Booking

House of Acupuncture

PRIVACY POLICY

House of Acupuncture is dedicated to safeguarding your personal data. We process your information securely, confidentially, and in full compliance with current legislation, including the EU General Data Protection Regulation (GDPR).

Below you can read how we collect and handle the information required for our administrative routines and for carrying out your sessions with us.

Purpose and Legal Basis for Data Processing

We only collect and register information to offer you the best possible support and to adapt our efforts to your individual needs.

  • Everyday Reactions and Personal History: To plan your individual journey, we take note of relevant holistic information and your physical and mental history during our sessions. This is done solely on the basis of your explicit, informed consent
  • Administration and Insurance: Identification and contact details (such as your name, phone number, and email) are collected for general administration, bookings, and invoicing. If you request it, this information can also be used to assist with your own claims to health insurance providers
  • Web Activity: When you visit house-of-acupuncture.com or send questions via our contact form, we collect basic contact information to answer your enquiry and complete any purchases of our services

1.1 Communication via Social Media (Facebook and Instagram)

When you communicate with us through our profiles on Facebook and Instagram (including direct messages via Messenger and Instagram DM), your data is handled under a joint controllership between House of Acupuncture and Meta Platforms Ireland Ltd.

  • Purpose: We use these channels exclusively to answer general administrative questions, provide practical updates, and coordinate your appointments
  • Limitation of Sensitive Data: Since social media platforms are not secure, encrypted client systems, we kindly ask you to avoid sending sensitive personal data (such as detailed history regarding a body or mind out of kilter) via direct messages. If your enquiry requires us to understand your background history, we will always guide you to our secure, private channels of communication
  • Deletion on Social Media: Dialogues and messages on our social profiles are deleted regularly and at the latest 1 year after the correspondence has ended. If a conversation leads to a regular client relationship, any necessary administrative master data will be transferred to our internal administration system. Please note that you can also delete messages from your own inbox on these platforms at any time

2. Information on Consent

The GDPR requires that you give explicit and informed consent for our practice to register and store the sensitive information that forms the background of your journey. This consent form must be signed digitally or physically during your first visit.

  • Withdrawing Consent: You have the right to withdraw your consent at any time. Should you choose not to accept the declaration, or if you later decide to withdraw it, your journey with us cannot be initiated or continued. This is because we need to record the history of the sessions for the sake of continuity and proper internal documentation

3. Your Rights as a Client

As a registered client at House of Acupuncture, you hold a number of rights under the GDPR, which we are fully committed to upholding:

  • Right of Access: You have the right to view the information we have noted down about you at any time
  • Right to Rectification: You can have any mistakes corrected or incomplete information updated
  • Right to Erasure: You have "the right to be forgotten". This means you can request that we delete your data, provided there is no longer a legal or administrative obligation for us to store it. This can be requested by sending an email to kontakt@hofacu.com
  • Right to Data Portability: You have the right to have your records handed over or transferred to another practice, should you wish to do so

4. Storage, Security, and Deletion

Your data is stored securely and remains inaccessible to unauthorized personnel.

  • Security and Breaches: We use secure, closed data storage systems and have formal data processing agreements in place with our trusted third-party providers (including our web host). Should a data breach occur against our expectations, both the affected clients and the relevant data protection authorities will be notified within 72 hours of us becoming aware of the breach
  • Deletion Deadlines: Session history and administrative records are automatically deleted 5 years after your last contact with the clinic, unless you submit a legitimate request for earlier erasure. General email enquiries or web traffic that do not lead to a regular client journey are deleted within 1 year of receipt
  • Data Sharing: We never sell your data to third parties, and your personal data is never transferred to countries outside the EU/EEA

5. How to Complain

If you wish to raise a concern regarding our processing of your personal data, you can contact the data protection authorities. Since we operate in Spain and welcome an international audience, complaints can be lodged with:

  • In Spain: Agencia Española de Protección de Datos (AEPD), C/ Jorge Juan, 6, 28001 Madrid (www.aepd.es)
  • In Denmark: Datatilsynet, Carl Jacobsens Vej 35, 2500 Valby (www.datatilsynet.dk)

6. Data Controllers

The data controllers responsible for collecting, registering, and using your personal data on house-of-acupuncture.com are: Anders Damm and Dorthe Nordbjerg.