Privacy Policy – Deployment Runtime Smoke Clinic
How the clinic processes your personal data — what is registered, why, for how long, and the rights you have.
Data controller
Deployment Runtime Smoke Clinic (“the clinic”) is the data controller for the personal data registered about you as a customer of the clinic.
How the GLØDI platform is used
The clinic uses the GLØDI platform (operated by Nordic Cognitive Labs AS, org. no. 933 866 327) for bookings, its customer register, treatment records, and communication. GLØDI processes the clinic's customer data solely as a data processor, under a data processing agreement and the clinic's documented instructions. The data is stored securely in the EEA and is never shared with other clinics. GLØDI's own processing — your account, cross-clinic booking history, and platform marketing — is described in GLØDI's privacy policy.
Read GLØDI's privacy policy1. What the clinic registers
Contact and customer data
Name, phone, email, bookings, purchases, and payment status.
Health and treatment data
Consultation answers, treatment notes, and treatment history — registered only with your explicit consent, or where health legislation provides a basis.
Photos
Before/after photos are used solely to document your treatment, and never in marketing without separate consent.
Messages
Dialogue between you and the clinic in the platform is stored for follow-up and documentation.
2. Purposes and legal bases
Delivering treatment and follow-up
Handling bookings, treatments, payment, and follow-up. Basis: contract (GDPR Art. 6(1)(b)).
Health data
Explicit consent (Art. 9(2)(a)), or health care where the clinic is subject to health legislation (Art. 9(2)(h)).
Legal obligations
Accounting and any record-keeping duties. Basis: legal obligation (Art. 6(1)(c)).
Marketing from the clinic
Only with your consent or within an existing customer relationship under the Norwegian Marketing Control Act § 15 — always with easy unsubscribe.
3. Sharing of data
The GLØDI platform
Data processor for the clinic, as described above. The platform's sub-processors (payments, SMS, hosting) are bound by data processing agreements.
Never sold — never shared across clinics
Your data is never sold, and never shared with other clinics on the platform.
Public authorities
Only under a legal duty of disclosure.
4. Retention
The customer relationship
Data is kept for as long as the customer relationship lasts, and is deleted or anonymised when no longer needed.
Accounting and treatment records
Accounting records are kept for 5 years under the Norwegian Bookkeeping Act. Treatment and health records are kept as long as health legislation requires.
5. Your rights
You have the right to access, rectification, erasure, restriction, data portability, and objection — and you can withdraw consents at any time. Exercising your rights is free of charge.
Self-service on My Page
Under “Account & privacy” on My Page you can download your data, submit an erasure request, and manage consents.
Contact the clinic
Requests concerning treatment records and the clinic's customer register are answered by the clinic, which is the data controller. You may also complain to the Norwegian Data Protection Authority (datatilsynet.no).
Right to complain to Datatilsynet
If you believe we process your personal data in breach of the rules, we would appreciate the chance to resolve it — please contact us first. You always have the right to complain directly to the Norwegian Data Protection Authority (Datatilsynet).
Datatilsynet, Postboks 458 Sentrum, NO-0105 Oslo · Phone: +47 22 39 69 00 · [email protected] · datatilsynet.no
Questions about privacy at Deployment Runtime Smoke Clinic?
Contact the clinic directly: