Privacy policy
Your privacy is important to TANBERG AS. We are committed to ensuring that you can be confident that we handle your personal data securely, in accordance with the applicable data protection legislation at all times.
In this privacy policy we will explain which personal data we collect and process, for which purposes we process your data and provide information about your rights.
1. What is personal data?
Personal data is any information that can be directly or indirectly linked to a natural person, such as name, postal address, e-mail address, IP address and mobile number.
2. Who is responsible?
TANBERG AS is the responsible data controller for the processing of personal data, for the purposes set out in this privacy policy. We must process your personal data in accordance with our obligations under current privacy legislation, including the EU's General Data Protection Regulation ("GDPR").
A company that processes data on our behalf is referred to as a data processor. Whenever we use a data processor, we always ensure that we have data processing agreements in place with them. This agreement governs how they may process personal data.
3. What personal data do we process?
The categories of personal data which we collect, and process are as follows:
- Basic contact information, such as name, address and email.
- Demographic information, such as date of birth and gender.
- Directly identifying information, such as ID-number and electronic identification and trust services.
- Customer information, such as housing/property information and contract documents.
- Information about your customer relationship, such as service and order information, payment information and inquiries to customer service.
- Device and software information, such as the computer and operating system used, memory and processor performance, software version, environmental conditions, and any system errors.
- Information when you visit our websites (including date and time, what kind of PC/mobile phone you use, operating system and browser, IP addresses, screen size, etc.)
- Information related to job applications and employment (including CV, application, certificates, and information from references).
- Any other information collected on the basis of your consent. In that case, you will receive specific information about what information we collect and what it is used for when we ask for your consent.
4. Who do we process personal data about?
This privacy policy covers the processing of personal data concerning the following groups of people:
- Those that visit our site
- Customers
- Applicants for vacant positions
- Those that contact our customer service
- Other individuals that we interact with
5. How do we collect your personal data?
We can collect your personal data in various ways:
- We receive personal data directly from you when you order our services or otherwise contact us directly. This information is necessary for us to be able to deliver the service you have ordered or to follow up on your inquiries.
- We receive personal data indirectly from you when you use our services, for example our websites through cookies and other similar technologies. The collection is based on your consent pursuant to GDPR Article 6 (1) (a) and in accordance with the ePrivacy Directive (2002/58/EC), as implemented in the relevant EU/EEA Member State. This information is important in order to be able to improve and further develop the services we offer you. Certain technical information (e.g., IP address or other HTTP data) may be processed without consent when this is strictly necessary for the website to function. You can read more about how we use cookies and similar technologies in section 7 and our cookie policy.
- We receive personal information from other sources when you interact with our partners, our distribution channels, or if your details are available in public registers. These details are important for us to be able to improve and tailor the services we offer.
We also receive personal information directly and indirectly from you when you visit our Facebook page, for example, when you follow us on Facebook, contact us through Facebook's chat solution, or when you share, like, or comment on our Facebook posts. For such personal information, we are joint data controllers with Facebook. You can read more about how Facebook processes your personal data in Facebook's privacy policy.
It is voluntary to share your personal data with us. However, certain information may be necessary to be able to carry out any agreement that you have entered into with us, including, among other things, information that is used in connection with invoicing.
6. What is our legal basis for processing personal data?
According to the current privacy legislation, we must have a legal basis for our processing of personal data. Our processing is based on one or more of the following bases:
- You have given your consent to the processing of your personal data for one or more specific purposes (GDPR Article 6(1)(a)). If our processing of personal data is based on your consent, you have the right to withdraw your consent at any time.
- The processing is necessary for the performance of a contract with you (GDPR Article 6 (1) b).
- The processing is necessary for compliance with a legal obligation to which we are subject, including, for example, storing information in accordance with accounting legislation (GDPR Article 6 (1) c).
- The processing is necessary for the purposes of the legitimate interests pursued by us, except where our interests are overridden by the interests or fundamental rights and freedoms of the data subject which require protection of personal data (GDPR Article 6 (1) f).
7. For which purposes do we process your personal data?
We process personal data for various purposes.
Below, you can read more about what we use personal data for (the purpose), which personal data we process, and why we are allowed to do this (legal basis for processing).
| Purpose | Processing activities | Categories of personal data | Legal basis |
|---|---|---|---|
| Deliver our services | Your information is processed in order to follow up prospects you showed interest in and handling inbound requests. | Customer details, such as telephone number, email and address. | GDPR Article 6 (1) (f) – our legitimate interest following up potential customers. |
| Your information is processed in connection with the purchase of products, as well as when accessing our services. | Name and contact details, such as telephone number, email, and address. Demographic information, such as name, age, identification number and electronic identification and trust services. Customer and order information, such as information about the property, contract information and payment details. | GDPR Article 6 (1) b) – necessary for the performance of a contract. | |
| Verification of identity | Name, age, national ID and electronic identification and trust services. | GDPR Article (6) b) – necessary for the performance of a contract. | |
| Customer support | We use your personal data when you contact us directly, and when we follow up on your inquiries. | Name and contact details, order information. | GDPR Article 6 (1) f) – our legitimate interest in assisting our customers. |
| Improve and/or customize the products and services we offer | We also use the information collected for broader analyses to understand customer needs and improve our products and services. Before conducting such analysis, identifying information is removed, and the data is compiled and used at an aggregated level. | Name and contact details. Demographic information, such as date of birth. Information collected through cookies when you visit our websites (including date and time, what kind of PC/mobile phone you use, operating system and browser, IP addresses, screen size, behavioural patterns, etc.) | GDPR Article 6 (1) f) – our legitimate interest in improving and tailoring our services. |
| Statistics and reports on trends (which types of properties which are most popular) | We collect your information from cookies in order to analyse and make reports of which properties that are most popular based on demographics. | Information collected through cookies when you visit our websites (including date and time, what kind of PC/mobile phone you use, operating system and browser, IP addresses, screen size, behavioural patterns, etc.) | GDPR Article 6 (1) (a) – consent. |
| We pseudonymise and anonymise your information in order to analyse and make reports of which properties that are most popular based on demographics. | Directly identifiable information, such as identification number, electronic identification and trust services, legitimation. Information about your property. Information collected through cookies when you visit our websites (including date and time, what kind of PC/mobile phone you use, operating system and browser, IP addresses, screen size, behavioral patterns, etc.) | GDPR Article 6 (1) f) – our legitimate interest in improving our services. | |
| Operation and maintenance of services | We process your personal information in order to deliver technical support and troubleshooting. | Contact details, such as telephone number, email and address. | GDPR Article 6 (1) (f) – our legitimate interest is to ensure the efficient functioning of the digital solutions. |
| Marketing | We may process anonymized data and personal data for analytics and statistical purposes to understand how our marketing activities perform and to improve future marketing efforts. Where possible, the analysis is carried out at an aggregated level. | Demographic information, such as date of birth and gender. Service and order information. | GDPR Article 6 (1) f) – our legitimate interest in performing marketing activities. |
| We use data collected from cookies or similar technologies for statistics and reports to support sale and marketing of our services. | Information collected through cookies or similar technologies when you visit our websites (including date and time, what kind of PC/mobile phone you use, operating system and browser, IP addresses, screen size, behavioral patterns, etc.) | GDPR Article 6 (1) (a) – consent. | |
| We can send out newsletters and other marketing related information you have requested. | Basic information such as name and contact details. | GDPR Article 6 (1) (a) – consent. | |
| Information security and prevention of misuse of services | Your information is processed in connection with ensuring good security in all our services. We will also be able to process personal data to detect or prevent various types of fraud and abuse. | User information. Information when you visit our websites (including date and time, what kind of PC/mobile phone you use, operating system and browser, IP addresses, screen size, etc.) Device and software information, such as the computer and operating system used, memory and processor performance, software version, environmental conditions, and any system errors. | GDPR Article 6 (1) f) – our legitimate interest in maintaining the security of our services. |
| Compliance with legal requirements | We process personal data to fulfil our statutory duties, for example in connection with accounting and to provide information to the competent authority when this is required of us in accordance with applicable legislation. | Any categories of personal data strictly necessary to fulfil our obligations. | GDPR Article 6 (1) c) – necessary to fulfil a legal obligation. |
8. How do we keep your personal data safe and secure?
We have established procedures and measures to ensure that unauthorized persons do not gain access to your personal data and that all processing of the data otherwise occurs in accordance with applicable law. The measures include regular security assessments, technical systems, and physical procedures to maintain information security.
9. Who do we disclose personal data to?
We use certain service providers (e.g., integration partners on our platforms) to manage or support specific parts of our business operations and share personal data with them when they perform services on our behalf. In such cases, we enter into so-called data processing agreements that regulate the access to and use of the information.
We will also be able to share personal data with public authorities where there is a statutory disclosure obligation.
We may share personal data with selected partners acting either as independent controllers or as joint controllers together with us. This includes, for example, financial partners, developers/business partners, distribution partners, authorized resellers, and professional advisors. In such cases, we ensure that the roles and responsibilities of each party are clearly defined in accordance with applicable data protection legislation, including entering into joint controller arrangements where required.
10. Do we transfer personal data to other countries?
We may transfer your personal data to countries and/or organizations outside of the EU/EEA area ("third countries"). If such transfers take place, for instance if one of our data processors transfers personal data to subprocessors outside the EU/EEA area, we will ensure before the transfer that it is carried out in accordance with the requirements set out in GDPR Chapter V. If this is the case, then the transfer will be based on an adequacy decision by the European Commission, where such is available, or by entering into an agreement based on the EU's standard contractual clauses ("Standard contractual clauses") with the recipient of the personal data.
11. How long do we store personal data?
We store your personal data for as long as is necessary for the fulfilment of the above-mentioned purposes for the processing of the data. This means, for example, that personal data we process based on your consent will be deleted when the consent is withdrawn. If the basis for processing is our legitimate interest, the information will be deleted when such legitimate interest no longer exists.
When determining the retention period, we place particular emphasis on the duration of our legal requirements or contractual relationship with you, the nature of your relationship with us, the need to process your data, your expectations and the risk of harm.
Normally, personal data is deleted immediately once a recruitment process or a customer relationship has ended. Information stored in accordance with legal obligations is deleted when the obligation ceases. Accounting legislation otherwise requires us to store certain accounting documents for a specified period of time, generally 3.5 years or 5 years.
Anonymized information is not subject to restrictions regarding processing, as it can no longer be directly or indirectly linked to an individual.
12. What are your rights?
The privacy legislation gives you a number of rights, including the right to access, rectify and erase the personal data we have stored about you.
We strive to ensure that the personal data we have stored about you is correct and up to date. If you discover that the information we have stored about you is incorrect, we encourage you to contact us. This also applies if you want the stored data to be deleted.
Regarding the right to erasure, there is an exception for information which is necessary in order to be able to deliver a service that you would like to use, or it is required by law to store the information for a specific period.
You also have the right to data portability. This means that, among other things, you have the opportunity to extract your personal data in a machine-readable format.
Furthermore, you have the right to object to the processing of personal data and the right to object to personal profiling and automated decisions. This means that you can demand that your personal data is not analysed to reveal your behaviour, preferences, abilities or needs. However, this does not apply if the processing is necessary to fulfil an agreement you have entered into with us or if you have previously expressly consented to the processing.
You also have the right to receive a copy of the personal data we have registered about you, as long as an obligation of confidentiality does not prevent this. In order to ensure that personal data is handed over to the right person, we may require that access requests are submitted in written form and that identity is verified.
If you believe that we do not comply with this privacy policy or the applicable legislation, you can send us a complaint. You also have the right to lodge a complaint with your local supervisory authority. (in Norway, Datatilsynet)
13. How do we use cookies?
We use cookies and similar technologies on our websites. You can reject storing of cookies by changing the settings in your browser. However, this may cause issues with accessibility on the website. You can read more about how we use cookies in our cookie policy.
14. How do we notify you if changes are made to this privacy policy?
Our services are in continuous development. We may therefore need to update our privacy policy. If the privacy policy is subject to updating, the updated privacy policy will be made available on our website tuscan-living.com. We encourage you to review this policy regularly to stay informed about how we process your personal data.
15. Children's privacy
We do not intend to collect personal information from children under the age of 18. If such information has nevertheless come into our possession, we will delete this information as soon as the situation is uncovered. Therefore, we encourage guardians or others with knowledge of such circumstances to contact us immediately as indicated below.
16. How to get in touch with us
If you wish to request access, correction, or deletion, etc., or have questions about how we process your personal data, you can contact us by sending an email to post@tanberg.no.
versjon: 1.1.AKExLT48WtiiuSSr