Privacy policy for Barista.no/Storms AS

Processing of personal data

When you use our website, shop with us and/or are in contact with us, we will process personal data about you. Below you will therefore find information about the personal data that is collected, why we do this and your rights related to the processing of personal data.

Data controller

The data controller for the personal data we process is:

Storms AS

The contact information for Storms AS is:

Address: Ringeriksveien 187, 1339 Vøyenenga
E-mail: [email protected]
Phone: 67176880
Org.nr: 916317263

If you have any questions about our processing of your personal data, please contact Storms AS

Personal data processed, purpose and basis for processing

We collect and use personal data for different purposes depending on who you are, how we get in touch with you and which of our services you use.

Below is an overview of different processing activities and what data we can process for each activity and on what legal basis.

How to order

When you place an order with us, we process your data in order to fulfill our obligations under our agreement with you. We then process your contact information such as name, address, telephone, e-mail address and payment information in order to fulfill the agreement with you.

The legal basis for the processing is Article 6(1)(b) of the EU General Data Protection Regulation.

Communication and contact

In addition, we use your contact information in order to respond to inquiries that come to us and to provide you with relevant information in connection with your purchase. The purpose of the processing is to be able to provide you with relevant and good customer service and ensure efficient customer administration.

The legal basis for the processing is Article 6(1)(b) and/or (f) of the GDPR.

Marketing and advertising

We also use your contact information to send you marketing where you have consented to such marketing or where this follows from your customer relationship with us. You may at any time withdraw your consent or opt out of such mailings from us by contacting us by phone or email.

The legal basis for the processing is Article 6(1)(a) of the EU General Data Protection Regulation and Section 15 of the Marketing Control Act.

Development of new and existing services

We may also process personal data in order to develop our services and products and have a legitimate interest in carrying out such processing. The legal basis for the processing is Article 6(1)(f) of the EU General Data Protection Regulation.

Use of cookies (cookies)

We use cookies to provide you with a better user experience when you use our website.

The legal basis for the processing is Article 6(1)(f) and Article 6(1)(a) of the General Data Protection Regulation.

Prevent abuse

We may also use information you send to the website, such as your IP address, browser information, type of device used, username and network location to ensure the security of the solution.

The legal basis for the processing is Article 6(1)(b), (c) and (f) of the GDPR.

Recruitment

In connection with recruitment, we may process your name, contact details, CV, application, tests, etc. in order to process your job application.

The processing is based on Article 6(1)(b) of the GDPR in order to take action on the basis of the application with a view to entering into an employment contract. The personal data is collected from the applicant and from references provided.

Sharing of information

We do not share your personal data with others unless there is a legal basis for this, including when such sharing is necessary to fulfill our agreement with you or there is a legal basis that requires us to disclose the information.

In some cases, we use data processors to process personal data on our behalf, e.g. where we use system suppliers or other suppliers that are necessary to fulfill the purposes stated in this privacy policy. In such cases, we have entered into the necessary agreements to ensure that the information is used in accordance with applicable personal data regulations.

We may also share information with public authorities when this is required by law or decision from the authorities.

All processing of personal data that we carry out takes place within the EU/EEA area.

Storage time

We store your personal data with us for as long as it is necessary for the purpose for which the personal data was collected.

Information we are obliged to retain under the Bookkeeping Act will be stored for up to 5 years, in accordance with legal requirements.

Rights of the data subject

You have the right to demand access, rectification or deletion of the personal data we process about you. You also have the right to demand limited processing, object to the processing and demand the right to data portability.

To exercise your rights, you can call us or send an email. We will respond to your inquiry as soon as possible, and no later than within 30 days.

We may ask you to verify your identity or to provide additional information before we allow you to exercise your rights with us. We do this to make sure that we give access to the right person.

Complainant

If you are not satisfied with our processing of personal data, you can call us or send an email.

You also have the right to complain about our processing of personal data to the Norwegian Data Protection Authority. You can find information on how to contact the Data Protection Authority on the Data Protection Authority's website: www.datatilsynet.no.

Changes

We need to update our privacy policy as we develop new products and services. If we make major changes to our privacy policy, we may also contact you through, for example, e-mail or other channels to inform you of the change. Otherwise, updated information will always be readily available on our website.