Privacy statement

Ødegaard's Reiseroglivet

 

In the privacy policy, we provide you with information about what personal data is processed, why your data is processed and what rights you have in connection with the processing of your personal data.

Use of our services means that personal data is transferred to countries outside the EEA. A transfer of personal data to countries outside the EEA means that the information that is transferred is not guaranteed the same level of protection as within the EEA. You can read more about this in the section "Personal data is transferred to the USA".

 

Data controller 

The controller is the person who determines the purpose of the processing of personal data, and which means are to be used in the processing. It is ØDEGAARDS REISEROGLIVET (org.nr.: 933133133) that is responsible for processing the personal data that is processed in connection with the services and products we offer.

ØDEGAARDS REISEROGLIVET is represented by founder Elise Kristine, Ødegaard.

 

The contact details for the data controller are:

                                         

ØDEGAARDS REISEROGLIVE

DØLERUJORDET 20

3525 HALLINGBY

 

E-mail: [email protected]

 

Special categories of personal data

Special categories of personal data are types of personal data that are considered to be particularly sensitive and worthy of protection. The special categories of personal data are information about racial or ethnic origin, political opinion, religion, philosophical belief or trade union, as well as the processing of genetic information and biometric information for the purpose of uniquely identifying an individual person, health information or information about an individual person's sexual relationship or sexual orientation.

According to the Personal Data Protection Regulation, the starting point for the processing of this type of personal data is prohibited. It is still permissible to process this information if you have an exception to the prohibition. Examples of exceptions may be consent from the person who has their personal data processed or that it is necessary to process the data to protect vital interests.

ØDEGAARDS REISEROGLIVET does not initially process special categories of personal data. We still have no control over which information you choose to provide when you are in contact with us. If we receive special categories of personal data from you in a way that causes the data to be stored, for example in a free text field, in a survey or by e-mail, the data will be deleted.

About whom we process personal data 

We process personal data about, among other things:

  • Visitors to our website
  • Customers and potential customers
  • Contact persons at our suppliers and collaboration partners

When personal data is registered 

In order for you to be able to use our services, we have to register your personal data. When and how ØDEGAARDS REISEROGLIVET registers your personal data depends on your contact with us. We register your personal data in the following cases, among others:

  • When you participate in a webinar
  • When you visit the website
  • When you register and participate in a course
  • When you contact us by e-mail, phone or social media
  • When you sign up to an email list, for example a newsletter, and when you open the email

 

Purpose and legal basis

ØDEGAARDS REISEROGLIVET processes information about you for different purposes and with different legal bases. Your personal data is processed so that we can offer you our products and services, whether it concerns courses, newsletters or other free content such as e.g. a "freebie" and for us to be able to market our products and services.

 

Course participation

When you register for a course with us, personal data, contact information, payment information, course progression and course statistics are processed.  If you choose to participate in quiz sessions, personal data in the form of sound, image, e-mail address and chat messages is processed. Recordings of quiz sessions are published in the course platform and are available to course participants.

The purpose of the processing is to enable us to deliver agreed products and services to you. The processing of personal data is necessary to fulfill an agreement with you. The basis for processing follows from the Personal Data Protection Regulation article 6 number 1 letter b.

Personal data relating to course participation is processed for the period you have an existing customer relationship with us, and is deleted three years after the customer relationship ends.

Payment and invoice information is also processed to fulfill legal obligations incumbent on ØDEGAARDS REISEROGLIVET according to the Accounting Act. The basis for processing is the regulation's article 6 number 1 letter c. Information that is necessary to store in order to fulfill our obligations under the Bookkeeping Act, is deleted after five years at the latest.

The course provider and the provider of our payment services are American companies. In order to be able to deliver our course services, we therefore have to transfer personal data to the USA. The transfer takes place on the basis of Art. 49, which allows the transfer of personal data to countries outside the EEA area when it is necessary to be able to fulfill the agreement between us and you.

 

Webinar participation

When you register for our webinars, your email address and username are registered in the webinar solution. If you choose to use the chat in the webinar, your personal data will also be processed in the form of what you choose to write in the chat.

Personal data is processed for the purpose of informing about and marketing our products and services through digital events. The basis for processing is our legitimate interest in marketing our services and products. The basis for processing follows from the personal data protection regulation article 6 no. 1 letter f.

In connection with our webinars, we also process statistics and questions in the chat are processed with the aim of adjusting content in future webinars. The basis for processing is our legitimate interest in improving our webinars. The basis for processing follows from the personal data protection regulation article 6 no. 1 letter f.

Our video conferencing service provider is an American company. In order to be able to deliver our course services, we therefore have to transfer personal data to the USA. The transfer takes place on the basis of Art. 49, which allows the transfer of personal data to countries outside the EEA area when you have consented to the transfer.

 

Newsletter and marketing

If you choose to sign up for our newsletter, you will receive information about our products, activities such as webinars, and marketing. When you sign up for the newsletter, your email address is registered.

To make the newsletter relevant to you, the content can be adapted based on your purchases, participation in webinars and downloads of free content. We also receive feedback on whether our newsletters are opened, and whether links in the newsletter are clicked. This feedback enables us to adapt the content of, and recipients of, future newsletters.

The purpose of sending newsletters is to provide information about and to market our products and services to customers and potential customers. The basis for processing is our legitimate interest in marketing directly to people who show an interest in our company and our products. The basis for processing follows from the Personal Data Protection Ordinance, art. 6 no. 1 letter f.

 

Customer communication

We process your personal data when you are in contact with us by e-mail, telephone or in social media. When you are in contact with us, personal details and contact details are normally processed, in addition to the personal details you give us in connection with the dialogue we have.

The purpose of the processing is for us to be able to process inquiries related to our services and products, or your customer relationship with us. The basis for processing is our legitimate interest in being able to communicate in a simple and efficient way with our customers and potential customers in our contact areas. 

Customer dialogue is deleted as a general rule 3 years after the customer relationship has ended. This is because the dialogue is important for any legal claims that may arise as a result of the contractual relationship with us. 

Dialogue with potential customers is deleted 6 months after the last dialogue. If a purchase is made, dialogue relating to our products and services is considered to be customer dialogue. This could, for example, be questions about course content or expected results.

Who is your personal data shared with?

WE do not pass on your personal data to others, unless we have a legal basis for the disclosure. Examples of such legal grounds are our agreement with you or that we are legally obliged to hand over the information.

We use data processors who collect, store or otherwise process personal data on our behalf. We do this so that we can offer our services, safeguard our legitimate interests, fulfill statutory requirements and fulfill the agreement with you. We always enter into agreements with our data processors that ensure that the personal data is well looked after.

These are our data processors: Course platform providers, e-mail client, accounting, payment solution, word processing, news provider tubes and word processing. Some of them is:

Zoom

Zoom is our video conferencing service provider. We therefore use Zoom in connection with webinars, and in strategy lessons and question time in our courses.

You will be informed if a webinar or question time is recorded. By attending the meeting, you consent to the recording being made. You can be an active participant in a webinar or question class in two ways; you can either write questions directly to us in the chat solution, or you can ask us questions directly by taking the floor in the meeting.

Questions in the chat are not included in the recording, but if you choose to speak in question time, the sound (and video if you have turned on your webcam) will be included in the recording. The recording will be made available to those registered for the webinar/course participants afterwards. You can withdraw your consent to participate in the recording. In that case, we will edit out the relevant part of the recording and publish the recording again.

Kajabi

Kajabi is our supplier of course platform, e-mails/newsletters and website (landing pages). When you take part in a course with us, it therefore happens in the course portal of Kajabi, it is also through Kajabi that we send out newsletters to our email lists. If you buy our products and services, Kajabi also facilitates the purchase. The payment solution itself is provided by the supplier Stripe. You can read more about Stripe below.

If you buy courses from us, you can choose not to use Kajabi. You will then instead receive e-mails from us with course material and course videos.

 

Stripe

When you buy courses from us through our platform Kajabi, we use the company Stripe as supplier of the payment solution. Stripe has to process your personal data on our behalf in order to use its payment solution. Stripe then processes a transaction information. That is, information related to payment method, product, price etc.

You can read more about how Stripe processes your personal data here.

 

Tripletex

Tripletex is our accountant and audit firm. In connection with the execution of the accounts, the accountant processes personal data in the form of accounting documents. Information that is then processed is personal information and transaction information.

Personal data is transferred to the United States

In the privacy context, "transfer" has two meanings. A transfer can, firstly, be that personal data is moved from one server to another. Secondly, it is also called a transfer where someone has remote access to personal data.

The starting point is that the transfer of personal data can take place to countries outside the EEA (so-called "third countries") if the recipient of the personal data has provided the necessary guarantees for the processing of personal data, and it is ensured that those who have their personal data transferred have enforceable rights and effective legal remedies. Previously, a solution called "Privacy Shield" was in place to ensure privacy when transferring personal data to the USA. However, this solution was found to be invalid in the summer of 2020. 

ØDEGAARDS REISEROGLIVET currently uses suppliers where both of these forms of transfer of personal data are necessary, in order for us to be able to deliver our services to you. Our suppliers are located in the USA, where the European Data Protection Regulation does not apply. However, we have entered into data processing agreements with all our suppliers, and the transfer of personal data to the USA takes place in line with standard contract clauses adopted by the European Commission. These are measures that ensure good privacy protection for the processing of personal data our suppliers do on our behalf.

However, some American companies, including our data processors, are subject to legislation that allows them to receive inquiries from American public authorities with demands to hand over personal data relating to certain natural persons. Such extradition requests are made in accordance with US intelligence law. The collection takes place in such a way that information is captured about more people than just the physical person who is the target of the collection of personal data. We cannot prevent such disclosures through the use of data processor agreements and standard contract clauses.

Although US public authorities may access personal data for intelligence purposes under US law, this does not mean that your information will be disclosed to US authorities, or that it will be actively used if it were to be disclosed. Neither we nor our suppliers can guarantee that such a release will not take place, nor will we receive information if a release takes place. Any disclosure of personal data to US public authorities means that we no longer have control over the personal data. We cannot therefore decide what the information is to be used for or when it is to be deleted, nor do you have the opportunity to exercise your rights under the Personal Data Protection Regulation vis-à-vis the US authorities.

 

Your rights

When we process your personal data, you have certain rights that you can make use of. If you wish to make use of one of your rights, you are entitled to a response as quickly as possible and within one month at the latest. In some cases, the response deadline can be extended by two months. If it is necessary to extend the response deadline, we will inform you of this within one month of receiving your inquiry.

If you wish to exercise your rights, you can send us an inquiry by e-mail to: [email protected]  You can also send an inquiry by post to:

 

ØDEGAARDS REISEROGLIVET

DØLERUJORDET 20

3525 HALLINGBY

Access to information

You can request access to the information that the law firm Rastum processes about you. If you would like access to your information, please use the access request form. The form can be sent to [email protected]  Read more about your right to access here

Correction of personal data

If you discover that ØDEGAARDS REISEROGLIVET is processing incorrect information about you, for example that you are registered with the wrong address, you can demand that the information be corrected or supplemented with additional information. Read more about your right to correction. Read more about your right to correction here

Deletion of personal data

In some cases, you can request that we delete your personal data, for example if you believe it is no longer necessary to process the data for the purpose for which it was collected. Even if you ask to have your personal data deleted, it may still be necessary for us to process the data. This applies, for example, if we are legally required to process the information or the purpose of the processing has not been achieved. Read more about your right to deletion here

Limitation of processing of personal data

In some cases, you can request that the processing of your personal data be restricted. When processing is restricted, it means that the information can be stored and not used for other purposes without your consent, unless there is an exception. Read more about your right to demand restriction. Read more about your right to demand restriction

Protest against the processing of personal data

If ØDEGAARDS REISEROGLIVET processes your personal data on the basis that the processing is necessary to carry out a task in the public interest, or to achieve purposes linked to a legitimate interest, you have the right to object to your personal data being processed. You can read more about your right to object to the processing here.

 

You can complain about our processing of your personal data

If you believe that your personal data has been processed in breach of the Personal Data Act, we hope that you will let us know.  Then we can investigate in more detail what has happened, and try to resolve the matter. You can also send a complaint to the Norwegian Data Protection Authority. Here you can read about how to complain to the Norwegian Data Protection Authority.

 

 

Contact Us

If you have any questions, concerns or complaints about this [[ Insert Policy Name Here ]], please contact us: