Zaptec ASA
1. INTRODUCTION
This privacy policy (the "Privacy Policy") has been prepared by Zaptec ASA ("Zaptec", "we", or "us") to ensure that you receive the information we are required to provide to you- and which is necessary for you to exercise your rights under the General Data Protection Regulation (the "GDPR") and Norwegian data protection legislation (together "data protection legislation").
This Privacy Policy describes how we process personal data about you, the purpose of our processing activities, and the legal basis for our processing activities. This Privacy Policy also describes your rights in connection with our processing of your personal data under applicable data protection legislation.
2. PERSONAL DATA
Personal data means any information relating to an identified or identifiable natural person (a "data subject"). Your name, phone number, address and e-mail address are examples of information which is generally regarded as personal data.
3. ZAPTEC'S RESPONSIBILITY AS A CONTROLLER
Our processing of your personal data is described in Section 4 below. We will act as a controller when we process this personal data. The personal data that we collect is used solely for the purposes described in this Privacy Policy. Zaptec shall ensure that any personal data processed is not subsequently used for purposes that are not in accordance with the original purpose of the collection of such personal data, unless the customer consents to such use.
4. OUR PROCESSING OF PERSONAL DATA
Processing activities and the purpose of the processing activities
The following list includes information about the personal data which we process, and the purposes which the personal data is processed for:
We will store personal data such as name, address and/or telephone number, gender, date of birth, interests, etc. only if you explicitly consent to participate in a survey, competition, promotion or similar on our website and depending on what is requested in the promotion or user survey in question.
We may, depending on the circumstances, also process other categories of personal data, and/or the above listed personal data for other purposes. This may for example be the case if you contact us with questions or comments. You may at any time request confirmation and/or information regarding the personal data which we process about you, by contacting us as described below.
The sources we obtain personal data from
We collect the personal data described in Section 4.1 above directly from you as a customer, including personal data collected through your use of our services as detailed in Section 4.1 such as when you register for a Zaptec account or visit or our website.
5. DO WE TRANSFER OR DISCLOSE DATA TO THIRD PARTIES?
In certain cases, we may share your personal data with (i) other companies within the Zaptec company group where this is necessary for Zaptec to fulfill our contractual to you and (ii) third party service providers. In relation to the latter, we use external service providers to assist with IT services and other administrative services. These service providers act as processors on our behalf. We have entered into data processing agreements with our processors contain obligations for the data processor to implement technical and organizational measures to ensure an appropriate level of security, confidentiality and integrity for the personal data, as well as to only process the relevant personal data in accordance with the data protection legislation and our instructions.
We may disclose your contact details and other relevant data we have recorded about you to a supplier if you order external services.
If you have consented to electronic marketing, we also use the following types of external service providers:
Your contact details and other relevant data we have recorded about you may be disclosed to these service providers. We use this type of service provider to provide you with relevant ads, offers, content and recommendations and to perform analytics to improve and further develop our services. We also measure how well we succeed in this using, among other things, questionnaires.
We will not disclose your personal data to any other third parties than the third parties described above, unless we are required to do so under applicable law, or if it is necessary to establish, exercise or defend legal claims.
6. DATA RETENTION
We will delete or anonymize personal data when they are no longer necessary in relation to the purposes for which they were collected or otherwise processed.
Personal data from Zaptec Cloud services is stored until the account is deleted. Your charging history is permanently linked to your user account. If you change your personal data or ask for your profile to be deleted, the changed data may remain accessible through security back-ups of the database for the period for which we retain such back-ups, up to five weeks.
Device activity records are permanently stored, but these are not associated with any personal data once the relevant account is deleted.
Your e-mail address, IP address and other non-personal data are stored in log files on the web servers. We use these logs to track errors, potential security threats and misuse. Logs may be stored for up to five weeks before they are permanently deleted.
Your personal data linked to purchases will generally be deleted when it is no longer necessary to store such data in order to respond to your inquiries, if the product warranty period has lapsed or unless we require the data for a longer period of time in order to fulfil other legitimate purposes such as contractual obligations or statutory obligations, for example in accordance with accounting legislation.
We will delete personal data that we process based on your consent if you withdraw your consent.
In certain cases, it may be necessary to anonymise the personal data instead of deleting it. Anonymisation refers to removing all identifying or potentially identifying characteristics from the datasets that are kept.
7. YOUR DATA PROTECTION RIGHTS
Under the data protection legislation, you have certain rights we need to make you aware of. You have the following rights in connection with our processing of your personal data:
Certain limitations exist in the rights provided by the data protection legislation and the rights available to you will depend on the particular circumstances of the processing. You can find more information on this topic on Norwegian Data Protection Authority's website, which is linked below.
Please contact us as described below if you wish to invoke your rights. Please also note that we may request additional information from you if such information is necessary to confirm your identity.
8. SECURITY
As a controller, Zaptec is responsible for the security and confidentiality of the personal data we process. We are furthermore responsible for implementing appropriate technical and organizational measures to ensure an appropriate level of security of processing.
We have implemented measures, policies and routines to ensure the security of our processing.
9. LODGING COMPLAINTS – THE NORWEGIAN DATA PROTECTION AUTHORITY AND OTHER SUPERVISORY AUTHORITIES
You may contact us at any time if you have any questions or complaints regarding our processing of your personal data. You may also file a complaint to the Norwegian Data Protection Authority, or a data protection authority in the EU/EEA Member State of your habitual residence, place of work, or the place of the alleged data protection infringement. The Norwegian Data Protection Authority is responsible for supervising Norwegian organizations' processing of personal data.
You can obtain the contact details of the Norwegian Data Protection Authority on the following website: www.datatilsynet.no. You will also find more information on your rights and the data protection legislation on this website.
10. CHANGES
We may, from time to time, update this Privacy Policy for example due to changes in our processing activities, applicable data protection legislation or other legislation which may affect our processing of personal data. An updated version of this Privacy Policy will be published on our website if any revisions to the Privacy Policy is made.
11. CONTACT INFORMATION
If you have any questions about this Privacy Policy, including how we process personal data, or would like to submit a request to exercise your rights, please contact us at:
E-mail address: gdpr@zaptec.com
Postal address: Zaptec Charger AS c/o Fomo Vassbotnen, Vassbotnen 1, 4313 Sandnes