2. Personal data controller
RESQUNIT AS (org. No. 820187512 ), Grenseveien 21, 4313 Sandnes, Norway, is responsible for the personal data processing described in this policy.
3. How we use your personal information
To be able to handle information such as orders/purchases and contact forms.
• Delivery (including notification and contacts regarding delivery).
• Identification and age control
• Payment processing (including analysis of possible payment solutions, which may include checking against payment history and obtaining credit reports)
• Address Control
• Handling of complaints and warranty cases.
Categories of personal data
• Name and social security number
• Contact information (eg. address, email and phone number)
• Eventual payment history
• Payment Information
• If necessary, credit reports from credit reporting agencies
• Purchase information (eg. which item was ordered or if the goods should be delivered to another address)
• User information for your account with us
Legal basis: Completion of the purchase agreement. This collection of your personal data is required in order for us to be able to fulfill our obligations under the purchase agreement. If the information is not provided, no purchase agreement can be entered into.
Storage time: Until the purchase is completed (including delivery and payment) and for an additional period of 36 months in order to be able to handle any claims and warranty cases.
We may, in exceptional cases, process the information longer than the above stated period if it is necessary for the purpose of determining, claiming or defending legal claims. Such treatment is based on our legitimate interest.
4. From which sources are your personal data collected
In addition to the information that you provide to us, or which we collect from you as a result of correspondence, telephone calls, e-mail and other forms of communication between you and us, we may also collect personal data from someone else, so-called Third Party. The personal data we collect from such third parties is as follows:
• Your address information from public records to have accurate and up-to-date contact information regarding you;
• personal data relating to creditworthiness collected from credit institutions, banks and other companies that provide such information in order to, among other things, enter into agreements with you (such information is collected only on condition that the payment method you have chosen assumes this);
• contact information from social media for marketing purposes given that you interact with us on the social media platforms where we are present.
5. Disclosure of your personal data
5.1. In connection with any of the purposes described in section 3. “How we use your personal data” we may disclose information about you to:
– authorities, when we have a legal obligation to do so;
– our partners. Such partners are either companies that offer IT solutions including e-commerce and business systems or services for invoice purchase or other payment methods;
– someone to whom we may assign our rights and obligations; and
– credit institutions or other organizations that assist us in decisions and / or that help us reduce the risk of fraud.
5.2. The main rule for all personal data processing carried out by our company is that it must take place in the EU / EEA area. We may transfer your personal data to countries outside the EU / EEA area when:
– the transfer to a country considered by the European Commission to provide an adequate level of protection of your personal data;
– the recipient is in the United States and has joined the self-certification mechanism Privacy Shield;
– the transfer is protected by standard contractual provisions adopted by a supervisory authority and approved by the European Commission
– if we are required by law to transfer your information to a country outside the EU / EEA area and we have ensured that the data remains sufficiently protected; or
– You have given your consent to the transfer.
6.1. Cookies are a small text file that is sent from our web server and stored on your browser or device. At www.resqunit.com and shop.resqunit.com we use the following cookies:
– Session cookies (a temporary cookie that ends when you close your browser or device);
– Consisting cookies (cookies that remain on your computer until you delete them or they expire);
– First-party cookies (cookies set by the website you visit);
– Third-party cookies (cookies set by a third party’s website. These are used primarily for analyzes, such as Google Analytics);
– Similar techniques (techniques that store information in your browser in a manner similar to cookies).
7. Google-services, Facebook, Social media
Facebook Pixel, Custom Audiences and Facebook Conversion
In our online activities, we use the so-called “Facebook pixel” due to our legitimate interests in the analysis, optimisation and economical operation of our online offers. “Facebook pixel” is a product of the social network Facebook, Facebook Inc., 1 Hacker Way, Menlo Park, CA 94025, USA or, if you are in the EU, Facebook Ireland Ltd., 4 Canal Grande, Canal Grande, Dublin 2, Ireland (“Facebook”).
Facebook is certified under the Privacy Shield agreement and thus offers a guarantee to comply with European levels of data protection (https://www.privacyshield.gov/participant?id=a2zt000000001L5AAI&status=Active).
Using Facebook Pixel, it is possible for Facebook to identify visitors to our online offers as a target group for displaying advertisements (so-called Facebook ads). Therefore, we use Facebook Pixel to show Facebook ads to users who have shown interest in our online offers, or who have certain characteristics (e.g. interest in certain items or products based on their visited web pages) that we send to Facebook (so-called “custom audiences”). Using Facebook Pixel, we also want to ensure that our Facebook ads are in accordance with users’ potential interests. Using Facebook Pixel, we are able to monitor the impact of Facebook ads for statistics and market research, allowing us to see whether users were redirected to our website after clicking on a Facebook ad (so-called “conversion”).
Data processing by Facebook is part of Facebook’s data use policy. General guidelines for displaying Facebook ads can be found in Facebook’s data use policy: https://www.facebook.com/policy.php. For specific information and details on Facebook Pixel and how it works, visit the help section on Facebook: https://www.facebook.com/business/help/651294705016616.
We use social media platforms to communicate with our customers, those interested and users in general about our services and products. By using these social media platforms and networks, their rules and guidelines for data processing apply.
8. The protection of your personal data
In order to protect your personal data and to keep the protection updated and effective, we have taken a number of measures. These measures include:
– Training and training of relevant staff to ensure that they are aware of our responsibilities and obligations in processing your personal data;
– administrative and technical control functions to restrict access to personal data for persons other than those in need of processing such data;
– Technical security measures, including firewalls, encryption and antivirus software; and
– Physical security measures, eg access card to enter our premises.
9. Your rights
9.1. You have different rights related to the processing of your personal data. Your rights under the Data Protection Regulation are as follows:
The right to access
9.2. You have the right to access to the personal information about you that we process (so-called transcript). Please note that we may ask for additional information to ensure efficient handling of your request and that the information is provided to the right person.
The right to supplement
9.3. If your personal data is incorrect, you can have them corrected. You may also have the right to supplement any incomplete information.
The right to erasure
9.4. You can request erasure of the personal information we possess if:
– the data are no longer necessary for the purposes for which they were collected or processed;
– you object to a balance of interests that we have made based on legitimate interest and your reason for the objection weighs heavier than our legitimate interest;
– you object to personal data processing for direct marketing purposes;
– the personal data is processed illegally; or
– the personal data must be erased in order to fulfill a legal obligation covering us.
9.5. We may be prevented from deleting certain personal data due to requirements according to e.g. accounting or consumer law. It may also happen that the treatment is necessary for us to be able to determine, assert or defend legal claims. Should we be prevented from meeting a request for erasure, you have the opportunity to request that the personal data be blocked from being able to be used for purposes other than for which they must be saved.
The right to limitation
9.6. In some situations, you have the right to request that we limit our processing of your personal data. If the treatment is to be limited, we may only, in addition to the actual storage, process the data in order to establish, enforce or defend legal claims.
Oppose legitimate interest
9.7. You always have the right to avoid direct marketing and to object to the processing of personal data based on a balance of interests. In order to process your personal data after such an objection, we need to be able to show a justified reason for the current treatment that weighs heavier than your interests, rights or freedoms. Otherwise, we may only process the data to determine, exercise or defend a legal claim.
The right to data portability
9.8. If our processing of your personal data is based on your consent or on the fulfillment of an agreement with you, you have the right to request that the information that concerns you and which you have submitted to us transferred to another data controller (so-called data portability). One prerequisite for data portability is that the transmission is technically possible and can be done in an automated way.
10. Competent Authority
10.1. If you are dissatisfied with our processing of your personal data, you are always able to contact the Data Inspectorate at Datatilsynet https://www.datatilsynet.no/en/