Privacy policy.
Posthallen Drinkhub AS
Co. reg. no.: 929 170 113
Contact information:
The Privacy Policy was last revised November 1 2022.
1. ABOUT POSTHALLEN AND THE SERVICES WE OFFER
This Privacy Policy describes how Posthallen Drinkhb AS, "Posthallen”, "we" or "us", processes your personal data, by contacting us and using the services we offer.
We are devoted to protecting and respecting your privacy. We want to be transparent about our processing of personal information. This Privacy Policy describes how we process your personal information, your privacy rights and our responsibility to protect these rights. Posthallen seeks to comply with all applicable laws and regulations regarding the protection of personal data.
Posthallen uses a technical solution for handling orders and payments, which is available for our customers via QR code and website, hereafter referred to as the "Service".
Posthallen also has its own website with information about our hospitality concept available at www.posthallen.no, hereafter referred to as the "Website".
The Service and the Website is developed and operated by The Facility App AS, co. reg. no. 925 809 489.
2. POSTHALLEN AS DATA CONTROLLER
Posthallen Drinkhub AS is responsible for the processing of your personal information that we collect via contact with you, as a visitor of the Website or when using the Service.
3. HOW, WHY AND WHICH PERSONAL DATA WE PROCESS
Establishing and managing customer relationships. When you place an order for our goods and services, contact information provided through the Service, including name and telephone number, is collected and stored. Contact and order information is processed to deliver the selected services and goods and to make payments and refunds.
If you want a receipt for your order, you must add your email address to receive the receipt by email.
We do not collect your card information, unless it is necessary to make a refund. Only the four digits of your card number, together with the amount for the relevant order, are then used.
The legal basis for processing information to establish the customer relationship and manage the orders is GDPR article 6 (1) (b).
Customer order information is stored for as long as necessary to ensure efficient handling of any problems with transactions and up to one year after the order has been completed.
If it is necessary to fulfill statutory retention obligations, invoice information will be stored after the contractual relationship has ended, in line with the requirements of the law, cf. GDPR article 17 nr. 1.
Use of the Service and the Webpage. The Facility App processes your IP address or technical information about the device you use when you use the Service and the Website, in order to offer the Service and the Website, ensure that the Service and the Website are kept operational and for any security reasons.
The legal basis for processing information about use of the Service is GDPR article 6 (1) (b).
Data logs will be stored for up to 90 days, unless there is a security incident or other events that justify a longer storage time.
Inquiries and customer service. If you contact us by phone and email, we will use your contact information and the information from the inquiry to respond to your request as quickly as possible and resolve any issues.
The legal basis for processing information related to the inquiries and questions we receive is our legitimate interest in handling inquiries in an efficient and reasonable manner cf. GDPR article 6 (1) (f).
Your contact information and the information related to the inquiry are stored for as long as is necessary to handle the inquiry, depending on the specific inquiry, as long as there are no reason for storing the information any longer, for example if storage is necessary to establish, exercise or defend legal claims cf. GDPR Article 17 No. 3.
4. SUB-SUPPLIERS AND THIRD PARTY SUPPLIERS
4.1 The Facility App AS
The Service is developed and operated by The Facility App AS, co. reg. no. 925 809 489. For technical questions or problems, The Facility App can be contacted at contact@thefacilityapp.no. For more information about The Facility App and how they process your personal data, go to: https://facilityfarm.no/legal/privacy-policy
4.2 Payment
Nets Denmark A/S (“Nets”) is the provider of the Nets Easy payment service in the Service, which facilitates payment via other payment providers such as Vipps and Apple Pay. In Nets Easy and the other payment services, you will find an overview of your payments. For more information about Nets and their processing of personal data, go to;
https://www.nets.eu/gdpr/pages/privacy-notice-for-nets.aspx
In the event of a refund of payments, Posthallen will ask for the last four digits of your payment card and the total amount for the order from you, in order to be able to refund the amount through Nets Easy.
4.3 SMS service
The Service is integrated with the SMS service provided by Sveve AS. Your telephone number is collected in order to send you a SMS with information about your order via Sveve's SMS service. For more information about Sveve's processing of personal data, go to; https://sveve.no/personvernerklaering.pdf
4.4 Amazon
The Service is connected to Amazon Web Services ("AWS") where personal information is stored on a server in Germany.
Amazon Simple Email Service is used to send you receipts of your orders by email.
For more information about Amazon's processing of personal data, go to; https://aws.amazon.com/compliance/data-privacy-faq/
4.5 RollBar
The RollBar service is used by The Facility App as a tool for troubleshooting and improving the Service. When an error occurs, RollBar collects the user's IP address, operating system, browser details and the page where the error occurred to identify and analyze the error. The provider of RollBar, RollBar Inc., is located and processes the information in the United States. For more information about Rollbar's handling of personal data, go to; https://docs.rollbar.com/docs/privacy-policy
4.6 IT personnel
The Facility App uses subcontractors to ensure that the Service is operational and secure, that technical errors are corrected and for further development of the Service. To secure your privacy rights, The Facility App has entered into the EU's standard contract with their subcontractors outside the EEA / EU. The IT personnel of The Facility App only have access to personal data. No other processing (storage, systematization, etc.) takes place outside the EEA / EU.
5. YOUR RIGHTS
Transparency and data portability. You have the right to access the personal data we have registered and stored about you. You also have the right to receive your personal data, and we will provide this to you at your request. To ensure that personal information is disclosed to the correct person, we may require you to provide documentation or information that confirms your identity.
Rectification or deletion. Personal information must be as accurate, complete and up-to-date as possible. Incorrect information will be corrected at your request. We will, as far as possible, accommodate a request to delete personal data. If there is any reason why the information cannot be deleted, you will be notified of the reason.
Complaints. If you are unhappy with how we process your personal data, a complaint can be sent to the Norwegian Data Protection Authority. We recommend that you contact us first, as we will do our very best to ensure that your privacy rights are respected.
6. SECURITY
Posthallen will protect your personal data and take all necessary measures to prevent unauthorized access and other deviations. We use a secure technical environment for your personal information. Only a limited number of Posthallen employees and our subcontractors have access to your personal information.
7. CHANGES TO THE PRIVACY POLICY
Posthallen may at any time change this Privacy Policy to the extent necessary due to changes in our services, new technical or legal requirements.
8. INQUIRIES
If you have questions about or are dissatisfied with our processing of personal data, or wish to invoke one or more rights in accordance with applicable privacy laws, inquiries can be directed to our customer service at tomas@posthallen.no. We will answer your questions as soon as possible. Requests regarding privacy rights, such as correction and deletion, will be followed without undue delay and within 30 days.