Privacy Statement for ProDerma Scandinavia
ProDerma Scandinavia is responsible for the company’s processing of personal data.
Personal data stored
We store the following personal information about our customers:
Name, address, telephone number and e-mail address, possibly gender, date of birth, the password for (my page) etc.] Time of treatments and completed treatments and receipts for product purchases.
Special categories of personal data (“sensitive personal information”):
Health information in the form of journal information with records of your treatment course.
Purpose of the treatment
We process the information in order to fulfil our obligations by agreement with you.
We record information about you to perform our treatments. Without being registered, we cannot perform treatment on you. This includes being able to provide effective facilitation of our tasks for you, including managing appointments and appointments, registering completed treatments to determine the course of treatment.
We also use the information to provide you with information, offers and services in connection with your purchase via email, phone, SMS and mailings if you have checked this.
The basis for the treatment
Information about the name, address, telephone, the e-mail address is used to fulfil the purchase agreement. The basis for this treatment is Article Art 6 (b) of the Privacy Regulation.
The legal basis for our processing of your personal information follows from:
Article 6 (3) of the Data Protection Regulation 1, points b and f. In certain cases, we also process information after obtaining your consent. You will have been informed about this in connection with our having obtained consent.
Obtaining personal information
We store the personal information you have provided our employees or on our website in connection with your booking/purchase.
When you visit www.proderma.no your IP address is registered. Bulk does not link this information directly to you as a user. The time you spend on our pages is logged, but you are anonymous to us. We use this information to manage and maintain our pages.
In addition, we collect statistics on how our pages are used to improve the user experience, and in this connection, cookies are used to observe how users navigate with us. These cookies and the data collected are anonymous and cannot be used to identify you as a person.
www.proderma.no links to websites that are owned and operated by other companies. We do not have access to and process personal information entered on these sites unless otherwise specified in this statement. Bulk also has no responsibility for the content or processing of personal information on other websites. You should read the privacy statements available on the relevant websites you visit for more information.
Disclosure of information to third parties
We will not share, sell, transfer or otherwise disclose personal information to others unless we are legally obliged to do so.
In order to fulfil our obligations under the agreement, the necessary information is provided to our partners: IT supplier, CBIT AS (booking system).
Deletion of personal data
Information we are obliged to preserve after the Accounting Act will be stored for up to 5 years, in accordance with the requirements of the Act.
At this time, we cannot say how long we will store your personal information. However, we can inform you that we will emphasize how long we need the information, partly in relation to ongoing treatment processes, and partly in relation to regulatory requirements, when we are to determine how long your information we keep.
How long you need to store the information can last from 1 to 10 years depending on the type of employee information. We store the information according to the law’s requirements for this kind of information and no longer than is necessary to fulfil the purposes of the treatment.
Rights of the data subjects
We process your personal information in accordance with the Personal Data Act and applicable regulations. It is pointed out that you can demand access to and transfer of your personal data, as well as demanding rectification or deletion of information.
It can be appealed to the Data Inspectorate for processing in violation of the rules.
We secure your personal information through both physical and virtual access and access control, as well as by encrypting sensitive parts of information provided.
Inquiries about which information is registered, corrected and deleted can be sent to the following addresses: