Privacy policy

1. Data controller

Owner: Alky Club LTD (operating as Resolcia)

Email: team@resolcia.com · Website: https://resolcia.com

In relation to the data you provide through this website we act as data controller. When we deploy NORA at a clinic and process data about the clinic's patients, we do so as data processor on the clinic's behalf and under the data processing agreement referred to in Article 28 of the GDPR: these are two different roles in two different contexts.

2. What data we process

The data you voluntarily provide in the diagnosis form:

• Full name.
• Email address.
• Phone number.
• Name and website of your clinic or group.
• Number of locations and average treatment value.

We also record the origin of the visit (URL campaign parameters, landing page and referring website) in order to know which channel generated the enquiry. We do not request — nor do we need — special categories of personal data under Article 9 GDPR, nor data about your patients: do not enter them into the form fields.

3. Purpose

• To respond to your diagnosis request and contact you by email or phone.
• To assess whether your clinic fits the service and to prepare the call.
• To manage the commercial and contractual relationship if you decide to work with us.
• To comply with the legal, accounting and tax obligations that apply to us.
• To send you communications about our services where a prior relationship exists or you have given consent.

We do not build automated profiles with legal effects, nor do we make decisions about you based solely on automated processing.

4. Legal basis

• Your free, specific, informed and unambiguous consent, given by ticking the form checkbox after reading this policy (Art. 6.1.a GDPR).
• Pre-contractual measures taken at your request and, where applicable, performance of the contract (Art. 6.1.b GDPR).
• Our legitimate interest in handling commercial enquiries and measuring the effectiveness of our campaigns (Art. 6.1.f GDPR).
• Compliance with legal obligations applicable to us (Art. 6.1.c GDPR).

Fields marked as required are so because without them we cannot handle the request. If you do not provide them — or provide them incorrectly or incompletely — we will not be able to contact you.

5. How long we keep the data

We keep your data for as long as the commercial relationship lasts and you do not request its deletion. If the enquiry does not turn into a commercial relationship, we keep it for a maximum of two years from the last contact.

Once the relationship ends, we keep the data blocked for the periods during which legal, tax or accounting liabilities may arise, and delete it upon expiry.

6. Recipients and transfers

We do not disclose your data to third parties outside our organisation, except where legally required.

We use providers who act as data processors on our behalf — web hosting, email and CRM — with whom we have signed the contract required by Article 28 GDPR and from whom we require guarantees equivalent to our own.

Our infrastructure is hosted in the European Union. Should an international data transfer ever become necessary, it would take place under an adequacy decision or the European Commission's standard contractual clauses, and it would be stated in this policy.

7. Use of artificial intelligence

We use artificial intelligence technologies to deliver and improve our services. When one of our systems converses with a person, it expressly declares so, as required by Regulation (EU) 2024/1689 on Artificial Intelligence.

If you purchase our services, we ask you to use these tools responsibly and not to enter personal data or confidential information about third parties without prior and express authorisation.

8. Your rights

You may exercise the following rights at any time, free of charge:

• Access: to know which of your data we process.
• Rectification: to correct inaccurate data.
• Erasure: to ask us to delete data when it is no longer necessary.
• Objection: to object to processing based on our legitimate interest.
• Restriction: to ask us to suspend processing while a complaint is resolved.
• Portability: to receive your data in a structured, commonly used format.
• Withdrawal of consent at any time, without affecting the lawfulness of prior processing.

To exercise them, write to team@resolcia.com stating the right you exercise and attaching a document proving your identity.

If you believe we have not handled your request correctly, you can lodge a complaint with the Danish Data Protection Agency, Datatilsynet (www.datatilsynet.dk), the competent supervisory authority.

9. Security and accuracy

We adopt the technical and organisational measures necessary to guarantee the security, integrity and confidentiality of the data, in accordance with Regulation (EU) 2016/679 (GDPR) and the Danish Data Protection Act.

By providing us with your data you declare that it is true and correct, and you undertake to keep it up to date.