Home Shop Blog
About Contact

Privacy Policy

Last updated: 22.12.2023

1. INTRODUCTION
This privacy policy has been prepared by NorVue AS (“NorVue” or “we”) to ensure that you receive the information we are required to provide you with.

Before purchasing and using products and services from NorVue, you consent to our processing of personal information about you and confirm that you have read, understood, and agree to the content of this privacy policy.

The privacy policy describes how we process your personal data, why we process your personal data (purposes), and on what legal basis we process your personal data. In addition, the privacy policy describes the rights you have as a data subject under the General Data Protection Regulation (Regulation (EU) 2016/679) and the Norwegian privacy legislation (together, the “Privacy Legislation”).

When you visit our websites, we also automatically store information about the browser type, Internet service provider (ISP), referral/exit pages, operating system, date/time, clickstream data, and other user information as part of our service analysis. These data are not linked to other information we collect about you and are anonymous.

If you would like more information about what personal data we process about you or would like to exercise one of your rights, you can contact us by email at [email protected].

2. WHAT ARE PERSONAL DATA?
Personal data is any information or assessment that can be linked to a physical person or a small group of people (the "Data Subjects"). Examples of what is considered personal data include name, social security number, address, salary information, working conditions, telephone number, and email address.

By processing personal data, we mean the collection, storage, use, compilation, deletion, and any other handling of personal data that falls under the Privacy Legislation.

3. WHO DO WE PROCESS PERSONAL DATA ABOUT?
This privacy policy relates to our processing of personal data about the following individuals:

• Private customers (customers who are physical persons).
• Contact persons at corporate customers, including the employee(s) of the corporate customer who will use NorVue's services.

4. NORVUE AS DATA CONTROLLER
NorVue is the data controller for the processing of your personal data. As the data controller, we are responsible for complying with the Privacy Legislation that applies at any given time when we process your personal data.

Data Controller:
NorVue AS
Attn: CEO/Founder, Ai Phi Thuy Ho
Mørtelverksbakken 1, 0580, Oslo
Email: [email protected]
Phone: +4792425617

If you have objections regarding privacy or the use of data that has not been processed in a satisfactory manner, you can file a complaint with the Norwegian Data Protection Authority (Datatilsynet).

NorVue AS is responsible for the processing of personal data carried out in connection with visits to our websites, ordering, administration of our products and services, and contact with us.

5. WHAT PERSONAL DATA DOES NORVUE PROCESS?
5.1 Customer information
We collect and process the following personal data when you register as a customer on our website and when we administer the customer relationship:

• Contact information: If you are the customer's contact person or a private customer (customer who is a physical person), we will collect and process your full name, date of birth, gender, occupation, place of work, and email address.
• Billing information: We store information about which course(s) you have ordered, how you receive our invoices (for example, by post, regular mail, or similar), whether and when the invoices/claims have been paid, and whether the claim has been sent to debt collection.

Personal data is collected to enable NorVue AS to perform the tasks and services required by law, regulations, and/or agreements. Processing of personal data takes place within the framework of applicable laws and regulations.

Personal data may be disclosed to third parties that NorVue AS collaborates with, both within and outside the EEA and EU areas, to enable us to perform the tasks and services required by law, regulations, and/or agreements, and in accordance with this privacy policy.

If there is a legal obligation to disclose information to public authorities, registered personal data will be provided in accordance with the authorities’ requirements.

5.2 Visiting our website
When you visit our website, we will store certain cookies on your device.

The processing and storage of information using cookies requires that the visitor is informed that cookies are being used and has consented to this (cf. the Electronic Communications Act § 2-7b). You can read more about our use of cookies in our cookie policy here.

Your IP address is also recorded when you visit our website. The IP address is automatically registered by the browser and stored in our user registration databases if you register as a user.

6. WHAT IS THE PURPOSE OF PROCESSING PERSONAL INFORMATION?
We process the personal information specified in section 5.1 above because it is necessary to establish and manage the customer relationship, for billing purposes, and to perform our mission for the customer. We also process invoice information to comply with our legal obligations. In addition, we process personal information to be able to prepare customized offers for our third-party providers who operate our website.

We process the personal information specified in section 5.2 to diagnose or service technical problems reported by our users related to the IP address, create advertising based on geographic area or other information retrieved from the user's IP address, report aggregated information from IP addresses to advertisers, estimate the total number of users visiting the site from different geographic regions, and to detect unauthorized use of the site (e.g. multiple users with the same IP address).

The main purposes of using cookies are to ensure functionality and create a good user experience when visiting our website. In addition, we use cookies to analyze your use of our website and services.

7. WHAT IS THE LEGAL BASIS FOR OUR PROCESSING OF PERSONAL INFORMATION?
If you are a private customer (a customer who is a natural person), we process your contact information and billing information because it is necessary to fulfill a contract with you. If you are the customer's contact person (for example, because the customer is a legal person), we will process your contact information because it is necessary for purposes related to NorVue's legitimate interests. This legitimate interest is the establishment and management of the customer relationship we have with the customer you are the contact person for.

We also process invoice information to fulfill our legal obligations under accounting legislation.

We process cookies and IP addresses because it is necessary for purposes related to NorVue's legitimate interests. These legitimate interests are to ensure functionality and improve the user experience, in order to improve our services, and to detect unauthorized use of the website.

8. DISCLOSURE OF PERSONAL INFORMATION AND USE OF DATA PROCESSORS
When registering on our website, personal information will be processed and stored through NorVue with a database in Norway.

We will not disclose your personal information to other actors unless we are required by law to disclose this information.

9. HOW LONG WILL WE RETAIN YOUR PERSONAL INFORMATION?
We will delete or anonymize personal information when it is no longer necessary for the purpose for which it was collected, in accordance with the following deletion routines:

  • Invoice information and personal information related to this will be stored for the period required by law, such as accounting legislation.

10. WHAT RIGHTS DO YOU HAVE?
You have the following rights regarding our processing of your personal data:

  • Access: You can contact us if you want to know more about what personal data we process about you. However, please note that your right to access does not apply to information that is subject to confidentiality under law or regulations.
  • Rectification: If the personal data we hold about you is inaccurate, you can request that we correct it.
  • Erasure: You can ask us to delete your personal data, which we will respect and follow, unless we are required to retain your personal data, or if the relevant personal data is necessary to establish, exercise, or defend a legal claim.
  • Restriction of processing: In accordance with data protection legislation, you can also request that our processing of your personal data be restricted, if the conditions for this are met under data protection legislation. If processing is restricted, your personal data will only be stored. However, this does not apply if, despite the restriction, you have consented to another form of processing, or if such further processing can be carried out on a different legal basis (for example, to pursue a legal claim).
  • Objection to processing: If personal data is processed for marketing purposes, you have the right to object to the processing of your personal data. If your objection is based on your particular situation (such as a special need to protect your identity), you can, in accordance with data protection legislation, object to processing activities we carry out to protect legitimate interests, which are not overridden by the interests and fundamental rights and freedoms of the data subject. However, this does not apply if there are compelling legitimate grounds for the processing that override the interests of the data subject, or if the processing is necessary to establish, exercise, or defend a legal claim.
  • Data portability: If we process personal data about you based on consent or to perform a contract, and the personal data is processed automatically, you can ask us to provide the personal data to you or to a third party in a structured, commonly used, and machine-readable format.

If you wish to exercise any of your rights, you can contact us. Please note that we may need to ask you to identify yourself, or use another communication channel, as we may need to ensure that you are who you claim to be.

11. WHAT DO WE DO TO ENSURE THAT YOUR PERSONAL DATA IS SECURED?
As the data controller for your personal data, we have the overall responsibility for ensuring that your personal data is processed and stored securely. This means that we must take technical and organizational measures that are suitable for ensuring satisfactory information security.

For security reasons, there are limits to how much we can elaborate on the technical security measures we have implemented and established. However, we can say that all our employees are required to maintain confidentiality about your personal data when necessary, that we have taken technical and organizational measures to ensure the integrity and availability of your personal data, and that such information is not compromised.

All data transfers that occur through our websites are encrypted with a security certificate (https). However, there is no guarantee that someone may not gain access to such information or that it will not be disclosed, altered, or destroyed due to a breach of a firewall or secure server software.

Since no data transmission over the Internet is 100% secure, we cannot guarantee or warrant the security of information you transmit to us.

If we become aware of a breach in any of our security systems, we will notify you in writing via email so that you can take necessary protective measures. By using our services or providing us with personal information, you consent to NorVue AS contacting you electronically regarding security and privacy matters.

12. THIRD-PARTY FUNCTIONALITY AND WEBSITES
Our products and/or services may include third-party features, services, apps, and links from other providers and websites where the privacy practices may differ from ours. These third-party features may collect your IP address, the page you visit on the website, and they may store a cookie to ensure the proper functioning of third-party features.
Third-party features may also collect sensitive information, such as financial information (credit card) to process purchases of products or services.

If you submit personal information to any of these websites, that information is subject to their privacy policies. Therefore, we encourage you to carefully read the privacy policies of all websites you visit before submitting personal information.

13. DATA PROCESSORS
We have subcontractors who manage our websites and customer systems and have entered into data processing agreements. These agreements describe how personal data is handled by our subcontractors/data processors. Our data processing agreements are drafted in accordance with applicable privacy laws.

14. THE NORWEGIAN DATA PROTECTION AUTHORITY AND APPLICABLE DATA PROTECTION LEGISLATION
The Norwegian Data Protection Authority (Datatilsynet) is responsible for enforcing the privacy regulations and overseeing Norwegian companies' processing of personal data. You can contact us at any time if you have complaints about our handling of your personal data. You can also complain to Datatilsynet or a supervisory authority in an EU/EEA country where you reside or work, or where the alleged violation has occurred.

You can find contact information for Datatilsynet on their website here. On the website, you will also find further information about our obligations and your rights under the applicable data protection legislation.

The currently applicable data protection legislation is available on Lovdata. You can find the Personal Data Act here.

15. CHANGES TO THE PRIVACY POLICY
The customer accepts that NorVue AS reserves the right to make changes to the Privacy Policy continuously.

NorVue AS is obliged to notify the customer of significant changes to the Privacy Policy. Significant changes include any matters that significantly restrict the customer's rights or alter the parties' obligations or rights in general. Notice of significant changes shall be sent by email to the email address provided as the contact address for the customer relationship.

Therefore, we recommend that you periodically review the privacy policy when you visit our website.

Last updated: 22.12.2023