This privacy statement is intended to provide information about how and why The Well AS ("The Well") collects and processes personal data.
The Well, represented by the General Manager, is the data controller for the information collected and processed by The Well. Responsibility may be delegated to another position in day-to-day operations. The privacy statement below provides the information required by data protection regulations regarding our processing of your personal data. The Well’s processing of personal data is in accordance with applicable data protection laws at all times.
LEGAL BASIS FOR PROCESSING PERSONAL DATA
Processing of personal data is not permitted unless a valid legal basis exists. Such a basis may include consent from the data subject, a contract (agreement), legal obligation, or a "legitimate interest" that outweighs the individual’s right to privacy.
Our primary legal basis for processing is consent. Before we begin processing your personal data, we will always provide information about the legal basis used.
OUR USE OF PERSONAL DATA
We collect and process personal data to fulfill our agreements with employees (administration of employment) and guests (customer relationship management), including providing good service, informing about our products and services (marketing activities). The use of data for marketing purposes is based on consent, which you may withdraw by contacting The Well.
For example, our facility offers modern and functional individual and personalized treatments as well as activities. When you visit The Well, your visit is registered. The same applies when booking treatments or restaurant tables.
We analyze the use of our facility to optimize our offerings for guests.
The data we collect includes name, date of birth, phone number, email address, postal address, and purchase history. This information is collected directly from the data subject.
DISCLOSURE OF PERSONAL DATA – THIRD-PARTY USAGE
Registered personal data is treated confidentially and is only accessible to staff with a work-related need. As a general rule, we do not share personal data outside of The Well.
However, in certain cases we may share data with our partners, such as Facebook or Google – see the section on cookies. Sharing personal data with third parties constitutes processing and requires a legal basis. This basis is typically consent from the data subject, and you will always be informed of such disclosures. Note that in some cases, we may be legally obligated to disclose your personal data.
COOKIES AND PIXELS
We use cookies on our website. A cookie is a small text file, and our website will always ask your browser for permission to store this file on your device. We do this to remember your actions, preferences, and visit frequency. This enables us to improve user access to various features. Furthermore, cookies help us generate statistics about orders and general site usage.
There are two types of cookies: First-party cookies are essential for the website to function.
Third-party cookies are used for analytics and marketing, including those from partners. Pixels are codes on our site that register conversions from online advertising. This helps us tailor external ads based on actual user interests, making our advertising more relevant.
We currently use Google Tag Manager, Google Analytics, and Hotjar for analytics and marketing purposes.
By using our website, you accept the use of cookies and pixels. You can delete cookies by going into your browser settings and clearing your data. You may also choose to disable cookies. See your browser’s help section for instructions.
Email and SMS marketing are only conducted with explicit consent.
STORAGE AND DELETION OF PERSONAL DATA
We do not share your personal data unless a legal basis exists. This may include a contract with you or legal requirements.
All processing of personal data takes place within the EU/EEA. The Well will delete your data without undue delay, and no later than 6 months after it is no longer necessary for the purpose it was collected. This also applies if you withdraw your consent or object to the processing, unless there are overriding legitimate grounds.
We have specific deletion procedures for each type of data processing.
If you withdraw your consent, we will cease processing your personal data. This does not affect the lawfulness of processing based on consent prior to its withdrawal.
YOUR RIGHTS
You have the right to request access, correction, deletion (unless we are legally required to retain the data), restriction of processing, and data portability. You may also request us to stop processing your data (e.g., by withdrawing consent). We will respond to such requests within one month unless legally required otherwise. Requests can be directed to our email: privacy@thewell.no.
If you believe we have violated data protection regulations, you may file a complaint with the Norwegian Data Protection Authority (Datatilsynet).
Please feel free to contact us at privacy@thewell.no if you have questions or would like more information about our processing of your personal data.
VIDEO SURVEILLANCE
To ensure safety, prevent crime, and protect our guests, staff, and property, we use video surveillance in many areas of our facility. Recordings are stored for 7 days and handled by a third party in accordance with applicable privacy laws.
Purpose of surveillance: Video surveillance is solely for security purposes and to ensure a safe experience for everyone on our premises.
Storage and access: Recordings are kept for 7 days and are only accessible to authorized personnel.
Your rights: You have the right to request access to recordings that include you, and to request correction or deletion of incorrect information, in accordance with applicable data protection laws.
For more information about our use of video surveillance, please contact us at post@thewell.no.
Last updated: 27.09.2024
