Privacy Policy

1. Data Controller

Company: Sky Spa ApS
CVR no.: 46404947
Email: info@skyspa.dk

Sky Spa ApS is the data controller for the processing of your personal data.

2. What information we process

We process the following personal data:

General information

• Name
• Telephone number
• Email
• Payment and booking information

Sensitive information (health information)

• Information that you voluntarily provide in connection with treatment or participation in saunagus,
  including, for example, information about:
  • damage
  • diseases
  • pregnancy
  • heat sensitivity, circulatory problems or other health conditions that may affect the experience

3. Purpose of the processing

We process your personal data to:

• manage booking of treatments, saunas and spa access
• complete payments and subscriptions
• ensure correct and safe performance of physiotherapy massage and sauna massage
• take your health and safety into account in connection with our services
• comply with applicable regulatory requirements

4. Legal basis

The processing of your personal data is based on:

• Fulfillment of contract (GDPR Art. 6, para. 1, letter b)
• Your consent to the processing of health data (GDPR Art. 9, para. 2, letter a)
• Legal obligation, including the Accounting Act

5. Storage

• General personal data is kept for as long as necessary for the purpose.
• Accounting and bookkeeping material is kept for 5 years.
• Health information is only stored for as long as it is relevant to treatment or sauna use.

6. Disclosure

We do not disclose your personal data to third parties unless:

• it is necessary for payment, IT operations or administration
• we are legally obligated to do so

7. Your rights

You have the right to:

• insight into the information we process about you
• correction or deletion of information
• restriction of processing
• to withdraw your consent to the processing of health information
• to complain to the Data Protection Authority

8. Data security

We treat your personal data confidentially and have taken both technical and organizational security measures to protect your information against misuse, loss and unauthorized access.

9. Contact

If you have any questions about our processing of your personal data, you are always welcome to contact us at: info@skyspa.dk