nxtskin
Privacy Policy – nxtskin (GDPR)
1. Data Controller
nxtskin AS, org.nr. 936976018, is the data controller for personal data collected via the website and during processing.
2. What information do we collect
Name, email, phone
Date of birth and health information relevant to treatment
History of previous treatments and consent
Payment information (card number is processed via secure payment solution)
3. Purpose of processing
Provide and administer treatments
Inform about hours, offers and important information
Fulfill statutory requirements (record keeping according to the Health Personnel Act)
4. Rights under GDPR
You have the right to:
Access your information
Right to have incorrect information corrected
Right to have information deleted when the law permits
Restrict or object to the processing of information
Complain to the Norwegian Data Protection Authority
5. Storage
Personal data is only stored for as long as it is necessary to fulfill the purpose of the processing, or as long as statutory requirements require it.
6. Sharing of information
Information is only shared with:
Authorized healthcare professionals involved in the treatment
Payment processors for processing payments
Authorities if required by law
7. Security
We use technical and organizational measures to protect personal information against unauthorized access, modification or deletion.
8. Contact for privacy
Questions about personal information can be directed to:
nxtskin AS, email: post@nxtskin.no, phone: +47 95759631