Privacy policy

Privacy policy

This privacy policy explains how Sauna House Nordhavn ApS ("we", "us", "our") processes your personal data in accordance with the General Data Protection Regulation (GDPR) and other applicable law.

Data controller

Sauna House Nordhavn ApS Store Kongensgade 81C 1264 Copenhagen K CVR: 44937379 Email: info@saunahouse.dk

What data we collect and why

When you create a membership or book services at Sauna House, we process the following data:

First and last name Gender Address and city Phone number Email address Date of birth Payment details (for membership, punch cards and events) Booking and attendance details for saunagus sessions and events Marketing preferences (newsletter, SMS) IP address when using the booking system or website

Purpose:

To administer your membership or bookings To deliver the best possible service, based on previous purchases and bookings To send reminders, booking confirmations and important notices To send newsletters and offers (if you have given consent) To comply with accounting obligations For statistics and the development of our services

You can withdraw your consent to marketing at any time by unsubscribing or by contacting us directly at info@saunahouse.dk

Categories of recipients

We disclose or entrust personal data to the following categories of recipients:

Other companies in the Sauna House group as part of marketing initiatives, in compliance with the applicable rules Our data processors on the basis of data processing agreements

Security

We protect your data through access control, encryption and secure systems. Our partners are subject to the same data security requirements. Customer records and other sensitive personal data are encrypted with SSL, and SSL/HTTPS security is always used for data transfers.

Data retention

Sauna House only keeps personal data for as long as necessary to fulfil the purposes for which the data was collected, including to deliver our services, ensure a good user experience, comply with our legal obligations, settle any disputes and enforce our agreements.

Account details (e.g. name, email, phone number): kept for as long as you have an active account or an active customer relationship with Sauna House. When the account is closed or the customer relationship ends, we delete or anonymise the data within a reasonable time, unless we have a legitimate interest or an obligation to keep it longer. Payment and accounting data: kept at least in accordance with applicable bookkeeping legislation. Other data: not kept longer than necessary based on a specific assessment of the purpose of the processing, unless the law requires a longer retention period.

We regularly assess whether our retention of data is still necessary, and delete or anonymise data that no longer serves a purpose. You can request deletion of your data at any time by contacting us, see the section on your rights. Marketing data is deleted when you unsubscribe from the newsletter or SMS, or withdraw your consent.

Your rights

Under the law you have a number of rights in relation to our processing of data about you. You can exercise your data protection rights by contacting us at info@saunahouse.dk.

Right of access: you have the right to access the data we process about you, as well as a range of additional information.

Right to rectification: if you believe the personal data we process about you is inaccurate, you have the right to have it corrected. You must contact us and tell us what the inaccuracies are and how they can be corrected. In all cases we must assess whether we consider your request justified. When you contact us with a request to correct or delete your personal data, we examine whether the conditions are met and, if so, make the changes or deletion as quickly as possible.

Right to erasure: we generally delete personal data when it is no longer necessary. In special cases you have the right to have specific data about you deleted before the time of our ordinary general deletion. This applies, for example, if you withdraw your consent and we have no other basis for processing the data. If you believe your data is no longer necessary for the purpose for which we collected it, you can ask to have it deleted. You can also contact us if you believe your personal data is being processed in breach of the law or other legal obligations.

Right to restriction of processing: if you dispute data we have registered or otherwise process, you can ask us to restrict the processing of the data until we have been able to determine whether the data is correct. You can also request restriction instead of deletion if you believe our processing of the data is unlawful, if you believe we no longer need the data, or if you believe your legitimate interests outweigh the legitimate interests of the data controller. If it is found that our processing must be restricted, we may in future only process the data with your consent, or for the establishment, exercise or defence of legal claims, or to protect a person or important public interests.

Right to data portability: you have the right to receive personal data you have provided to us, and data we have obtained about you from other parties on the basis of your consent. If we process data about you as part of a contract to which you are a party, you can also have your data sent to you. You also have the right to transfer this personal data to another service provider. You can also ask us to send the data directly from the data controller to another authority or company. If you wish to use your right to data portability, you will receive your personal data from us in a commonly used, machine-readable format.

Right to object: you have the right to object to our processing of data about you. You can also object to our use or disclosure of your data for marketing purposes. You can use the contact details at the top to submit an objection. If your objection is justified, we will stop processing the data.

Right to information about new purposes: if we wish to use data about you for a purpose other than the purposes we have previously informed you of, for example in this privacy policy, you have the right to be informed before we further process the data for the other purpose.

Right to withdraw your consent: if our processing of your data is based on your consent, you can withdraw that consent at any time. If you withdraw consent, we may not process the data going forward. Withdrawal of consent does not affect the lawfulness of processing carried out before the withdrawal. If we have another lawful basis for processing than consent, with an independent purpose, for example keeping data to comply with bookkeeping rules, that processing may continue.

Complaints

If you are not satisfied with our response, or if you are unhappy with the way your personal data has been processed, you can complain to the Danish Data Protection Agency (Datatilsynet). You can find Datatilsynet's contact details at www.datatilsynet.dk

Carl Jacobsens Vej 35, 2500 Valby

This privacy policy was last updated: 24 August 2026