Privacy Policy

1. Introduction

The purpose of this privacy policy (the “Privacy policy”) is to inform you about how Rollover AS, with business registration no. 982 791 375, Ramstadløkka 3, 1850 Mysen, Norway (the “Company”), process personal data about you when you use our website, products and services, and how we safeguard your personal data.

In this privacy policy, we explain, among other things, what information we collect, why we collect it, and how we use the information that we process in delivering our products to you and when you visit our website or contact us for support.

If you have any questions about the privacy policy or any other questions regarding our privacy practices, please contact us at privacy@rollover.no.

2. Our role

We are a controller of personal data towards our customers, the visitors on our web pages, potential customers who contact us by email, social media, our webpage, and job seekers. This means that we are responsible for ensuring that your personal data is processed legally in accordance with the Norwegian Data Protection Data Act (which includes the EU General Data Protection Regulation (collectively, “GDPR”)), and to ensure that the processing is necessary to fulfil stated and relevant purposes.

We will also be controller of the personal data we process for our own purposes of advertising and communication through Facebook, Instagram and YouTube. However, the social platforms will be the controller of the personal data they process for their own purposes.

If you have questions about this Privacy policy or how we process your personal data, you can contact us either by using the contact form on our webpage, or by sending an email to privacy@rollover.no.

3. What kind of data do we collect and why?

3.1 Introduction

When you provide personal data about yourself to us, for example by sending in a request form on our web page or sending us an email, we will use this personal data to fulfil your request, and to deliver services to you.

For these purposes, we may process the following personal information:

  • Name
  • Phone number
  • Email address
  • Post address
  • Purchase/order information, including payment information

This processing is necessary in order to fulfil your request, or to fulfil an agreement obligation towards you, in accordance with GDPR art. 6 (1) b).

We will process and store your data for this purpose as long as it is necessary to fulfil your request, or an agreement with you.

3.2 When you visit our website

When you visit our website https://rollover.no/, we use cookies (in Norwegian: Informasjonskapsler) to collect personal data who indirectly can be tied to you as a natural person.

We collect the following information from your device:

  • IP address,
  • date and time of the access,
  • name and URL of the accessed file,
  • browser type and version, and
  • further information sent by the browser (such as your computer’s operating system, the name of your access provider, geographical origin, etc.).

You may also contact us through our website. In order to respond you your request or inquiry we process:

  • your name,
  • your email, and
  • other personal data you choose to share with us.

We process these data to ensure trouble-free connection to the website, comfortable use of our website, for evaluating system security and stability and for administrative purposes. The processing is necessary for the performance of a contract with you or to take steps at your request (GDPR art. 6 (1) b).

 

In addition, we use cookies for different purposes. A “cookie” is a piece of data sent from a website that is visited and stored locally on your browser (and thereby, device). The purpose of cookies is to maintain data related to user preferences, account settings, and evaluate and compile statistics about user activity.

Some cookies are necessary in order to ensure that our website is functioning or enable different functionalities on our website. We also use some cookies for the purpose of user analysis and marketing. Which data we gather, will depend on which cookies you consent to. Please see our cookie policy available at https://rollover.no/our-cookie-policy, for more detailed information about our use of cookies.

For necessary cookies, we process information based on our legitimate interest (GDPR. art. 6(1)(f)). The interest is to ensure you have access to the website and its functions. Information from most necessary cookies is stored the duration of the user session, but in any case, no longer than 13 months.

We also collect data for marketing and analysis purposes. The legal basis for such processing is your consent (GDPR art. 6 nr.1 (a)). The purpose is to show ads that are relevant and engaging to the individual user and thus more valuable for third-party advertisers on various digital platforms. The cookies therefore track visitors across websites. Persistent cookies (permanent cookies) will be stored for a maximum of 13 months.

3.3 Support

We offer support through three different channels based on your choice:

  • A contact form on our website which is routed to an internal email address in Rollover,
  • Inquiries through our social media accounts, or
  • inquiries by email to our employees.

To provide you with support, we will collect:

  • your name,
  • email address,
  • IP address,
  • country of residence,
  • relevant product information, and
  • other personal data you choose to share with us,

 

This data is collected in order to answer your question or respond to your request, comment or complaint.

The processing is necessary for the performance of a contract with you or to take steps at your request (GDPR art. 6 (1) b).

 

The duration of the processing is for as long as necessary to fulfil your request.

3.4 Recruiting

In the context of recruitment, we process personal data we have received from the jobseeker in order to implement measures at the data subject’s request prior to entering into a contract (GDPR art. 6 (1) b), or based on the applicant’s consent, cf. GDPR art. 6 (1) a).  Sensitive personal data processed in this regard are necessary for the Company to be able to fulfil its obligations as a possible employer (GDPR art. 9 (2) b)).

Any ability and personality tests, as well as online searches, are based on Rollover’s legitimate interest in finding the right candidate, cf. GDPR art. 6 (1) f). We will only contact the applicant’s references if we have obtained consent to this (GDPR art. 6 (1) a)).

We store your personal data during the relevant recruitment process. If we wish to store your personal data for future recruitment needs, we will ask for your consent. You can withdraw your consent at any time, and we will then no longer store your personal data for recruitment purposes. For candidates who are hired, specific procedures for storing personal data apply.

3.5 Social media

The Company has social media accounts on Facebook, Instagram and YouTube.

These social media platforms give us access to see posts, likes, followers, comments and messages, as well as aggregated information about visits and activity on our pages, boards and customized ads. Our processing is based on our legitimate interest in reaching customers and potential customers (GDPR art. 6 (1) f).

The social media platforms are the data (joint) controllers for the information you leave there. We do not store this information ourselves, but we have access to it as long as we keep our social media site. You can delete information about yourself at any time, e.g. by removing content or reactions you have posted. Your data will not be deleted simply if you stop following our site.

Facebook, YouTube and Instagram process personal data in the United States and other countries listed in their privacy policies. You can obtain more information on how Facebook, YouTube and Instagram process personal data in their respective privacy policies. We encourage you to read these. The basis for transfer is based on the EU’s standard contractual clauses.

Please see the relevant privacy policies for the processing taking place by the social media platform.

Duration of processing is until you or the relevant social media delete the information.

3.6 Cookies

You can choose whether to accept cookies by editing your browser settings. However, if cookies are refused, some features on our website may not work as intended.  Information about the procedure to follow in order to enable or disable cookies can be found at:

Chrome

Safari

Safari Mobile (iPhone and iPads)

Firefox

Microsoft Edge

For more information about other commonly used browsers, please refer to http://www.allaboutcookies.org/manage-cookies/.

3.7 Statistics and analysis

Provided that you consent, we use Google Analytics, and other marketing and analysis cookies as set out in our cookie policy to obtain information about, among other things, which pages on our website are most visited, where users come from, at what times the pages are visited in order to better understand how our users use the website, to maintain your user session on our websites, for statistics, to study traffic, usage patterns and trends on the website.

By analyzing the statistics, we can better understand market trends. We do this to improve and further develop the products and services we offer you. As far as possible, we try to do this with anonymous information, without being able to link the information specifically to you.

You can deactivate cookies as set out in our cookie policy: https://rollover.no/our-cookie-policy/. When you visit our website, you will also have the possibility through a pop up to administer and give/refuse consent for all cookies except essential cookies (GDPR art. 6(1) a)).

3.8 Disputes

Rollover may process personal data which are necessary in connection with disputes. Personal data for this purpose is processed because we have a legal obligation to do so, cf. GDPR art. 6 (1) c), or based on our legitimate interest in documenting and promoting our view in the event of a dispute, cf. GDPR art. 6 (1) f).

Duration of processing is for as long as the dispute is ongoing as long as necessary after the dispute has been settled.

4. Where we process your data/Third parties

4.1 Service providers

We do not transfer your data to third parties unless there is legal basis for doing so. We use third party services for analytics, error reporting, marketing and hosting. Transfer of your data to third parties, in case we adapt our marketing to other advertising platforms, depends fully on your consent.

We will only process your personal data with third parties as described in this privacy policy and do not sell any personal data. The third parties will be responsible for any processing of personal data for their own purposes. If a third party uses cookies and similar technologies to collect information about activity on our website, you can find more information in this Privacy policy section 3.4, 3.6 and our cookie policy as referenced in section 3.2.

4.1.1 Social media

We have social media accounts on Facebook, Instagram and YouTube as described in section 3.5.

4.2 Business transactions

Relevant personal data may also be provided to third parties such as lawyers, advisers, buyers and prospects in connection with a business transaction, including a prospective or completed merger, acquisition or stock sale (including transfers made as part of insolvency or bankruptcy proceedings). Non-disclosure agreements will protect any related personal data.

5. Safety measures

The protection of your personal data is a high priority for us.  We aim to protect your personal information and other confidential information through appropriate security measures.

If we detect security or privacy breaches, this will be reported to management, the risk of security breaches will be assessed, and the Data Inspectorate will be notified if necessary. You will also be notified as a user if the security breach poses a high privacy risk to you.

6. Your rights as a data subject

Subject to applicable law, you may have certain rights with respect to our processing of your personal data, including:

  • the right to information about how we collect and process your data in (therefore, this privacy police).
  • the right to access to a copy of, rectify, correct and update the personal data that we have about you.
  • the right to restrict processing or have your data deleted, in certain cases.
  • the right to withdraw any consents you have given at any time, in certain cases.

Please contact us at privacy@rollover.no for any of the above or if you consider that our processing of your personal data infringes applicable law.

If you believe that we process your data in violation of your rights, you have the right to complain to the Norwegian Data Inspectorate (“Datatilsynet”) or your local data protection authority. Please contact us at privacy@rollover.no before sending a complaint to the relevant authority, so that we can try to resolve or clarify the issue.

7. For how long do we store personal data

We will retain and use personal information only for as long as we have a legal basis for doing so. That could mean days, months or years, depending on the type of personal data. Where possible, we have informed about the storage time for each processing activity under the relevant descriptions in this Privacy policy.

Information from customer service and GDPR requests are stored for three years. Any information we are obligated to store in accordance with the Norwegian Bookkeeping Act will be stored in accordance with the regulations in this act.

8. Changes in the privacy policy

We may update our privacy policy based on changing business practices, technology and legal requirements. Any such changes will be posted on our website. If we make a significant change in the way we use or share your personal information, you will be notified via email and/or through other prominent notice within at least 30 days prior to the changes taking effect.

opp