Alba Privacy Policy
Alba Tech AS takes your privacy seriously. Any use of personal data will be in accordance with the Norwegian Personal Data Act and the General Data Protection Regulation (âGDPRâ). Below, we explain how and why we use personal data.
1. What personal data do we use and why?
We will register and store personal data in connection with your use of The Services, which includes information about:
- Personal details: name, date of birth, email address, and telephone number
- Your location (if you use Alba on the web or via the app, and consent to the use of your location)
We also register personal data when you book an appointment and transfer personal data to the center. The personal data we use in these cases will appear in our booking solution.
We will also use your contact information to send you marketing about Alba Tech and the companyâs services, in accordance with applicable laws.
Your personal data may be processed and stored in the following countries: [X]. This means that your information may be transferred to, or processed in, [X], in addition to Norway/EU/EEA. All such transfers are carried out in accordance with applicable data protection legislation (GDPR), and we will always ensure that your rights and your information are adequately protected. If the country is not recognized by the European Commission as providing an adequate level of protection, we will use Standard Contractual Clauses or other appropriate safeguards. Alba will not disclose information unless required to do so by binding applicable law.
You may contact us for more information regarding the safeguards in place for such transfers.
Personal data will be retained only for as long as necessary to fulfill the purposes for which the data was collected, including to satisfy any legal, accounting, or reporting requirements. If it is not possible to specify a fixed retention period, the criteria used to determine how long personal data will be retained include the nature and sensitivity of the data, the potential risk of harm from unauthorized use or disclosure, the purposes for which the data is processed, and applicable legal requirements.
2. Who is responsible for the use of personal data?
Alba Tech AS is the data controller for the use of personal data in connection with membership with us. For storing information and administering your membership, our lawful basis is GDPR Article 6(1)(f) (legitimate interests). Our legitimate interests are to maintain your membership to operate our business and generate income linked to this.
When we process personal data in connection with bookings for services, the legal basis for using personal data is the fulfilment of a contract with you when you are a contracting party (GDPR Article 6(1)(b)).
If you act on behalf of a company, organization, or other legal entity, the basis is âlegitimate interestsâ (GDPR Article 6(1)(f)), with the legitimate interests being customer follow-up and conducting commercial activities.
We have joint data controllership with the center where you make your booking, up until your information is registered and transferred to the center. Once the individual center has received your information, the owner of the center becomes an independent data controller.
Marketing is based on âlegitimate interestsâ (GDPR Article 6(1)(f)), and the legitimate interests are to follow up with customers, offer new and interesting services, and achieve further commercial activities.
3. What rights do you have?
You may request from the data controller access to, rectification or erasure of personal data, or restriction of processing concerning you, or object to the processing. You may also lodge a complaint with the Data Protection Authority, but we prefer that you contact us first to see if the issue can be resolved. If your personal data processing is based on your consent, you have the right to withdraw your consent at any time. Withdrawal of consent does not affect the lawfulness of processing based on consent before its withdrawal. To exercise your rights or withdraw consent, please contact us using the contact details provided below.
If you wish to exercise your rights, you can contact the appropriate responsible party according to section 5.
Who can you contact if you want more information?
For questions and other inquiries related to the overview list, you can contact Alba Tech AS at help@albaplay.com.
For questions and other inquiries related to the transfer of personal data to an individual center when we have joint data controllership (see section 3), you can contact both Alba Tech and the specific center. For questions about matters for which the individual center is independently responsible, you can contact the center where you wish to make a booking.