Privacy policy
Last updated on 19.8.2021
This Privacy Notice explains how Freska and it’s subsidiaries collect personal data about you and how we use your data. This notice applies to all Freska customers and the end users of our digital services, such as Freska app.
If you have any questions about this privacy notice or the ways we process your personal data, please contact us at post@freska.no.
1. Collection of personal data
The personal data we process are mainly obtained directly from you. The data from You are obtained in following situations:
When you order services from us. When you order services from us, we collect your contact details and details regarding the order such as data about the purchase, other orders and additional information about your residency and expectations.
When you contact us. We collect the information when you contact us. We collect the data on the messages and feedback we receive. We also keep track of the used communication channels.
When we contact you or when you receive our marketing messages. We collect personal data when we contact you via different channels, or target you via our advertising partners. We also conduct different surveys for our customers to make sure our services meet the standards we require. We collect Your personal data also to analyse the effectiveness of our advertising campaigns and sales efforts.
When you use our digital services. We use cookies and similar technologies to track how many visitors our website has and which information is viewed and other metrics.
External data sources. We obtain personal data from external data sources for our Sales team to contact You and present our services. Sometimes we might get your contact details through a campaign, such as tell-a-friend or via a competition in social media or on our website.
2. Processing of personal data
We process different kinds of personal data categories for various purposes. For example, the processed personal data consists of the following categories:
Your basic contact information, such as your first name, last name, address, coordinates, phone number and email address.
Information about your purchases, orders and agreements, such as your customer number, invoicing details, payment details, purchase details, purchase history, your inquiries to our team, your feedback on our services and possible information about your participation in our competitions or research.
Information derived from your usage of our website signup or Freska app such as username, password, sign ups and statistics related to our newsletters, the actions performed and used discounts. Other service usage data and data related to our marketing campaigns, such as profile information, your interests, different consents and other information obtained when you have consented to such collection.
We collect certain information automatically when you use our services, such as Freska’s websites and mobile apps. The information that we collect are for example how long you stay on our website, when you visit, from which website did you come from and how you use such services. This information includes the visited pages and we use such data to make our advertising more relevant to you.
The technical data that we collect from the website and the app are about the devices that you use, such as your browser version, the device model, cookie ID’s, IP-addresses and operating system. This information is collected automatically via server requests when you use our services.
3. The purposes of processing
When the processing is necessary for the performance of a contract to which you are a party of or in order to take steps at your request prior to entering into such contract. When You order services from us, we process personal data that are needed to perform our contractual obligations. For example, we need your invoicing details and your address in order to perform the ordered service.
When the processing is necessary for compliance with a legal obligation to which we are subject to. The invoicing related details are stored for accounting and taxation. In these cases we are subject to legal requirements that require us to process personal data.
When you have given your consent to the processing. For example, to send out a newsletter to you, we need your consent to do so. With your consent we send you targeted advertisements and disclose your data to our selected business partners to conduct different marketing campaigns.
If you have previously given your consent, we may also contact you via email, phone, and SMS. This includes marketing communications, offers, and other communications related to our services. You can withdraw your consent at any time by contacting us.
When processing is necessary for the purposes of the legitimate interests pursued by us or by our business partners or third parties. When we rely on legitimate interests, we have a customer relationship with you and we make sure that processing is necessary and proportionate.
Conducing statistics and analyses. We measure the effectiveness of our campaigns in different media and follow closely on new service orders made via different campaigns. This enables us to forecast our sales and develop our services to respond better to customer needs.
Developing new services. When we collect data on your interests and connect it to your profile, we are able to develop better service models for our customers and recommend any new service that might be in Your interest.
Protecting the personal data and preventing frauds and misuse. To prevent malicious actions against your data, we collect logs about the use of our services, such as from which IP addresses our services are used. With the help of these log files, we try to detect, for example, anomalies in the use of our services in order to prevent personal data from unlawful access by malicious third parties.
Customer service and communications. We process your personal data to answer your various inquiries or requests, for example, when you contact our customer service through different channels. Also we will naturally process your contact information when notifying you of new products or services.
Electronic direct marketing in certain situations. We will send you direct marketing messages, for example, when such marketing is related to your position as a potential decision maker in a company or to market you similar products or services that you have previously purchased from us.
4. Disclosures to third parties
While we do a lot by ourselves, we also use service providers outside Freska to process personal data. Below you will find a list of categories of third parties to whom your personal data may be disclosed. We aim to sign agreements with all the recipients to ensure that your personal data would be used only on our behalf.
Marketing partners. We transfer personal information to various advertising partners for marketing purposes. For example, we run marketing campaigns in which we transfer information related to marketing segment groups to systems managed by our partners.
Sales partners. We use outsourced sales partners for example to conduct sales calls to our existing customers and those customers whose subscription is about to expire.
IT system and data center providers. In our operations, we utilize various IT systems and data center services. For example, we use an e-mail system managed by Google and data centers provided by Google.
Social media providers. We use social media functionalities in our online services through which your personal data can end up on the providers of these functionalities, such as Facebook and Google.
Other service providers and subcontractors. In addition to the above mentioned categories, we also use other service providers as well as subcontractors to whom your personal data may be disclosed. Such actors that operate outside Freska can be, for example, cleaning service providers, consultants and companies that provide market research and customer surveys.
Other situations in which your personal data can be disclosed. We may disclose your personal data outside Freska in other, more irregular situations such as when we collect receivables, investigate possible violations of our terms or filing or defending a legal claim.
We may also disclose your personal data as required by the competent authority under applicable law. These authorities include, for example, tax authorities, police, and enforcement or supervisory authorities.
In addition, if we sell, merge or otherwise re-organise our business operations, your personal data may be disclosed to potential buyers or their advisors for the purpose of carrying out such acquisitions.
We use Google’s services on our Digital services for analysing the usage of our Digital services and to serve advertising outside our services. Google uses cookies and similar technologies to collect and receive personal data about for ad personalisation and measurement. Learn how Google collects and uses personal data: https://policies.google.com/technologies/partner-sites
5. Transferring personal data outside European Economic Area
Some of our partners and the IT-systems and data centres we use in our business are located outside European Economic Area. Therefore your personal data is transferred outside the EEA area. In these situations, we aim to take necessary measures to ensure the high level of protection of your personal data required by European data protection law after the transfer.
Such measures we have implemented include e.g. the use of so called standard contractual clauses approved and provided by the EU commission as part of our agreements we enter into with the recipients of personal data in third countries.
Read more about EU Commission’s standard contractual clauses here: https://ec.europa.eu/info/law/law-topic/data-protection/international-dimension-data-protection/standard-contractual-clauses-scc_en
6. How long do we keep your data?
We will keep your personal data only for as long as is necessary to conduct each purpose of processing. Typically we process your personal data as long as you have a customer relationship with us.
As a company, we are subject to various laws that may oblige us to process or retain your personal data even after the termination of your customer relationship. In such cases, the retention period for your personal data is specified in the applicable law. For example, the accounting legislation requires us to retain documents and other accounting records for at least six years from the end of the year in which the financial year ended.
If you have given us your consent to receive marketing, we will retain, for as long as we have a valid consent, certain information such as your name, email address and phone number which are transferred to our marketing register even if your customer relationship with us has ended.
If you have rejected marketing, we will retain information about your rejection and your necessary contact information to ensure compliance with your decision.
Please note that instead of deleting your personal data, we may anonymise it in a way that such data can no longer be linked to you.
7. Your rights as a customer
Data protection law guarantees you certain rights regarding the processing of your personal data. Please note, that these rights guaranteed by law are not always completely unlimited. For example, we may not, at your request, delete all your personal data, as the retention of your data might be required by a legal obligation that we must comply with. For example, the accounting legislation requires us to retain certain documents that contain personal data.
To exercise your rights, please contact us at the post@freska.no. To prevent your personal data from falling into the wrong hands, please be prepared to prove your identity in connection with your requests.
Right to access. You have the right to obtain from us a confirmation as to whether or not your personal data are being processed, and, where that is the case, access to the personal data and a copy of the personal data undergoing processing.
Right to rectification. Naturally we aim to ensure that the personal data undergoing processing are accurate and up-to-date. If you find that personal data concerning you is incorrect, incomplete or out-of-date, you can always ask us to correct such information.
Right to be forgotten. In certain circumstances, you may ask us to delete personal information about you. Please note however, that we may not be able to delete information for which there is a legitimate need to retain it, such as a specific legal obligation.
Right to object to the processing of personal data. You have the right to object to the processing of your personal data in certain situations. However, this does not mean a general right to object to all processing, but applies, for example, in situations where the processing of your personal data is based on legitimate interests. In addition, you always have the right to object to the processing of your personal data for direct marketing purposes.
Right to restrict the processing of your personal data. In certain situations, you may ask us to restrict the processing of your personal information. You have such a right, for example, when you dispute the accuracy of your personal information. At your request, we will then restrict the processing to the personal data you wish to restrict.
Right to data portability. You can request us to transfer your personal data to another controller. Please note however, that such a right only applies to information that is processed by automated means which you have provided to us and the processing is based on your consent or contract.
Right to lodge a complaint with a supervisory authority. If you suspect that we have processed your personal data unlawfully, you always have a right to lodge a complaint to the data protection supervisory authority. Contact information and instructions for making a complaint can be found on the website https://www.datatilsynet.no/om-datatilsynet/kontakt-oss/klage-til-datatilsynet
8. Updates to this Privacy Notice
As we are constantly developing our services, we may change or update the contents of this privacy notice. Changes can also be based on changes in applicable legislation.