Privacy Policy
Last updated on June 29, 2023
At FIT for LIVET ApS (“FIT for LIVET”, “we”, “us” or “our”), we prioritize confidentiality and data security. This privacy policy applies to our processing of personal data in relation to activities covered by our website https://fitforlivet.dk/ (the “Website”) as well as when you receive advice from us or communicate with us in any other way.
The Privacy Policy sets out the guidelines for FIT for LIVET’s way of processing your personal data. The Privacy Policy also provides you with the information that you are entitled to receive under applicable data protection legislation. You must read the Privacy Policy before you provide your personal data to FIT for LIVET.
1. Data controller and contact information
The data controller for your personal data is:
FIT for LIFE ApS
CVR number: 43650645
Address: Landskronagade 11C, 2100 Copenhagen Ø
E-mail: info@fitforlivet.dk
2. Types of personal data, purposes, legal basis and deletion
FIT for LIFE collects information directly from you in the following ways:
- When you use the Website
- When you contact us or communicate with us via online video consultation, telephone or email
FIT for LIFE can also in certain cases obtain information from FMK and your medical record via your own doctor.
Your interaction, purchase of services and, in some cases, consents given will determine which parts of this privacy policy, section 2, are relevant to you.
2.1 Healthcare treatment
Types of personal data
We process the following personal data about you when you receive online healthcare treatment as a result of your purchase of membership:
General personal information
- Name
- Email address
- Job title
- Age
- Sex
- Birthday
- Telephone number
- Correspondence
- CPR number (confidential personal information)
Sensitive personal information
- Health information that is necessary to process in order to provide healthcare treatment (e.g. medication, symptoms and illnesses).
Purpose and legal basis
FIT for LIFE conducts an initial assessment of what healthcare treatment you need. We do this to assess how your further course should be organized and to provide you with the correct online healthcare treatment, coaching, education and advice. In addition, we process personal data to issue the correct prescriptions.
The processing of your personal data takes place to fulfill the contract entered into with you for the purpose of disease control and management of healthcare services, cf. Article 6(1)(b) of the General Data Protection Regulation (GDPR), Section 7(3) of the Data Protection Act, cf. Article 9(2)(b) of the General Data Protection Regulation (Sensitive Personal Data) and Section 11(2)(4) of the Data Protection Act, cf. Section 7(3) of the Data Protection Act (CPR numbers).
Storage period
Information covered by the record requirements is stored for 10 years from the last entry in the record in accordance with the relevant legislation. This is because doctors have access to your records. The deletion deadline is set in accordance with the Executive Order on Authorized Healthcare Professionals’ Patient Records (the Executive Order on Record Keeping). Records that are the subject of complaints, supervision or compensation cases are deleted after the final conclusion of the case, if the case extends beyond the 10-year period.
2.2 Record keeping
Types of personal data
We process the following personal data about you when we enter your information into the medical record:
General personal information
- Name
- Email address
- Job title
- Age
- Sex
- Birthday
- Telephone number
- Correspondence
- CPR number (confidential personal information)
Sensitive personal information
- Health information that is necessary to process in order to provide healthcare treatment (e.g. medication, symptoms and illnesses)
Purpose and legal basis
We process the above personal data to comply with our legal obligation to maintain patient records in accordance with the Record Keeping Executive Order. We are subject to this obligation as the treatment and advice is provided by our doctors.
The processing of your personal data is based on Article 6(1)(c) of the General Data Protection Regulation (general personal data), Article 9(2)(b) of the General Data Protection Regulation, cf. the Executive Order on Record Keeping (sensitive personal data) and Section 11(2)(1) of the Data Protection Act, cf. the Executive Order on Record Keeping (CPR numbers).
Storage period
Information covered by the record requirements is stored for 10 years from the last entry in the record in accordance with the relevant legislation.
2.3 Quality assurance, statistics and analyses
Types of personal data
We process the following personal data about you via your medical record for the purpose of quality assurance, preparing statistics and analyses, and to improve our service:
General personal information
- Name
- Job title
- Age
- Sex
- Birthday
- Fluid intake
- Diet
- Sleep
- Exercise
- CPR number (confidential personal information)
Sensitive personal information
- Health information (e.g. medication, symptoms and combination of general personal information that can lead to inferences about my health).
Purpose and legal basis
The processing of personal data contained in your medical record is carried out for the purpose of compiling statistics, carrying out quality assurance and developing and analyzing the process, cf. Section 42d, subsection 2, no. 2 of the Health Act and Section 10, subsection 1 of the Data Protection Act (sensitive personal data), Section 6, subsection 1, letter e of the Data Protection Act (public interest) (general personal data) and Section 11, subsection 2, no. 3 of the Data Protection Act (CPR numbers).
Storage period
Personal data is processed solely for these purposes for as long as necessary and FIT for LIFE ensures that the information is anonymized as soon as possible after extraction from your medical record. FIT for LIFE only processes medical record information for this purpose that is less than 5 years old in accordance with the Danish Health Act.
2.4 Legal obligations and legal claims
Types of personal data
We process the following personal data about you if necessary to comply with our legal obligations under health legislation (including reporting, etc.) and to be able to establish, defend and assert legal claims.
General personal information
- Name
- Email address
- Job title
- Age
- Sex
- Birthday
- Telephone number
- Correspondence
- CPR number (confidential personal information)
Sensitive personal information
- Health information
Purpose and legal basis
The processing of your personal data is carried out for the purpose of complying with our legal obligations pursuant to Article 6(1)(c) of the General Data Protection Regulation (general personal data) and Article 9(2)(g) of the Health Legislation (sensitive personal data).
The processing of your personal data is also carried out as a result of our legitimate interest in being able to establish, defend and exercise legal claims, cf. Article 6(1)(f) of the General Data Protection Regulation (GDPR), Article 9(1)(f) of the General Data Protection Regulation (GDPR) and Section 11(2)(4) of the Danish Data Protection Act, cf. Article 9(2)(f) of the General Data Protection Regulation (CPR numbers).
Storage period
Records that are the subject of complaints, supervision or compensation cases are deleted after the final conclusion of the case, if the case extends beyond the 10-year period.
2.5 When you enter into an agreement for membership
Types of personal data
We process the following personal data about you when you pay for a membership at FIT for LIFE.
- Name
- Address
- Telephone number
- Information about your purchase and payment
Purpose and legal basis
We process your personal data in order to enter into a payment agreement regarding the membership, invoice you and to comply with our legal obligations under the Danish Accounting Act, cf. Article 6(1)(b) and Article 6(1)(c) of the General Data Protection Regulation, respectively.
The above personal data may also be processed on the basis of our legitimate interest in sending you service notifications, market research, satisfaction surveys and to comply with our terms and conditions of sale, cf. Article 6(1)(f) of the General Data Protection Regulation and Article 6(1)(b) of the General Data Protection Regulation.
Storage period
Accounting material will be processed in connection with the processing of the individual order, after which it will be stored in our accounting file for 5 years from the end of the financial year in order to comply with the documentation requirements of the Danish Accounting Act. The remaining information will be processed in accordance with the above deletion deadlines for the storage of patient records.
2.6 Contact us, make a single purchase or book a free consultation
Types of personal data
We process the following personal data about you if you contact us via the Website or email, including for the purpose of booking a free consultation (e.g. to see if you are suitable for treatment) or to purchase individual products:
- Name
- Telephone number
- Height and weight
- Information you provide in connection with your contact with us, including where you heard about FIT for LIFE
Purpose and legal basis
We do not record information about your BMI (health) unless you become a customer of FIT for LIFE.
The above personal data is processed as a result of our legitimate interest in being able to respond to your inquiries, advise you and to better market our services, cf. Article 6(1)(f) of the General Data Protection Regulation and in certain cases with a view to entering into an agreement for a single purchase or subscription, cf. Article 6(1)(b) of the General Data Protection Regulation.
Storage period
If a contract is concluded, we process your personal data and store it for as long as you have ongoing services with us. Information that is required to be recorded is stored as specified above in accordance with health legislation. If your contact does not lead to a customer relationship, we delete the information 1 year after contact.
2.7 Use of images, videos and/or statements in marketing
Types of personal data
We process the following personal data about you if you consent to the publication of your photo, video and/or statements for marketing purposes:
- Your name
- Your age
- Statements (e.g. for use on our blog)
- Your photo, video and/or statement, which may contain certain information about your health
Purpose and legal basis
Publication of your image, video and/or statements via the Website and/or social media is based on your prior consent, cf. Article 9(2)(a) of the General Data Protection Regulation (GDPR) (sensitive personal data) and Article 6(1)(a) of the General Data Protection Regulation (GDPR). You can revoke your consent at any time and we will then remove your image, video and/or statement from the Website and/or social media.
Storage period
We process your personal data until consent is revoked or until we ourselves choose to revoke the publication of your photo, video and/or statement. However, the consent itself will be stored for 5 years from the time of revocation of consent.
2.8 Newsletters and marketing
Types of information
We process the following personal data about you if you consent to receive news and other marketing material from us:
Purpose and legal basis
We process your personal data for marketing purposes based on our legitimate interest in spreading awareness of our services, cf. Article 6(1)(f) of the General Data Protection Regulation. However, we only send marketing material via email based on your active prior consent in accordance with Section 10(1) of the Danish Marketing Act.
Storage period
Your personal data and the associated consent will be deleted when consent is revoked. However, the consent declaration itself will be stored for 2 years after revocation.
2.9 Competitions and events
Types of personal data
We process the following personal data about you if you choose to participate in a competition or event:
- Name
- Address
- Telephone number
Purpose and legal basis
We process the above personal data as a result of our legitimate interest in being able to register your entry into a competition or event and in certain cases to be able to publish and notify you that you have won a prize and to comply with the competition conditions, cf. Article 6(1)(f) of the General Data Protection Regulation and Article 6(1)(b) of the General Data Protection Regulation.
Storage period
We delete your personal data 1 year after participation in an event or competition.
2.10 Creating a user profile
Types of personal data
We process the following personal data about you when you create a user profile:
- Name
- Telephone number
- Password
- Username
Purpose and legal basis
The above information can also be obtained from Google, Facebook or Apple if you choose to create a FIT for LIFE user profile via one of these media.
When creating a user profile, we process the above personal data in order to create and administer your user profile upon prior request from you, cf. Article 6(1)(b) of the General Data Protection Regulation.
Storage period
We will store your personal data until you choose to delete your user profile. Please note that if you delete your profile, we will not be able to provide you with the necessary advice.
2.11 Cookies, social plugins and pixels
When you move around the Website, personal data is collected via cookies, social plugins and pixels in certain cases in the form of:
- A unique ID number
- IP address
- Geographic location
- Digital tracks
- What pages and places you visit
- Technical information
- Information about your behavior and interests
Legal basis and purpose
For the above processing of your personal data, we are an independent data controller or joint data controller. The processing of personal data in relation to statistical and functional cookies is based on our legitimate interests in being able to offer you the best possible experience and services, cf. Article 6(1)(f) of the General Data Protection Regulation. The processing of personal data in relation to marketing cookies, including on the basis of your preferences and interests, is based on your prior consent, cf. Article 6(1)(a) of the General Data Protection Regulation.
In addition, FIT for LIFE always obtains permission (cookie consent) in accordance with the Cookie Executive Order before collecting data and personal information. Your prior permission is therefore also a prerequisite for collecting personal information via cookies.
In order to process personal data in connection with cookies for the purposes mentioned, we may provide access to your personal data to third parties who, on the basis of a contractual relationship with FIT for LIVET, provide relevant services, e.g. IT suppliers, analysis companies and marketing suppliers. In addition, FIT for LIVET in certain cases passes on your information to third parties. For information on deletion deadlines and withdrawal of consent, etc., please refer to “customize your cookie choices”, which you can click on at the bottom of the Website.
2.12 Social media
FIT for LIVET and the social media providers are joint data controllers for the processing of personal data collected in connection with your visit to FIT for LIVET’s profile or page on the individual social media and for sharing your personal data via cookies. FIT for LIVET complies with the Danish Data Protection Agency’s guidelines on joint data responsibility and, using available tools and means, tries its best to ensure that you receive information about the processing of your personal data when you visit FIT for LIVET’s profiles or pages on social media.
FIT for LIFE has a profile on the following social media:
Facebook (Meta Platforms, Inc.)
- Facebook’s privacy policy is available here
- You can read the agreement on joint data responsibility here.
- You can adjust your privacy settings on Facebook here
- You can exercise your rights here
LinkedIn (LinkedIn Ireland Unlimited Company)
- LinkedIn’s privacy policy is available here
- You can read the agreement on joint data responsibility here.
- You can adjust your privacy settings on LinkedIn here
- You can exercise your rights here
Collection of personal data
When you visit or interact with our social media profiles, FIT for LIVET and the provider of the social media in question may collect, process and store the following types of personal data about you:
- Information available on your profile, including your name, gender, marital status, workplace, interests, picture, and your city
- Whether you “liked” or used other reactions on our profile
- Comments you leave on our posts
- That you have visited our profile
The purposes of the treatment
FIT for Lifet processes your personal data for the following purposes:
- Improving our products and services, including our social media profiles and pages
- Statistics and analysis
- To communicate with you if you comment on a post, make a review, or send us a message
- So that you can communicate with other FIT for LIFE participants
- Marketing in general
The social media providers process your personal data for the following purposes, among others:
- Improving their advertising system
- To provide FIT for LIFE with statistics that the social media providers, among other things, prepare based on your visit to our profiles and pages
- Advertising and customization of activities on the site.
Basis of processing
The processing of your personal data is based on the following grounds:
- Legitimate interests: FIT for LIFE bases the processing of your personal data on our legitimate interests in being able to communicate with and market ourselves to you on our social media profiles, as well as our legitimate interest in improving our products and services (Article 6(1)(f) of the General Data Protection Regulation).
The social media providers base the processing of your personal data on their legitimate interests, including their interest in improving their advertising system and providing statistics to FIT for LIVET, which the social media provider, for example, compiles based on your visit to FIT for LIVET’s profile or page on the social media. In addition, the social media providers have a legitimate interest in providing an innovative, individually tailored, secure and profitable service (Article 6(1)(f) of the General Data Protection Regulation).
- If you publish information about your health yourself: You can choose to share information about your health with the group’s members via the Facebook group. FIT for LIFE processes this information as a result of you having clearly published it yourself (Article 9(2)(e) of the General Data Protection Regulation). However, FIT for LIFE does not process information for its own purposes other than making the Facebook group available so that you can communicate with others in similar FIT for LIFE courses.
- Consent: The social media providers process certain of your personal data in accordance with your consent, which you can withdraw at any time via your privacy settings on the social media (Article 6(1)(a) of the GDPR).
Storage period
Your personal data will be stored until deleted via social media. You can always delete the information you have provided via comments and reactions. However, the information may be stored longer in anonymized form.
Please refer to the privacy policy of each social media provider for information on how long they retain your personal data.
Who do social media providers share your personal information with?
Social media providers may, among other things, share your personal data with the following categories of recipients:
- Other entities in the group the social media provider is part of
- External partners who provide analysis and research services
- Advertisers
- Other individuals who visit our social media profile or page (to the extent your information is publicly available)
- Researchers and other academics
- You can find more information about who the social media providers share your personal data with in the individual providers’ privacy policies.
- The social media providers may transfer your personal data to recipients outside the EU/EEA in accordance with applicable data protection legislation. You can read more in the privacy policies of the individual providers.
- You can read more about who FIT for LIFE shares your personal data with in the section “Transfer to data processors and disclosure to other data controllers”
3. Transfer to data processors and disclosure to other data controllers
In order to fulfill the above purposes, FIT for LIVET may provide access to your personal data to third parties who, based on a contractual relationship with FIT for LIVET, provide relevant services. Such service providers will only process personal data in accordance with our instructions under concluded data processing agreements. FIT for LIVET currently uses the following data processors or categories of data processors:
- Providers of portal for record keeping (XMedicus).
- Suppliers of email systems and IT solutions
- Marketing providers
In certain cases, it will also be necessary to disclose your personal data to independent data controllers. These are the following categories of recipients based on the following legal basis:
- Law firms, courts and public authorities (e.g. the Danish Patient Safety Agency) on the basis of our legitimate interest in being able to establish, defend and assert legal claims (Article 6(1)(f) of the General Data Protection Regulation (general personal data), Article 9(2)(f) of the General Data Protection Regulation (health data) and Section 11(2)(2)(4) of the Danish Data Protection Act, cf. Article 9(2)(f) of the General Data Protection Regulation (CPR numbers).
If your personal data is transferred to data processors or data controllers established in countries outside the EU/EEA that do not have an adequate level of protection, such transfer will be based on the EU Commission’s standard contractual clauses. This will only be the case in specific support situations and your personal data will not be directly stored in unsafe third countries.
4. Security
We protect the confidentiality, integrity and availability of your personal data. Therefore, we have implemented security measures to ensure that our internal procedures meet established security standards and applicable legal requirements.
FIT for LIFE has also prepared and implemented internal rules on information security, which contain instructions and measures that protect your personal data from being destroyed, lost, altered, unauthorized publication, and from unauthorized persons gaining access to or knowledge of it.
Our healthcare staff are subject to statutory confidentiality.
5. Your rights
- You have the right to access and obtain a copy of the personal data that FIT for LIFE processes about you, subject to certain statutory exceptions.
- You have the right to have personal data that has become outdated or is incorrect corrected.
- You have the right to have your personal data deleted or restricted, unless FIT for LIVET is entitled or legally obliged to continue the processing, including as a result of the Danish Accounting Act, the record-keeping rules or ongoing legal proceedings.
- In certain cases, you have the right to receive the personal data that FIT for LIFET has registered about you in a structured, commonly used and machine-readable format and to ask FIT for LIFET to transmit this personal data to another data controller (data portability).
- You have the right to withdraw any consent you have given, without this affecting the lawfulness of the processing based on consent before its withdrawal. If you wish to withdraw consent, please contact info@fitforlivet.dk.
6. Links to other websites
Our Website may contain links to other websites. We are not responsible for the content of other companies’ websites or their practices in connection with the collection of personal information. When visiting other websites, you are encouraged to read the website owner’s and app’s policy regarding the protection of personal information and other relevant policies.
7. Questions and complaints
If you have any questions about this privacy policy or if you wish to complain about the way we process your personal data, you are always welcome to contact us via info@fitforlivet.dk.
If your complaint is not resolved by us and you want to proceed with the matter, you can complain to the Danish Data Protection Authority:
Danish Data Protection Authority
Carl Jacobsens Vej 35
2500 Valby
Telephone: 33 19 32 00
E-mail: dt@datatilsynet.dk
8. Changes to the Privacy Policy
If we change or update the way we process your personal data, we will notify you in advance. This gives you the right to object to the new processing of your personal data. You can always find the updated privacy policy on our Website.
