Privacy statement for Storms AS

Processing of personal data

When you use our website, shop with us and/or are in contact with us, we will process personal data about you. Below you will therefore find information about the personal data that is collected, why we do this and your rights related to the processing of your personal data.

Data controller

The controller of the personal data we process is:

Storms AS

The contact information for Storms AS is:

Address: Ringeriksveien 187, 1339 Vøyenenga
Email: [email protected]
Phone: 67176880
Org. no.: 916317263

For any questions you may have about our processing of your personal data, please contact Storms AS.

Personal data processed, purpose and basis for processing

We collect and use personal information for different purposes depending on who you are, how we contact you, and which of our services you use.

Below is an overview of different processing activities and what information we may process for each individual activity and on what legal basis.

Ordering

When you place an order with us, we process your information in order to fulfill our obligations under our agreement with you. We then process your contact information such as name, address, telephone number, email address and payment information in order to fulfill the agreement with you.

The legal basis for the processing is the EU General Data Protection Regulation, Article 6(1)(b).

Communication and contact

We also use your contact information to respond to inquiries that we receive and to provide you with relevant information in connection with your purchase. The purpose of the processing is to provide you with relevant and good customer service and ensure efficient customer administration.

The legal basis for the processing is the EU General Data Protection Regulation, Article 6(1)(b) and/or (f).

Marketing and advertising

We also use your contact information to send you marketing where you have consented to such marketing or where this results from your customer relationship with us. You can withdraw your consent or opt out of such mailings from us at any time by contacting us by phone or email.

The legal basis for the processing is the EU General Data Protection Regulation, Article 6(1)(a) and Section 15 of the Marketing Practices Act.

Development of new and existing services

We may also process personal data to develop our services and products and have a legitimate interest in carrying out such processing. The legal basis for the processing is the EU General Data Protection Regulation, Article 6(1)(f).

Use of cookies

We use cookies to give you a better user experience when you use our websites.

The legal basis for the processing is the EU General Data Protection Regulation, Article 6(1)(f) and Article 6(1)(a).

Prevent abuse

We may also use information you send to the website, such as your IP address, browser information, type of device used, username and network location to ensure the security of the solution.

The legal basis for the processing is the EU General Data Protection Regulation, Article 6(1)(b), (c) and (f).

Recruitment

When recruiting, we may process your name, contact information, CV, application, tests, etc. to process your job application.

The processing is based on GDPR Article 6(1)(b) to take steps based on the application with a view to concluding an employment contract. The personal data is collected from the applicant and from references provided.

Sharing of information

We do not share your personal information with others unless there is a legal basis for doing so, including when such sharing is necessary to fulfill our agreement with you or there is a legal basis that requires us to disclose the information.

In some cases, we use data processors to process personal data on our behalf, for example where we use system providers or other suppliers that are necessary to fulfil the purposes set out in this privacy policy. In such cases, we have entered into necessary agreements to ensure that the data is used in accordance with applicable personal data regulations.

We may also share information with public authorities when required by law or decision of an authority.

All processing of personal data that we carry out takes place within the EU/EEA area.

Storage time

We store your personal data with us for as long as is necessary for the purpose for which the personal data was collected.

Information that we are obliged to preserve under the Accounting Act will be stored for up to 5 years, in accordance with the requirements of the law.

Rights of the data subject

You have the right to request access, correction or deletion of the personal data we process about you. You also have the right to request limited processing, object to processing and request the right to data portability.

To exercise your rights, you can call us or send us an email. We will respond to your inquiry as soon as possible, and no later than within 30 days.

We may ask you to verify your identity or provide additional information before we allow you to exercise your rights against us. We do this to ensure that we are providing access to the right person.

Complaints

If you are not satisfied with our processing of personal data, you can call us or send us an email.

You also have the right to complain about our processing of personal data to the Norwegian Data Protection Authority. You can find information about how to contact the Norwegian Data Protection Authority on the Norwegian Data Protection Authority's website: www.datatilsynet.no .

Changes

We need to update our privacy policy as we develop new products and services. If we make major changes to our privacy policy, we may also contact you through, for example, email or other channels to inform you of the change. Otherwise, updated information will always be readily available on our website.