Privacy

Courtesy translation – the Norwegian version is legally binding.

Your privacy is important to us. Below you can read more about how we actively work to safeguard your privacy. Here we will explain how and why we collect and use personal data about you and how we process your personal data.

What is personal data, and who is responsible for it?

Personal data

Personal data is information and assessments that can be linked to you as an individual. This may be your name, your contact information, your health information or medical assessments. The Personal Data Act determines how we must process your personal data. The Personal Data Act sets a number of requirements for the processing of what are called special categories of personal data (including health information), which Beauty Medical is required to follow. As a private healthcare provider, Beauty Medical must also comply with the rules of the health legislation on the processing of personal data. Relevant health acts dealing with the processing of personal data are the Specialist Health Services Act, the Health Personnel Act, the Patient Records Act (incl. the Patient Records Regulations), the Patients' and Users' Rights Act, the Health Archives Act, etc. All laws and regulations can be read at www.lovdata.no

Processing of personal data

Processing of personal data means any use of personal data, for example collection, registration, storage, compilation, disclosure, deletion, etc. All processing of personal data is, as a main rule, subject to the Personal Data Act.

Data controller

The party that determines the purpose of the processing of the personal data is called the data controller. It is the data controller's task to ensure that personal data is processed in accordance with the applicable regulations.

Contact details:

Telephone number: 403 11 017

E-mail: post@beautymedical.no

Vogts gate 56, 0477 Oslo

How we use personal data

We only collect personal data to the extent that it is necessary for us to be able to offer our services to you. Our main purpose for processing your personal data is to provide proper healthcare, and to offer our medical services. Beyond this, in some cases we process personal data for marketing purposes. You can read more about this under the marketing sub-section.

The personal data we collect about you is information that we consider relevant for providing you with proper healthcare. The information we process has been obtained from you, from other healthcare bodies where you have received treatment, from tests we take, etc.

When you are diagnosed, receive healthcare or medical treatment at Beauty Medical, we are obliged to register all the information necessary to provide healthcare in our patient record systems. There are legal requirements for keeping patient records and for what information must be recorded. The record may, for example, contain contact information, next of kin, medical history, previous treatments, which medicines you use, etc.

We delete personal data when it is no longer necessary to fulfil the purpose for which it was originally collected. Different rules apply to personal data stored in patient records, see more under the sub-section on deletion of personal data.

All our employees who process health information about you are subject to a duty of confidentiality. The same applies to others who process personal data on our behalf.

Who can we share your personal data with?

Healthcare providers or other healthcare personnel

It happens that we are contacted by healthcare providers, the doctor who referred you to us or other healthcare personnel who also give you medical treatment and who ask to be given your patient information.

Healthcare personnel are permitted to disclose your confidential information to cooperating healthcare personnel who are subject to the same duty of confidentiality as our employees. This is done only to the extent considered necessary to provide you with proper healthcare, and the rules follow from section 25 of the Health Personnel Act. As a patient, you have the right to object to such disclosure. The information that may be shared is limited to what is necessary. We only share such information with the referring doctor or if it is requested by cooperating personnel.

Public authorities

If required by law, or if there is a suspicion that a criminal offence has been committed in connection with the use of our services, the information we have stored about you may be disclosed to public authorities.

Data processors

A data processor is an independent company or legal entity that processes personal data on behalf of the data controller. That is, when Beauty Medical uses subcontractors, for example suppliers of patient record systems.

Beauty Medical ensures that all data processors are subject to the same duty of confidentiality as personnel employed by Beauty Medical, and that agreements on the use of data processors meet the requirements of the Personal Data Act for the use of data processors/the content of data processor agreements.

Beauty Medical mainly uses data processors that process personal data within the EU/EEA. This means that these data processors are subject to the same regulations when it comes to the processing of personal data. In a few exceptions, data processors located outside the EU/EEA are used. In these cases Beauty Medical has ensured that these data processors are subject to an adequate level of protection for the processing of personal data in accordance with GDPR Art. 45 et seq.

Public health registers to which we are required by law to disclose information

Your rights

Access

You have the right of access to your own personal data. If you wish to know what personal data is stored about you in our systems, you can contact the hospital or radiology department that treated you, or you can send us a request. We ask that you do not provide sensitive personal data.

Rectification and deletion

Rectification

It is important that the information we hold about you is correct and up to date. If you discover an error, we encourage you to contact us so that the information can be corrected. As regards information in patient records, the right to have information corrected is limited by rules in the Health Personnel Act.

Deletion

You can also contact us if you want information to be deleted. As regards information in patient records, the right to have information deleted is very limited due to rules in the Health Personnel Act.

Storage period

As a starting point, we will not store personal data for longer than is necessary to fulfil the purpose of the processing and the statutory obligations we have. Different rules apply to personal data stored in patient records.

The main rule is that records must be kept until, given the nature of the healthcare, they are no longer assumed to be needed. Under the Health Archives Regulations, Beauty Medical is obliged to deposit record material with the Norwegian Health Archive after this.

Right to request restriction of the processing of personal data

You have the right to demand that our processing of personal data about you is restricted. Methods of restricting processing include moving the data to another processing system, making selected information unavailable, or removing published information from a website. You can request this in the following situations:

· If you believe that the personal data we have stored about you is inaccurate; in this case the processing can be restricted for the period it takes to verify whether the personal data is correct.

· If you believe that our processing of personal data about you is unlawful.

· If Beauty Medical no longer needs the personal data, but you need it to establish or enforce legal claims.

Right to data portability

You have the right to take your personal data from Beauty Medical to another equivalent provider. This is called data portability. This right applies only if the processing of your personal data is based on consent from you or is in connection with the performance of a contract between you and Beauty Medical. For the sake of good order, please note that the majority of the processing that Beauty Medical carries out with personal data has a so-called legal basis in legal obligations to provide healthcare and is therefore not subject to the right to data portability.

If the processing of the personal data about you has a legal basis in connection with the performance of a contract or your consent, you can choose whether you want the information to be handed over to yourself or whether we send it directly to your new medical practitioner/provider.

For the sake of good order, we point out that the right to data portability has no effect on our obligations to retain your patient record.

Right to complain to the Norwegian Data Protection Authority

If you disagree with how we process personal data, you have the right to complain to the Norwegian Data Protection Authority (Datatilsynet). You can read more about this on the Datatilsynet website:

https://www.datatilsynet.no/om-datatilsynet/kontakt-oss/hvordan-kan-jeg-klage-til-datatilsynet/

Data Protection Officer

Please contact us at post@beautymeical.no if you have questions about how we process your personal data, wish to request rectification, deletion or access, or have any other questions. We will respond to your enquiry as soon as possible. We ask you not to send personally sensitive information by e-mail.

Marketing and newsletters

Social media

We want to be accessible to our customers and potential customers on social media, and therefore have profiles on Facebook, Instagram, TikTok, LinkedIn and YouTube, among others. The purpose of these pages is to make our services, our contact information and opening hours available to our customers/patients and potential patients. If you wish to contact us through these channels, we encourage you not to share personal data. If you have a question that involves sharing your sensitive personal data (e.g. information about your health), we recommend that you contact us by telephone instead so that we can help you.

Beauty Medical's newsletter is a newsletter sent by e-mail. In the newsletter we want to give you access to good, quality-assured information on health-related topics, answers to medical questions and useful advice on how to stay healthy. In the mailings you will receive, among other things, information about campaigns and tips from Beauty Medical Helse's healthcare personnel.

To subscribe to Beauty Medical's newsletter you must register your e-mail address and consent to our terms of use.

To make sure that the right recipient receives our mailings, you will be asked to confirm the subscription by an automatic e-mail that is sent to the e-mail address provided. If you choose not to confirm the e-mail, your e-mail address will not be registered with us, and you will not receive our newsletter.

When you register to receive the newsletter, you consent to our sending you 1-2 e-mails per month with free information about our health services. You also consent to our measuring the open rate and clicks on links in the newsletter after each mailing. This is done using «MailChimp», a pixel-sized file that is opened when the newsletter is opened. You can read more about how we use cookies here.

Beauty Medical uses the e-mail service Mailchimp for sending newsletters. E-mail address, IP address, open rate and clicks will therefore be processed and stored by Mailchimp in the USA. E-mail address.

You can unsubscribe from the newsletter at any time. You do this by opening our most recent newsletter and clicking the unsubscribe link. You can also choose to tell us why you do not want to receive the newsletter from us. This is voluntary, and you will be removed from the list regardless of whether you choose not to say why. If you choose to unsubscribe from the newsletter, all information about you will be deleted by us and from our account with MailChimp.

Beauty Medical AS will not use your information for any marketing or services other than sending out this newsletter.

Before and after photos

We have published some before and after photos that our patients have chosen to share with us and have given their consent to be published on our websites and on social media. Only photos from patients who have given their express and voluntary consent to publication are shown on our pages.

If you have chosen to share photos of yourself, you can withdraw your consent at any time. You can contact us to have your photos deleted by post to Beauty Medical AS Vogtsgate 56, 0477 Oslo, by e-mail to post@beautymedical.no or by calling 403 11 017 . We will then make sure to delete the photos from websites and social media as soon as possible and no later than within 30 days.

Cookies

Beauty Medical uses cookies to analyse visitors' behaviour for use in developing and improving the websites and our products, for technical purposes to ensure that the websites work and for optimisation of the pages, and for marketing purposes such as measuring the effect of our online marketing or targeting advertising. You can read more detailed information about which cookies we use, what data is processed, who processes the data and the purpose of the processing in our cookie policy .

Checkout and payment in the web shop (Klarna)

We use Klarna as the provider of our checkout. This means that we may transfer your personal data in the form of contact and order details to Klarna when the checkout is loaded, so that Klarna can administer your purchase. The personal data transferred is processed in accordance with Klarna's own privacy policy.

Messages and comments on Facebook and Instagram

You can contact us through Facebook Messenger and Instagram (direct messages), and you can comment on our posts and ads. Messages and comments arrive in our internal system, where staff read and reply to them. We store the message text, attachments you send (for example photos), your public name or username and profile picture from Meta, and the time. The purpose is to answer your enquiry, follow up on bookings and document the customer dialogue. The legal basis is your enquiry and our legitimate interest in replying (GDPR art. 6(1)(b) and (f)). We do not send you marketing on Messenger or Instagram without consent. If you send us health information, we use it only to reply to you, and we recommend that you call us or use online booking for such questions.

Ads and forms from Meta

When you fill in a form in one of our ads on Facebook or Instagram, we receive the information you provided (for example name, phone number, e-mail and which treatment you are interested in) in order to contact you about what you asked for. We also see aggregated statistics from our ads (spend, impressions, clicks and number of enquiries). Meta Platforms Ireland Limited processes data from your use of Facebook and Instagram under its own terms and privacy policy.

Storage and deletion

Messages and comments are stored for as long as necessary to follow up the enquiry and document the dialogue, and are deleted or anonymised when the purpose is fulfilled or when you ask us to. See below for how to request deletion.

How to request deletion of your data

You can ask us at any time to delete the information we hold about you, including messages, comments and form answers from Facebook and Instagram. Send an e-mail to post@beautymedical.no with the subject "Data deletion" and state the name or username you use on Facebook or Instagram so that we can find your information. You can also call 403 11 017 or write to Beauty Medical AS, Vogtsgate 56, 0477 Oslo. We delete or anonymise the information as soon as possible and no later than 30 days, and we confirm when it is done. Information we are legally required to keep, such as patient records and accounting records, cannot be deleted until the retention period has ended. You also have the right of access, rectification and data portability, and may complain to the Norwegian Data Protection Authority (datatilsynet.no).

You can also remove Beauty Medical's access to your data in Facebook or Instagram under Settings → Apps and websites.