Privacy Policy

Who we are

This privacy statement explains how Ovun AS ("we", "us", "ours" or "ours") collects and uses (processes) personal information in our business. Ovun AS, is responsible for processing of information.

Our contact information is:
Ovun AS
Org.nr :  964 538 794
E-mail address: office@ovun.com

Your Rights

If you want to exercise one of your rights, you can send us an e-mail at office@ovun.com. You are entitled to a reply as soon as possible, and no later than 30 days. Read more about all your rights on the Norwegian Data Protection Authority's pages.

  • Access to and correction of your own information: You can request a copy of all information we process about you, and ask us to correct information that is not correct.
  • Deletion or restriction of processing of personal data: In some situations you may ask us to delete and / or restrict the processing of information about yourself.
  • Protest against a processing of personal data: If we process information about you on the basis of our tasks or on the basis of a balance of interests, you have the right to protest our processing of information about you.
  • Data portability: If we process information about you on the basis of consent or a contract, you can ask us to transfer information about you to you or another data controller.

You can complain to the Norwegian Data Protection Authority about our processing of personal data. We hope that you will report directly to us first, so we can try to resolve the matter for you in a fair and timely manner.

Who we process personal information about

We process personal information about:

  • Customers
  • Potential customers
  • Visitors to the website
  • Downloads from the website
  • Sign ups for the newsletter
  • Contact us forms
  • Email contacts

How we collect personal information

It is voluntary to provide us with personal information. In order for us to be able to deliver products or services, however, we need certain information from you. We do not rent, buy or sell personal information from / to others. We do not use automated decisions or profiling in the processing of your personal data.

We process personal data when someone:

  • enters into an agreement with us for the purchase of products / services
  • sends us email, SMS, social media or other correspondence
  • signs up for the newsletter
  • signs up for digital events (courses, lectures, workshops, etc.) under our auspices, free and paid
  • uses our website (ref. section on cookies)
  • leaves a comment on our website
  • submits an inquiry via communication tool or contact form on our website
  • responds to a survey

Categories of personal data, purpose and basis for processing

We process personal data in accordance with the following processing basis in the Privacy Ordinance, Article 6, No. 1:

a) "consent": when you yourself have given us your consent
b) "agreement": means to be able to fulfill an agreement to which you are a party, or to be able to implement measures at your request, before we enter into an agreement
c) "legal obligation": for us to be able to fulfill a legal obligation
f) "legitimate interest": in order to safeguard a legitimate interest, which we believe outweighs the consideration of the individual's privacy

We process personal information related to:

Inquiries from you (incl. Communication, support, customer service…)

When you contact us via the website (contact form, comment field, communication tool), by e-mail, by telephone (call, text message) or social media, we process personal information. Depending on where and how you send us the message, this may be contact information, IP address and other information you choose to send us.

The purpose is to be able to respond to inquiries from you, for history, and to have documentation in case we receive complaints, grievances or legal claims. The basis for processing is the Privacy Ordinance Article 6 No. 1 f), where the legitimate interests are to be able to respond to inquiries from you, for history, and to have documentation in case we receive complaints, complaints or legal claims.

We review, archive and delete inquiries as needed, but not less frequently than every other year. In order to take care of any history and logic in the comments field, comments are not deleted systematically. Enquiries we are obliged to keep, such as documentation in connection with a complaint / complaint case, are stored until the deadline for complaining / complaint has expired (two or five years). Accounting material is stored for up to five years, in accordance with the rules in the Accounting Act.

Purchase of products and services

When you purchase products and services from us, we process personal information such as contact information, order and payment information and purchase history.

The purpose is to be able to deliver products and services, to you after ordering / purchasing, and to have a history of sold products and services. The basis for processing is the Privacy Ordinance Article 6 No. 1 b) agreement, or c) legal obligation. Accounting material is stored for up to five years, in accordance with the rules in the Accounting Act.

Marketing in existing customer relationships

When you become a customer with us, we process personal information as mentioned above. If you have an existing customer relationship with us, we will be able to send you marketing by e-mail and SMS, in line with the Marketing Act § 15, as well as the Consumer Agency's associated guidance.

The purpose is to be able to provide good customer service. The basis for processing is the Privacy Ordinance, Article 6 (1) (f), where the legitimate interests are to be able to offer you relevant products and services. The basis for processing may also be the Privacy Ordinance, Article 6 (1) (a), where you have given us your consent. You can unsubscribe from marketing by email and SMS at any time. Information on how to unsubscribe is provided in all emails and text messages we send that are related to marketing. The information is kept until the data subject requests that it be deleted.

Newsletter

We send out newsletters in the form of e-mails, with articles, blog posts, discounts, offers, free templates, checklists and the like. The newsletters may sometimes also contain information about our products and services. When you subscribe to newsletters, we process personal information such as contact information and IP address.

The purpose is to be able to inform about relevant news and offers, as well as to provide good customer service to potential and existing customers. The basis for processing is the Privacy Ordinance Article 6 No. 1 a) consent. Subscribing to the newsletters is voluntary, and you can withdraw your consent (unsubscribe) at any time by clicking on "Unsubscribe from the list" at the bottom of one of the emails. The information is kept until the data subject requests that it be deleted.

Events, including digital

When you participate in free events with our collector, we process personal information as contact information. For payment events, we also collect order and payment information. The purpose is to be able to offer customers and potential customers relevant courses, lectures and workshops. The basis for processing is the Privacy Ordinance Article 6 (1) a) consent or b) agreement. The information is stored until you withdraw your consent and possibly request that it be deleted, or, by agreement, up to five years in accordance with the rules in the Accounting Act.

Surveys

We always inform about the purpose of surveys we conduct, and whether they are anonymous or not. We do not share the information with others, or use it for purposes other than what we have provided. In anonymous surveys, no personal information is collected. The basis for processing non-anonymous investigations is Article 6 (1) (a) of the Privacy Ordinance. The information is stored for as long as it is relevant for the purpose, or until you withdraw your consent and possibly request that it be deleted.

Suppliers, partners and data processors

When you enter into an agreement with us either as a supplier, partner or data processor, we process personal information as contact information. Other information is normally related to a business, and thus not personal information. The purpose is to be able to enter into such agreements, and the basis for processing is the Privacy Ordinance Article 6 No. 1 b) agreement. The information is stored for up to five years, in accordance with the rules in the Accounting Act.

Use of the website

When you use our website, we process personal information such as IP address and other technical data, collected via cookies and analysis tools. The purpose is to give you a good user experience, as well as to compile statistics to be able to improve and develop our website and service offering. The basis for treatment is the Privacy Ordinance, Article 6 (1) (f), where the legitimate interests are to provide you with a good user experience, as well as the improvement of our website and service offerings. Read more in the next chapter.

Cookies and analysis tools

A cookie is a text file that is stored in your browser when you visit a website. Below we describe how we use cookies and analysis tools on our website https://ovun.com, in accordance with the Electronic Communications Act, in the so-called «cookie section»: 2-7 b Use of cookies.

When you visit our website for the first time, or after you have deleted cookies, you will be informed that we use cookies through a banner that appears at the bottom of the page, provided by cookieinformation.com, complying with privacy laws.
By clicking on the banner, you accept that we use cookies as described below, so that you can continue to use our website. We use the following cookies on our website:

Google Analytics

_ga: distinguish between unique users (2 years)
_gat: limit the number of requests
_gid: distinguish between unique users (24 hours)

Facebook

fr: for users of the website that is logged in to Facebook

WordPress

comment_author_ {HASH}: for comment field
comment_author_email_ {HASH}: for comment field
comment_author_url_ {HASH}: for comment field

Hubspot

Hubspot uses several cookies to enable us to better serve you. You can read about these here:

https://knowledge.hubspot.com/reports/what-cookies-does-hubspot-set-in-a-visitor-s-browser#cookies-from-third-party-systems

We also use the following analysis tools on the website:

  • Google Analytics
  • Facebook pixels
  • LinkedIn pixels

We use Google Analytics to track the behavior of the website, as described in the chapter above. We use Facebook pixels to track behavior on the website, and to target advertising on Facebook. We use Mailchimp to send out newsletters, which also use cookies for registration forms on the website.

Turn off or delete cookies

You can turn off and / or delete cookies in your browser. On the website nettvett.no you can learn how to do this for most browsers. There you can also learn more about safer use of the internet. However, if you turn off or delete cookies, you may change your user experience on a website, and sometimes services on a website will no longer work appropriately.

Who we share personal information with

In order to run our business, we sometimes have to share your personal information with parties such as:

  • Data processors: providers of various services that process your personal data on our behalf (for example for IT and administration services, accounting, cloud storage, web hosting, sending e-mails and the like)
  • Professional advisers from industries such as law, finance, accounting, recruiting, auditing and insurance
  • User support for IT and administration systems
  • Public authorities we are obliged to report to

We require that everyone we share your personal information with, secures your data in accordance with good information security, and in accordance with the requirements of the Privacy Ordinance. We enter into a data processor agreement with all suppliers.

Transfer of personal data outside the EU / EEA

In some cases, your personal information is transferred outside the EU / EEA, for example where we use suppliers outside the EU / EEA to process traffic & customer information, to make products and services available on our website, to enable payment, for security on our website and otherwise to be able to run our business in a safe and efficient manner.

Transfer of personal data to outside the EU / EEA is only permitted to countries approved by the EU Commission, or under the necessary guarantees under the Privacy Regulation. This can be a Privacy Shield for suppliers we use based in the US, use of EU standard contracts, or according to binding business rules. If you want to know which suppliers we use outside the EU / EEA, and get access to documentation of necessary guarantees, you can contact us by e-mail office@ovun.com

Security

We take information security seriously, and we will always do our utmost to safeguard your personal information in the best possible way. Among other things, we use strong passwords, data encryption, access control, backup and two-factor authentication to secure our data and prevent unauthorized access to view, change, delete or in any way affect the data we hold, including your personal information.

We use only reputable providers of IT and administration services such as web hosting, website and PC security, virus software, email provider, backup, and more. We only allow others to access and / or process your personal information in accordance with our instructions, and only where strictly necessary (eg. IT support).

We have established routines for handling breaches of data security, and we will, in the event of non-conformities, send a non-conformance report to the Norwegian Data Protection Authority within 72 hours of the breach discovered. If the breach entails a high privacy risk, we will also notify affected data subjects.