Privacy Policy for Youwell AS
This Privacy Policy describes how Youwell AS processes personal data when Youwell acts as a data controller. The policy applies to the use of our website, sales and support interactions, and to users with accounts in the Youwell platform (such as clinicians, administrators, and content managers).
For the processing of personal data related to patients using services delivered by Youwell's customers, Youwell normally acts as a data processor. Such processing is governed by the customer's own privacy notice and by a data processing agreement between Youwell and the customer.
1. Data Controller
Youwell AS
Organisation number: 916 293 739
Address: C. Sundts gate 17, 5004 Bergen
Email: post@youwell.no
Youwell AS is the data controller for the personal data processing activities described in this Privacy Policy.
2. When does this Privacy Policy apply?
This Privacy Policy applies when you:
- visit the website www.youwell.no
- contact Youwell in connection with sales, marketing, or customer support
- participate in events, webinars, or newsletters organised by Youwell
- are a registered user of the Youwell platform as a clinician, administrator, or content manager
This Privacy Policy does not apply to patients' use of healthcare services delivered by Youwell's customers through the Youwell platform.
3. Categories of personal data
Depending on your relationship with Youwell, we may process the following categories of personal data:
3.1 Website and marketing
- Name
- Email address
- Telephone number
- Employer / organisation
- IP address and technical browser data (aggregated or pseudonymised)
3.2 Sales and customer dialogue
- Contact details
- Role and organisational affiliation
- Communication and correspondence
3.3 Users of the Youwell platform (clinicians / administrators)
- Name and contact information
- User ID and authentication information
- Role and access level
- Activity logs related to use of the platform
- Support requests and case history
Youwell does not process patient medical records or health data as a data controller.
4. Purposes of processing
Youwell processes personal data for the following purposes:
- to operate and manage our website
- to respond to enquiries and provide customer support
- to conduct sales and marketing activities
- to administer user accounts and access to the Youwell platform
- to ensure information security, logging, and prevention of misuse
- to comply with legal obligations
5. Legal basis for processing
Personal data is processed based on one or more of the following legal grounds:
- Consent, where such consent has been obtained (e.g. newsletters)
- Contract, where processing is necessary to perform a contract or take steps prior to entering into a contract
- Legitimate interests, such as responding to enquiries, improving services, and securing the platform
- Legal obligation, where processing is required by applicable law
6. Cookies
Youwell uses cookies on its website to:
- ensure technical functionality
- collect anonymised statistics about website usage
- improve the user experience
Detailed information about the cookies used and how you can manage your consent is available through our cookie information on the website.
7. Disclosure of data and use of processors
Youwell does not share personal data with third parties unless:
- it is necessary to provide our services
- required by law or legal order
- you have given your consent
We use data processors (such as providers of IT operations, cloud services, and customer support tools). Such processors act on our behalf and under data processing agreements.
8. Storage and deletion
Personal data is not stored longer than necessary for the purposes for which it was collected, or as required by law or contractual obligations.
Retention periods are assessed based on the type of data, purpose of processing, and applicable legal requirements.
9. Information security
Youwell has implemented technical and organisational measures to protect personal data against unauthorised access, alteration, loss, or misuse. These measures include access control, logging, encryption, and continuous risk assessment in accordance with ISO/IEC 27001.
10. Your rights
You have the right to:
- request access to your personal data
- request rectification of inaccurate data
- request erasure or restriction of processing
- object to processing based on legitimate interests
- withdraw consent where processing is based on consent
- lodge a complaint with the relevant data protection authority
Requests regarding your rights may be directed to the contact details listed in section 1.
11. Changes to this Privacy Policy
This Privacy Policy may be updated in response to changes in legislation, services, or processing activities. The current version will always be available on our website.
12. Contact
If you have questions about this Privacy Policy or Youwell's processing of personal data, please contact us at:
Email: post@youwell.no
Address: C. Sundts gate 17, 5004 Bergen