Privacy statement
Version 1. 0 - 01.10.2020
At ENERGI OG BALANSE AS ("Energi og Balanse", "we" or "us") we care about your privacy. Therefore, we always have your privacy and our responsibility in mind when we collect and process personal data. Energi og Balanse AS is the data controller for the data we process when you are a website user ("energiogbalanse.no") and use our services. The privacy policy describes what personal data is processed and how we collect and use your personal data. The statement also describes the rights you have as registered with us and how to exercise these rights.
1.Your agreement with Energi og Balanse AS
This privacy policy is part of the Agreement between you as a website user and Energi og Balanse. The statement describes the processing of personal data in all our services. It is therefore important that you read the content before you start using any of the services.
2. legal basis for processing
Energi og Balanse's processing of your personal data must have a legal basis in order to be lawful. This means that Energy and Balance must have identified in advance whether there is a legal basis for processing. If we do not have one, our processing of your personal data is unlawful.
Below you will find the legal bases for processing we use:
2.1 Necessary to fulfill an agreement with you
The purpose of Energi og Balanse's processing of personal data is primarily customer administration, invoicing, execution of payment orders and provision of other services in accordance with the agreements we have entered into with you.
2.2 Legal obligations
Energi og Balanse also processes personal data to fulfill its obligations under laws, regulations or decisions by authorities; such as the Personal Data Act, the Bookkeeping Act, the Money Laundering Act and other relevant regulations, and disclosure orders from authorities pursuant to law.
Examples of processing based on legal obligations:
- prevention and detection of criminal offenses, such as money laundering, terrorist financing and fraud
- accounting requirements
- reporting to police authorities, supervisory authorities and other authorities pursuant to law
2.3 Legitimate interest
Energi og Balanse may process personal data if this is necessary to safeguard a legitimate interest that outweighs the individual's right to privacy. The legitimate interest must be lawful, defined in advance, genuine and objectively justified in the business.
2.4 Consent
Unless there is no other basis for processing, Energi og Balanse's processing of personal data will be based on voluntary, express and informed consent from you as a customer.
If you have given your consent to Energy and Balance, this can be withdrawn at any time. If you withdraw your consent, the processing will cease and the personal data will be deleted if the storage of the data is based solely on the consent given.
3. the purpose of processing your personal data
The purpose of our processing of personal data in connection with your use of Energi og Balanse's website is primarily to fulfill the obligations undertaken by Energi og Balanse for the execution of the Agreement, including to execute payment orders and deliver other services to you that you have used through the website.
At Energi og Balanse, personal data is also processed for the following purposes, among others:
- Customer follow-up, statistics and marketing
- Further development, testing and improvement of Energy and Balance's services
- Safety monitoring
- Prevention and detection of criminal offenses
- Energi og Balanse will also process personal data to the extent required or permitted by law or when you have consented to such processing.
4. what information we store
Energi og Balanse stores data that you provide on the website when you register, that is generated when you use the service or that is collected from public registers. Energi og Balanse stores the following data and processes personal data for the following purposes and uses several of the legal bases for processing mentioned above in section 2:
- When you register as an Energy and Balance user, you provide a range of personal data such as your name, telephone number, address and email address. The purpose is to identify you and manage the customer relationship. Your address, email address and any other contact details are also used for marketing purposes (see section 9).
- For security purposes, we register which mobile device you use and the device's operating system.
- To allow you to stay logged in with your browser and devices you choose to use this part of the service on. For this we use cookies.
- We store the content of messages you and the recipient, both private and corporate, send to each other in connection with the transaction. We are required to do this by the Money Laundering Act.
- We also store transaction history and generated screenshots. We are required to do this by the Money Laundering Act.
5.disclosure of personal data
Information that can be linked to you as a person will not be disclosed to others unless it follows from the Agreement, is authorized by law or you have specifically consented to it. When you create a user profile, other users can search for you in the solution using your username.
6 Use of data processors
There are several subcontractors who process personal data on our behalf (data processors). The transfer of personal data to such data processors takes place in accordance with data processing agreements that ensure that the processing is carried out in accordance with the regulations, including preventing the data processor from using the data for other purposes.
Thus, a valid legal transfer basis is required for such transfer under the GDPR, and some of the following conditions must be met:
- The European Commission has decided that an adequate level of protection exists in the country in question.
- Other appropriate security measures have been taken and/or a data processor has provided the necessary guarantees that the personal data will be processed in a secure manner, in accordance with the GDPR and in addition to, for example, the use of standard contracts (EU standard contractual clauses) approved by the European Commission, or the data processor has valid binding corporate rules (BCRs).
- These are exceptions in special cases, for example to fulfill an agreement with you or cases where you give your consent to the specific transfer.
7.customer follow-up, profiling and marketing
7.1 Customer follow-up
Energi og Balanse will register and use the necessary personal data about you to fulfill the obligations we have undertaken for the execution of the agreement with you, as well as for customer administration and invoicing.
Without your consent, entities and companies in Energi og Balanse may share the following neutral information between themselves; e.g. name, contact details, date of birth and which services or products you have contracted for.
7.2 Profiling and marketing
We want the information, news and marketing we send you to be relevant. In this regard, we may perform limited profiling. We therefore adapt the content based on the information we have about you. Examples of this information include the products and services you have contracted with us for, your age and place of residence. Energi og Balanse may process this information if it is necessary to safeguard a legitimate interest that outweighs your privacy. Among other things, Energi og Balanse has a legitimate interest in using personal data for marketing, product and customer analyses. The analyses form the basis for marketing, as well as process, business and system development, including testing. The purpose is to improve our solutions and provide the best possible offers, products and services to our customers.
If products and services are marketed by means of electronic communication to you personally within product categories other than those for which Energy and Balance and you have entered into an agreement, your consent is required to use customer information other than your name and contact details and which products you have.
8. marketing in external channels: We want to provide you as a customer with relevant information and marketing on social platforms and websites. In order to achieve this, we need to know who you are when you use the relevant social platforms and websites. We do this by linking contact information such as telephone and email that you have provided to us with information you have provided to the external channel.
Once the link is made, you will be able to receive messages and information that we assume are of interest.
You may at any time choose not to have your personal data used for direct or targeted marketing by contacting us. You can find this option under "Contact" on the website.
9 Statistics
At Energi og Balanse, we process personal data for internal statistics and to provide statistics to public and private companies. The statistics we share with others are never personal data and you will never be identifiable to these organizations. The data can only be used to improve products, services, communication and offers to consumers. Our processing basis for this purpose is legitimate interest. The statistics we create are based on demographic data, product data and transaction data. Examples of statistics may be groups of residents who travel by public transport or the time of day when most people visit the grocery store, etc.
10. your rights
You have the right to demand access, correction of incorrect personal data or deletion of personal data we process about you. You also have the right to demand restriction of processing and may, under certain conditions, object to further processing of personal data or demand that your personal data be transferred to yourself or another controller (data portability).
You may withdraw your consent at any time. You can do this under "Contact" on the website. A withdrawal of consent does not affect the legality of processing that was based on consent before the consent was withdrawn.
If you wish to exercise your rights, you can fill in our contact form at https://energiogbalanse.no/kontakt/ or at post@energiogbalanse.no. We will respond to your inquiry as soon as possible, and within 30 days at the latest.
11.storage time
Personal data will not be stored for longer than is necessary to fulfill the purpose of the processing. After this, the information will be deleted or anonymized, unless the information must or can be stored beyond this as a result of law. This also applies if you delete your user profile. Information about your transactions will be stored by Energi og Balanse for as long as required by law.
Personal data that we process on the basis of your consent will be deleted if you withdraw your consent, unless there is another legal basis for further processing.
12.safeguarding of personal data
Personal data collected by Energi og Balanse is stored and processed in a safe and secure manner. We have established and documented procedures and measures to ensure the integrity, availability and confidentiality of the data in accordance with Article 32 of the GDPR.
13 Complaints
If you believe that our processing of personal data is in breach of data protection legislation, you can contact us at post@energiogbalanse.no or complain to the Norwegian Data Protection Authority.
You can find contact information for the Danish Data Protection Agency at www.datatilsynet.no.
14.changes
We may change this Privacy Policy to comply with legal requirements, when offering new and/or modified products and changes to our own practices for collecting and processing personal data.
15. controller
Energi og Balanse AS is the controller for the processing of personal data as set out in this privacy policy. If you have any questions about Energi og Balanse's privacy policy, please contact us at https://energiogbalanse.no/kontakt/, by email post@energiogbalanse.no or by phone 97 72 65 60.