1 INTRODUCTION
This Privacy Statement («Privacy Statement») has been prepared by Oslo Bay District AS («Oslo Bay District» «we» or «us») and describes how we process your personal data through oslobukta.no.
The Privacy Statement provides you with information about what personal data is, how we process your personal data, as well as the purpose of and basis for our processing of your personal data. In addition, we describe what rights you have under applicable data protection legislation and how you can proceed if you wish to exercise these rights.
2 GENERAL INFORMATION ABOUT PERSONAL DATA
Personal data is information or an assessment that can be linked to an individual or a small group of people. Name, telephone number, address and e-mail address are examples of what can be considered personal data.
3 MORE ABOUT OSLO BAY DISTRICT AND CARUCEL EIENDOM
3.1 Oslo Bay District
Oslo Bay District is the data controller for the processing of your personal data that takes place through and on oslobukta.no. As the data controller, Oslo Bay District is responsible for complying with the requirements of data protection legislation that apply to our processing of your personal data.
3.2 Carucel Eiendom
Carucel Eiendom AS («Carucel Eiendom») is the property manager for Oslo Bay District and manages, among other things, oslobukta.no on behalf of Oslo Bay District. This means that personal data may be disclosed from Oslo Bay District to Carucel Eiendom, to the extent that the disclosure is necessary for Carucel Eiendom to provide services for Oslo Bay District and manage oslobukta.no. Oslo Bay District and Carucel Eiendom have entered into a data processing agreement that regulates Carucel Eiendom’s processing of personal data on behalf of Oslo Bay District.
You can read more about Carucel Eiendom on the following website: https://www.carucel.no/om-oss
4 OUR PROCESSING OF PERSONAL DATA ON OSLOBUKTA.NO
Below is information about which personal data Oslo Bay District processes on oslobukta.no, as well as a description of the purposes of the individual processing activities:
Newsletter. If you have signed up to receive newsletters from us, we will collect and process your name, e-mail address, telephone number, and whether you identify as male, female or something else. We process this personal data to send you news about activities and offers from Oslobukta. If you no longer wish to receive newsletters from Oslo Bay District, you can follow the unsubscribe link/information in each e-mail, or contact us at the contact information at the bottom of the Privacy Statement. The newsletter is sent out a maximum of 3 times per month.
Gift card. If you purchase a gift card, we and Elektroniske Tjenester AS (iGive.no), which manages the sale of gift cards, will process your name, address, telephone number and use of the gift card. If you have written a personal greeting on the gift card, we and Elektroniske Tjenester AS will also process the information contained in this message. We and Elektroniske Tjenester AS will process your above-mentioned personal data as independent data controllers, and will therefore have an independent responsibility to comply with data protection legislation. Note that Elektroniske Tjenester AS also provides an app «iGive Gift Card» where you can manage your gift cards. Elektroniske Tjenester AS also uses cookies on its websites. Elektroniske Tjenester AS will in principle alone be responsible for processing your personal data through its own cookies and on the app «iGive Gift Card». If Elektroniske Tjenester AS shares this personal data with us, we and Elektroniske Tjenester AS will both be data controllers.
Cookies. We use cookies and similar technology (also called «cookies») on our websites. Cookies are small temporary files that are stored on your device (for example, your PC or mobile phone) when you visit a website. You can read more about our use of cookies in point 5 below.
Depending on the circumstances, it may be necessary for Oslo Bay District to also process other categories of personal data and/or the above-mentioned personal data for other purposes. For example, this will be the case if you ask us questions by e-mail, or contact us in other ways. You can contact us at any time to find out which of your personal data we process (see contact information below in point 13).
5 USE OF COOKIES ON OSLOBUKTA.NO
5.1 General information about our use of cookies
As mentioned above, we use cookies on oslobukta.no.
We collect data and personal data using cookies for analysis purposes, including to measure the use of our website and services. We use this information to make it easier for you to use our website, as well as to develop and improve our website.
We also use cookies for marketing purposes. We do this by registering which parts of the website you have visited, how long you have spent on our website, and by using cookies provided by third parties (such as Google Analytics). Third-party cookies can collect information about which websites you came from, as well as which other websites you visit.
We will only collect aggregated user information through cookies.
5.2 Which cookies do we use?
We use different types of cookies on oslobukta.no. Below is a description of these:
First-party cookies. First-party cookies are cookies that are created by us.
Third-party cookies. We use Google Analytics to perform web analytics and to use web analytics tools. We also use third-party cookies for marketing purposes from Facebook, Hotjar, Google Tag Manager and Snapchat
5.3 How to manage the use of cookies
We will only use cookies if you have consented to this. You consent to the use of cookies through the settings in your browser. You can find more information about how to manage the use of cookies in your browser on the following page: https://nettvett.no/slik-administrer-du-informasjonskapsler/.
6 WHAT IS THE BASIS FOR OUR PROCESSING OF YOUR PERSONAL DATA?
We use the following basis for our processing of your personal data:
Newsletter. We will only process your personal data in connection with our sending of newsletters if you have consented to this.
Gift card. We process personal data in connection with our gift cards, because it is necessary to deliver the gift cards to you, and thus to fulfill the agreement with you. Unfortunately, we will not be able to offer you gift cards if you do not want us to process this personal data about you. If the gift card contains personal data about a third person (for example, in the message you write in connection with the gift card), we will process this personal data for purposes related to Oslo Bay District’s legitimate interest. This interest is the delivery of gift cards.
Cookies. We will only use cookies if you have consented to this through the settings in your browser.
7 DISCLOSURE OF PERSONAL DATA AND USE OF DATA PROCESSORS
We use various service providers that provide IT services and other administrative services to us. We have entered into data processing agreements with these service providers that require the companies in question to ensure that personal data that these service providers may process on our behalf is stored in a secure manner, that it does not fall into the wrong hands and that it is not used for other purposes.
As mentioned above in point 3.2, Carucel Eiendom is the property manager for Oslo Bay District. This means that personal data may be disclosed from Oslo Bay District to Carucel, to the extent that the disclosure is necessary for Carucel to provide services to Oslo Bay District and administer the website oslobukta.no
You can reserve a table at the restaurants in Oslobukta through the page «Book a table» on oslobukta.no. By clicking on the links on this page, you will reserve a table directly with the restaurant in question. This means that any personal data you provide to the restaurant will be processed by the restaurant as the data controller.
As mentioned above in point 5, we also use third-party cookies on oslobukta.no. The use of such cookies means that the relevant third-party providers of such cookies (for example Google Analytics) will have access to the personal data collected through the cookies.
If you purchase gift cards from us, both we and Elektroniske Tjenester AS (iGive.no) (which manages the sale of gift cards) will process your personal data. Which personal data is processed in connection with these gift cards is described in more detail in point 4 above. You can read more about Elektroniske Tjenester AS’ processing of your personal data on the following page: https://igive.no/salgs-og-leveringsbetingelser/
We will not disclose your personal data to other parties than those mentioned above unless we are obliged to disclose this information.
8 HOW LONG WILL WE STORE YOUR PERSONAL DATA?
We will delete or anonymize personal data when it is no longer necessary for the purpose for which it was collected.
9 WHAT RIGHTS DO YOU HAVE?
You have the following rights in connection with our processing of your personal data:
Access: You can contact us if you want to know more about which personal data we process about you. Note, however, that your right to access does not apply to information that is subject to a duty of confidentiality by law or pursuant to law.
Correction: If the personal data we have about you is incorrect, you can demand that we correct it.
Deletion: You can ask us to delete your personal data, which we will respect and comply with unless we are, for example, obliged to store your personal data, or if the relevant personal data is necessary to establish, assert or defend a legal claim.
Restriction of processing: In accordance with data protection legislation, you can also demand that our processing of your personal data be restricted, if the conditions for this under data protection legislation are met. If the processing is restricted, your personal data will only be stored. However, this does not apply if, despite the restriction, you have consented to another form of processing, or such further processing can take place with another basis for processing (for example, to pursue a legal claim).
Objection to the processing: If personal data is processed for marketing purposes, you have the right to object to the processing of your personal data. If your inquiry is based on your particular situation (for example, a particular need for protection of your identity), you can further, in accordance with data protection legislation, object to processing activities that we undertake to safeguard legitimate interests that are not overridden by the data subject’s interests and fundamental rights and freedoms. However, this does not apply if there are compelling and legitimate reasons for the processing that override consideration for your interests, or if the processing is necessary to establish, assert or defend a legal claim.
Data portability: If we process personal data about you based on consent or to implement an agreement, and the personal data is processed automatically, you can ask us to provide the personal data to you or to a third party in a structured, commonly used and machine-readable format.
If you wish to exercise one of your rights, you can contact us. Contact information can be found at the bottom of the page. Please note that we may need to ask you for additional information about who you are, if this is necessary to confirm your identity.
10 WHAT DO WE DO TO ENSURE THAT YOUR PERSONAL DATA IS SECURED?
As the data controller for your personal data, we have the overall responsibility for ensuring that your personal data is processed and stored in a secure manner. This means that we must take technical and organizational measures that are suitable to ensure satisfactory information security.
For security reasons, there is a limit to how much we can elaborate on which technical security measures we have implemented and established. However, we have taken organizational measures, as well as appropriate security measures to ensure the integrity, availability and confidentiality of your personal data.
11 THE DATA PROTECTION AUTHORITY AND APPLICABLE DATA PROTECTION LEGISLATION
To supervise companies’ processing of personal data, a Data Protection Authority has been established. If you are dissatisfied with our processing of your personal data, you can send a complaint to the Data Protection Authority. You can also complain to data protection authorities in EU/EEA countries where you have your habitual residence, place of work or where the alleged violation has taken place. You can find the contact information for the Data Protection Authority on their website http://www.datatilsynet.no. On the Data Protection Authority’s website you will also find further information about our obligations and your rights under applicable data protection law. Contact information for other data protection authorities in the EU/EEA can be found on the following website: https://edpb.europa.eu/about-edpb/board/members_en
12 CHANGES
We may from time to time revise this privacy statement as a result of our processing of personal data changing or as a result of new data protection legislation. When the privacy statement is changed, an updated version will be published on our website. In the event of significant changes, we will send the privacy statement directly to your e-mail address, if we have registered this.
However, we recommend that you review the privacy statement from time to time when you visit our website.
13 CONTACT INFORMATION
If you would like more information about which personal data we process about you or would like to exercise one of your rights, you can send an inquiry to:
Carucel Eiendom
Fridtjof Nansens Plass 4
marked@carucel.no
