Privacy Policy
Version 2.0. Last changes made 15.09.2019
At SNØ, your trust is important to us. Our goal with this policy is for you to feel secure and for us to describe to you in a clear and transparent manner how we collect, use, display, transmit and store your information so that you can feel confident that your personal data is stored safely and not misused.
The website www.snø.no is owned and operated by SNØ Oslo AS, Snøfonna 5, 1470 Lørenskog with the org.nr 815 950 712. Contact SNØ via email at kontakt@snooslo.no.
1. Responsibility
SNØ Oslo AS by CEO is responsible for handling all personal identifiable information in accordance with the Privacy Act.
2. The purpose of collecting personal data
When you register as a user at SNØ you will get access to purchase SNØ products, sign up for newsletters to receive information about what happens on SNØ and receive offers directly to your inbox.
SNØ performs all processing of personal data in compliance with the EU's privacy legislation, the General Data Protection Regulation (GDPR). It can happen that the same personal data is processed on the basis of multiple legal bases, such as the performance of a contract, based on a balancing of interests or specific consent from you, or on the basis that the data is necessary in order to comply with other legal obligations. This means that, even if you revoke your consent and processing based on consent ceases, it may still be necessary to save your personal data for other purposes where the personal data is still needed. Primarily, we process your data for the performance of a contract to which you are party, such as a purchase or visit.
3. What personal data we collect and why
Personal data means all kinds of information that can be directly or indirectly attributed to a living, natural person. This includes their name, national ID number, address, email address and telephone number. It may also include the likes of booking numbers and IP addresses where these can be linked to individuals.
Information that you provide: When you register a user account at SNØ´s digital services. This contains information such as name, address, contact information, interests etc. When you update/make changes to your profile at mySNØ, communicates with SNØ and purchase a product.
Information collected when using our digital services: When you use any of our websites, our apps or any other digital service from us, we collect data about your use of the service in question. Some of this data may be personal data, for example your IP address if it can be linked to individuals. We also collect information about how you navigate in the relevant service, what searches you make and which products you are interested in. If you are logged into mySNØ or provide information that enables us to identify you, we connect the information about your usage patterns with other information we have collected about you. For more information about the type of data collected in connection with the use of our digital services, see our cookie policy. Your response to our campaigns and activities, communication through email/SMS and your activity will be stored.
4. How do we use your personal data
SNØ will use the information that you have provided and the data collected when you are using our digital services in order to be able to deliver the services and products you have ordered from us.
SNØ processes data you have provided and data collected from when you are using our services in order to provide customer service, and to send you relevant offers and news in line with what you have signed up for.
We use the data we collect about our customers to develop and improve our products and services. This applies to our digital services, where we analyse user behaviour in order to develop how we present information and offers and design features.
Finally, your personal data may be processed in order to satisfy obligations under laws and regulations, for example regarding security and reporting
We never save data longer than we need to and only use your personal data for the purposes set out in this policy. After this time, we will safely remove your personal data. The same personal data may be stored in several different places for different purposes. This means that we may delete data from one system when it is no longer needed there, while the same data may continue to be stored in a different system where its purpose is still valid for that specific system. If data is needed after this period for analytical, historical or other legitimate commercial purposes, we will take appropriate steps to anonymise the data so that it no longer constitutes personal data.
If you delete your user account, the data will be stored for 4 weeks in case you change your mind. After 4 weeks all data will be deleted except the information that is required to keep according to the Norwegian Bookkeeping Legislation.
If your user account has been inactive for 3 years, we will delete you personal information other than name and email address. After 5 years all data will be deleted.
5. Do we share your data?
In order to be able to fulfil the booking you have made with us, we may need to share your personal data with our sub-suppliers and partners. We only share personal data with them to the extent necessary for them to be able to provide their services to you and us, and they only have access to the personal data that is necessary. If required by law we will share information to official authorities, but only in the extent required to.
6. Who is processing you data?
SNØ is the primary data controller, but some service providers will also have access to personal data. Service providers is obliged to process data in accordance with instruction from SNØ and in accordance with a data processing agreement between SNØ and the service provider and in compliance with the EU's privacy legislation, the General Data Protection Regulation (GDPR).
Examples of such service providers are as follows:
When we have agreed with third parties to provide services on your behalf such as processing a payment, send a SMS or email through a service provider which is a contractual partner where a data processing agreement is in place.
When we secure your personal data. We use cloud services to store your data in a database for the purpose of for example identifying you when you log in to your user account.
When we develope our digital services by using external developers and advisors. We hire companies for the purpose of develope our services and as such they will have access to personal data. SNØ will have a data processing agreement with these types of vendors.
7. When do we ask for your consent?
SNØ reserve the right to change the privacy policy in order to adapt it to changing legal situations, and due to an upgrade of our services or changes in the way we collect and process personal identifiable data. If these changes requires a new consent, you will be asked for a new approval when logging into www.snø.no or other digital services with the same user account.
8. Is registration optional?
You need to register to be able to purchase products and to receive information through our digital services. Your receipts and transactions need to be linked to a user profile. As such, it is not optional to register or not. But it is optional whether you want to receive direct offers or news from SNØ.
9. Your rights
Necessary handling of personal data and handling based on consent Such processing of personal data as is necessary for us to be able to perform a contract with you or to fulfil a legal obligation is permitted without consent. However, your consent to processing is required in order for us to collect and handle your personal data for any other purpose.
You can choose to withdraw your consent at any time by contacting us via customer service. If you withdraw your consent, we will anonymise the personal data we hold about you, and discontinue any processing on the basis of that consent, e.g. in connection with profiling.
It may be that the same personal data is being processed both on the basis of your consent and on the basis that it is necessary or under other regulations. This means that, even if you revoke your consent and such processing as is based on that consent ceases, it may still be necessary for us to retain your personal data for other purposes.
In addition to the online access you have to the personal data related to mySNØ or your booking, you also have a right to a copy of the personal data that we hold about you.
You have the right to request that data about you be deleted, supplemented or corrected. You also have the right to request that the processing of your personal data is limited to specific purposes and that it not be used, for example, for direct marketing or profiling.
You are welcome to contact us at any time in order to obtain a copy of your personal data or have it amended or deleted. N.B. Your request must be submitted in writing, as it must contain your signature.
If you have any questions about the processing of your personal data, please contact us by email to kontakt@snooslo.no. If you are not satisfied with the response you have received, you have the right to submit a complaint to Datatilsynet: phone 22 39 69 00 or email: postkasse@datatilsynet.no