Skinlosophy

Privacy policy

How we process your personal data.

This privacy policy describes how we process personal data when you visit skinlosophy.dk and contact us. We only process the information that is necessary, and we take good care of it.

1. Data controller

Helle Thorup ApS
CVR (company reg. no.) 29535086
Park Allé 5, 8000 Aarhus C, Denmark
Phone: +45 86 18 39 00
Email: aarhus@hellethorup.dk

If you have any questions about how we process your data, you are always welcome to contact us.

2. When you write to us via the contact form

When you fill in the contact form, we process the information you provide yourself:

Name
Email address
Subject and your message

Purpose: To reply to your enquiry, e.g. questions about products or skincare.

Legal basis: Our legitimate interest in replying to enquiries, cf. Article 6(1)(f) of the General Data Protection Regulation. If your enquiry concerns a purchase or a possible agreement, the information is also processed under Article 6(1)(b).

The message is sent to us by email. The form does not store enquiries in the website's database.

Retention: We keep your enquiry for as long as necessary to reply to it and handle any follow-up. It is then deleted – no later than 12 months after the last contact.

Please avoid including sensitive information, such as health information, in the form. If you would like personal advice about your skin, you are welcome to contact the clinic directly.

3. Purchasing products

Skinlosophy products are sold via Helle Thorup's webshop at hellethorup.dk. When you click a purchase link, you leave skinlosophy.dk, and information related to your purchase is processed in accordance with the webshop's own privacy policy: hellethorup.dk/policies/privacy-policy.

4. Cookies

We only use necessary cookies unless you consent to others. You can read more in our cookie policy, where you can also change or withdraw your consent.

Google Maps: On the contact page we show a map from Google Maps. The map is only loaded once you have consented to external content. When the map loads, Google receives, among other things, your IP address. Google LLC is certified under the EU-U.S. Data Privacy Framework, which provides a valid basis for transferring data to the USA.

5. Technical operation and logging

When you visit the website, our web host automatically records technical information such as IP address, browser type and time in server logs. This is done to operate and secure the website and is based on our legitimate interest (Article 6(1)(f)). Logs are kept for a limited period and are not used to identify you.

6. Who do we share data with?

We never sell your data. We use the following data processors, who may only process the data according to our instructions:

Curanet A/S (Denmark) – hosting of the website and web hotel.
IT-Servicen (Denmark) – technical operation and maintenance of the website.

7. Your rights

Under the General Data Protection Regulation, you have a number of rights:

The right of access to the information we process about you
The right to have inaccurate information corrected
The right to have your information erased
The right to have processing restricted
The right to object to the processing
The right to receive your information (data portability)
The right to withdraw consent, without affecting the lawfulness of processing before the withdrawal

8. Complaints

You can complain about our processing of your personal data to the Danish Data Protection Agency (Datatilsynet):
Datatilsynet, Carl Jacobsens Vej 35, 2500 Valby, Denmark
www.datatilsynet.dk

9. Changes

We update this privacy policy when there are changes to how we process personal data.

Last updated: 8 October 2026