitation Hospital of Indiana, Attn: Health Information Services, 4141 Shore Dr, Indianapolis, IN 46254. Please call 317-329-2221 for additional information.
• We will provide a copy or a summary of your health information, usually within 30 days of your request. We may charge a reasonable, cost-based fee.

Ask us to Correct your Medical Record

• You can ask us to correct health information about you that you think is incorrect or incomplete. Please submit your request in writing to Rehabilitation Hospital of Indiana, Attn: Privacy Officer, 4141 Shore Dr, Indianapolis, IN
• We may say “no” to your request, but we’ll tell you why in writing within 60 days.

Request Confidential Communications

• You can ask us to contact you in a specific way (for example, home or office phone) or to send mail to a different address.
• We will say “yes” to all reasonable requests.

Ask us to Limit what We Use or Share

• You can ask us not to use or share certain health information for treatment, payment, or RHI’s operations. We are not required to agree to your request, and we may say “no” if it would affect your care.
• If you pay for a service or health care item out-of-pocket in full, you can ask us not to share that information for the purpose of payment or our operations with your health insurer. We will say “yes” unless a law requires us to share that information.

Get a List of Those with Whom We’ve Shared Information

• You can ask for a list (accounting) of the times we’ve shared your health information for six years prior to the date you ask, who we shared it with, and why.
• We will include all the disclosures except for those about treatment, payment, and health care operations, and certain other disclosures (such as any you asked us to make). We’ll provide one accounting a year for free but will charge a reasonable, cost-based fee if you ask for another one within 12 months.

Get a Copy of this Privacy Notice

You can ask for a paper copy of this notice at any time, even if you have agreed to receive the notice electronically. We will provide you with a paper copy promptly.

Choose Someone to Act for You

• If you have given someone medical power of attorney or if someone is your legal guardian, that person can exercise your rights and make choices about your health information.
• We will make sure the person has this authority and can act for you before we take any action.

File a Complaint if you Feel your Rights are Violated

If you feel we have violated your rights you may file a complaint. Please call or submit your complaint in writing to Risk Manager at (317) 329-2108, 4141 Shore Drive, Indianapolis, IN 46254.

• You can file a complaint with the U.S. Department of Health and Human Services Office for Civil Rights by sending a letter to 200 Independence Avenue, S.W., Washington, D.C. 20201, calling 1-877-696-6775, or visiting hhs.gov/ocr/privacy/hipaa/complaints/
• We will not retaliate against you for filing a complaint.

Your Choices

For certain health information, you can tell us your choices about what we share. If you have a clear preference for how we share your information in the situations described below, talk to us. Tell us what you want us to do, and we will follow your instructions.

In these cases, you have both the right and choice to tell us to:

• Share information with your family, close friends, or others involved in your care
• Share information in a disaster relief situation
• Include your information in a hospital directory

In these cases, we never share your information unless you give us written permission:

• Marketing purposes
• Sale of your information
• Most sharing of psychotherapy notes

In the case of fundraising:

• We may contact you for fundraising efforts, but you can tell us not to contact you again.

Our Uses and Disclosures

How do we typically use or share your health information?

We typically use or share your health information in the following ways.

• Treat you - We can use your health information and share it with other professionals who are treating you. Example: A doctor treating you for an injury asks another doctor about your overall health condition.
• Conduct RHI’s Operations - We can use and share your health information to run our practice, improve your care, and contact you when necessary. Example: We use health information about you to manage your treatment and services.
• Bill for your services - We can use and share your health information to bill and get payment from health plans or other entities. Example: We give information about you to your health insurance plan so it will pay for your services.

How else can we use or share your health information?

We are allowed or required to share your information in other ways – usually in ways that contribute to the public good, such as public health and research. We have to meet many conditions in the law before we can share your information for these purposes. For more information see: www.hhs.gov/ocr/privacy/hipaa/understanding/consumers/index.html.

• Help with public health and safety issues - We can share health information about you for certain situations such as:

• • Preventing disease
  • Helping with product recalls
  • Reporting adverse reactions to medications
  • Reporting suspected abuse, neglect, or domestic violence
  • Preventing or reducing a serious threat to anyone’s health or safety
• Do research - We can use or share your information for health research.
• Comply with the law - We will share information about you if state or federal laws require it, including with the Department of Health and Human Services if it wants to see that we’re complying with federal privacy law.
• Respond to organ and tissue donation requests - We can share health information about you with organ procurement organizations.
• Work with a medical examiner or funeral director - We can share health information with a coroner, medical examiner, or funeral director when an individual dies.
• Address workers’ compensation, law enforcement, and other government requests - We can use or share health information about you:

• • For workers’ compensation claims
  • For law enforcement purposes or with a law enforcement official
  • With health oversight agencies for activities authorized by law
  • For special government functions such as military, national security, and presidential protective services
• Respond to lawsuits and legal actions - We can share health information about you in response to a court or administrative order, or in response to a subpoena.

Rehabilitation Hospital of Indiana’s Responsibilities

• We are required by law to maintain the privacy and security of your protected health information.
• We will let you know promptly if a breach occurs that may have compromised the privacy or security of your information.
• We must follow the duties and privacy practices described in this notice and give you a copy of it.
• We will not use or share your information other than as described here unless you tell us we can in writing. If you tell us we can, you may change your mind at any time. Let us know in writing if you change your mind.

For more information visit: www.hhs.gov/ocr/privacy/hipaa/understanding/consumers/noticepp.html.

Changes to the Terms of this Notice

We can change the terms of this notice, and the changes will apply to all information we have about you. The new notice will be available upon request, in our office, and on RHI’s website.

Other Instructions for Notice

• The effective date of this Notice of Privacy Practice is January 14, 2015
• You may contact the RHI Privacy Officer for questions at 317-329-2221 or e-mail at PrivacyOfficer@rhin.com
• We will not share your psychotherapy notes without your written permission
• This notice applies to the Rehabilitation of Indiana-Main Campus, RHI-Carmel and RHI-NeuroRehabilitation Center

 

Disclosure for Marketing-Related Data Processors

Cookies

“Cookies” are tiny text files stored by a user’s browser (e.g. Internet Explorer, Safari, Firefox, Chrome, etc.) to save information for use in subsequent interactions with the site. This information can be anything that is known to the website owner and may include but is not limited to any content you provide via a form on the site, content you view, the date and time that you view this content, the products you purchase, or your location information.

We collect no personally identifiable information except for information you explicitly submit on this website. You are not required to accept any cookies to use this site. We use third-party cookies (such as the Google Analytics cookies) to gain insights about the demographics and usage behavior of our visitors and to serve advertising to them across the Internet. 

Standard Internet Logs

We collect information for each request to our website in a log file. Each log entry includes the date and time of the request, your IP address, the content you requested, the type of browser you use, any URL your browser provides indicating a website that may have referred you to our site, as well as the results of the request (error diagnostic information).

Use of Collected Data and Data Processors We Use

We utilize products that collect, receive, or use end users’ personal data. Data is collected to allow us to provide our services, as well as for remarketing and behavioral targeting, advertising, analytics, and email marketing. Personal data is collected using the following services:

Analytics:

• Google Analytics
  This website uses Google Analytics to help analyze how visitors use this site. Google Analytics utilizes the data it collects to track and examine the use of our website, to prepare reports on its activities and share them with other Google services. Google may use the collected data to contextualize and personalize the ads of its own advertising network. Data collected: Cookie, Identifiers for mobile devices and Usage Data. Google’s Privacy Policy | Opt Out | How Google uses data when you use our partners' sites
• Google Analytics Demographics and Interest Reporting
  We use the Demographics and Interest Reporting feature in Google Analytics to gain insights regarding the demographics and interests of our website visitors. Data collected: Cookie and Usage Data. Google's Privacy Policy
• Google Tag Manager
  We use this tool to place tracking code. It may collect aggregated data from tags firing. Google's Privacy Policy

Remarketing and Behavioral Targeting:

We use the following third-party advertising vendors that use cookies to show you our ads across the internet based on your past visits to our website properties or your previous web browsing behavior.

• Bing
  We use advertising products offered by Microsoft Advertising, including Bing Paid Search which is a search engine. Bing conversion tracking is an analytics service provided by Microsoft Advertising that connects data from the Microsoft Advertising network with actions performed on our website. Data collected: Cookie and Usage Data. Microsoft’s Privacy Statement
• Facebook
  We utilize advertising products offered by Facebook and its affiliates, potentially including Instagram, Oculus and WhatsApp, that collect, receive, or use end users’ personal data. Facebook Ads conversion tracking is an analytics service provided by Facebook, Inc. that connects data from the Facebook advertising network with actions performed on our website. Data collected: Cookie and Usage Data. Facebook’s Data Policy
• Google Ads
  We use advertising products offered by Google Ads, potentially including Google Paid Search, Google Display and YouTube. Google Ads conversion tracking is an analytics service provided by Google, Inc. that connects data from the Google Ads advertising network with actions performed on our website. Data collected: Cookie and Usage Data. Google Ads’ Privacy Policy | Opt Out
• Pandora 
  We use advertising products offered by Pandora Media Inc., a personalized Internet radio service. Data collected: Cookie and Usage Data. Pandora's Privacy Policy
• Soundcloud
  We use advertising products offered by Soundcloud Limited, including SoundCloud, Inc. Data collected: Cookie and Usage Data. Soundcloud’s Privacy Policy | Cookie Policy

• Q1Media
  We use advertising products offered by Q1Media, Inc. including geofencing. Data collected: Cookie and Usage Data. Q1Media’s Privacy Policy

You can generally opt-out of receiving personalized ads from third party advertisers who follow the Digital Advertising Alliance’s Self-Regulatory Principles for Online Behavioral Advertising by visiting the opt-out page on the DAA site.

You can opt out of personalized online ads from members of the Network Advertising Initiative by visiting the opt-out page of the NAI site.

Email Marketing:

We collect email addresses and other personally identifiable information to send transactional and marketing emails to our subscribers. We utilize the following products that collect, receive, or use end users’ personal data for this purpose. To learn about how a specific email vendor collects and uses personal data, click on the privacy policy link.

• SendGrid - Privacy Policy
• Wufoo
  Wufoo by SurveyMonkey is an online form builder that allows us to collect the data you choose to submit through some forms on our website. We use the information collected for a variety of reasons, including email marketing and following up on marketing requests. Wufoo’s Privacy Policy

 

Revoking Consent and Data Erasure

End users who reside in the European Economic Area: If you wish to revoke your consent to have information processed by us or any of the vendors we use for data processing, or you wish to request deletion of your personal data, please both contact the website owner where the data was collected/obtained (the Data Controller) and us at info@rhin.com.

• The identity and contact details of the organization, its representative, and its Data Protection Officer
• The purpose for the organization to process an individual's personal data and its legal basis
• The legitimate interests of the organization (or third party, where applicable)
• Any recipient or categories of recipients of an individual's data
• The details regarding any transfer of personal data to a third country and the safeguards taken
• The retention period or criteria used to determine the retention period of the data 
• The existence of each data subject's rights 
• The right to withdraw consent at any time (where relevant)
• The right to lodge a complaint with a supervisory authority
• Whether the provision of personal data is part of a statutory or contractual requirement or obligation and the possible consequences of failing to provide the personal data
• The existence of an automated decision-making system, including profiling, and information about how this system has been set up, the significance, and the consequences

Per Article 14(3), if you obtain personal data from a third party, you must communicate the above information to the data subject either: no later than one month after you have obtained the data, at the time you first communicate with the data subject, or before sharing the data with another organization.

Privacy Policy was updated on 3/3/2021.