1 Introduction

Artesia, with registered address Majorstuveien 36, 0367 Oslo, is the controller of your personal data. Artesia processes your personal data in accordance with the data protection legislation in force at any given time. The regulations protect you against misuse of your personal data.  

Artesia is committed to the privacy of all its members and customers. To ensure that your personal data is handled in a secure and responsible manner, we have established the following guidelines:

2. The purpose of the processing

In order to manage your membership/customer profile in Artesia, we must process certain personal data about you. We will use your personal data for, among other things, the following purposes:

• Give you access to Artesia's facilities and services
• Update the CRM system
• Manage your transactions
• Manage registration for events
• Manage the reservation of training sessions, treatments and meeting rooms
• Sending invoices for membership fees/processing
• Fulfill Artesia's purposes
  
• Other purposes necessary to safeguard your interests

3. What personal data is processed

We only collect and process personal data that is necessary to administer your membership and safeguard your interests. This includes your name, membership number, address, telephone number, e-mail address, date of birth, date of registration and information that provides an overview of your participation and use of Artesia's facilities and services, as well as time of visit, payment history for membership fees and purchase of sales items.

4. Processing basis

Artesia has a legal basis for processing your personal data under the Personal Data Act because the personal data is necessary for us to be able to fulfill agreements with our guests regarding treatments/services offered at Artesia and to administer your membership and safeguard your interests in the club, including for Artesia to be able to offer the services included in the membership.

5. Security

Artesia is concerned that unauthorized persons do not gain access to your personal data. Artesia therefore uses several forms of security technology that ensure good protection against unauthorized access and misuse of your personal data. All employees are also subject to a duty of confidentiality.

6. Personal data to third parties

Artesia will only give third parties access to your personal data if they provide services within operations, maintenance, marketing or other technical solutions to Artesia, or if it is necessary to manage your membership/customer profile. Examples of third parties that receive personal data are BRP (Artesia's booking system) and media agency. To safeguard your rights, Artesia has entered into a separate data processing agreement with the third parties that have access to your personal data. These third parties will not be able to use your personal data for purposes other than what we have agreed with you. Third parties are similarly obliged to enter into a data processing agreement with their subcontractors.  

We will never disclose information about our members/customers to anyone other than data processors.  

7. Cookies

Most websites use cookies. A cookie is a small text file that is stored on your computer, the purpose of which is to enable the browser to store personal information.

Artesia uses cookies to improve the user experience, but also as part of our marketing. A temporary cookie is usually deleted automatically when you close your browser, while persistent cookies may remain on your computer for up to one year.

8. Your rights

You have the right to request access to and rectification or erasure of your personal data. You may furthermore request restriction of the processing that concerns you, as well as object to the processing.

Requests for access to the personal data Artesia holds about you or requests for any of your other rights should be sent to ketil@artesia.no.

9. Storage and deletion of personal data

Artesia does not retain personal data longer than is necessary to fulfill the purpose of the processing. Artesia will therefore delete unnecessary data at regular intervals. Personal data that is necessary to administer your membership will be processed by Artesia for as long as you are a member.

Upon termination of membership, for whatever reason, your personal data will be deleted unless Artesia is required by law to store the data. If you were a member at the time of your death, your name will be stored in our historical overview of former members.