This privacy policy applies to the processing of personal data that Janusfabrikken AS (“Janusfabrikken AS” or “we”) carries out. For example, we may collect your personal data via our websites (including social networks belonging to third parties), electronic mail, SMS, telephone, store, registration forms, other contacts with us, via third parties and from publicly available information.

We protect your personal integrity. This privacy policy regulates how we collect, use and protect personal data about you and how you can safeguard your rights in this regard. We ask you to contact us if you have questions or views about this privacy policy. See our contact information in section 10.

When referring to law, we refer below to the General Data Protection Regulation (GDPR) and other applicable Norwegian privacy legislation.

1. What information do we collect about you?

“Personal data” means information about you that can identify you. In this privacy policy, the terms “personal data” and “information about you” are used synonymously and interchangeably.

You can usually use our website without providing us with any information other than the purely technical ones. In some cases, we need to process information about you to fulfill your request, for example in connection with purchases and service assignments, or if you register as a recipient of an electronic newsletter. We may also use information about you that we have obtained from other sources, made available by third parties, such as marketing or sales companies.

The personal information about you that is collected may be:

• Contact information and information about you - such as name, address, email address and telephone number, demographic information (such as date of birth, age, gender, geographical location, favorite product and leisure interests), as well as social security number when there is a factual need for secure identification and the method is necessary to achieve such identification.
• Financial information – information that is necessary to complete an order or that you use to make a purchase, such as payment or credit card information.
  Technical information about your device or internet connection – such as IP address, cookies, geographic location and login information.
• Information about your user behavior – such as your browsing patterns and activities on the website, your response time for pages and how you use our services.
• User-generated information – content that you register, provide or publish yourself, for example in connection with customer service conversations, competitions, newsletter subscriptions, as well as content that you share with us by uploading to our website or social networks (which you allow the network to share with us), such as texts, video clips and photographs.
• Information from other sources – publicly available information or information from our partners, which we collect to keep our information about you up to date, or to secure payment, for example.

2. Janusfabrikken AS' processing of personal data

In order for our processing of your personal data to be lawful, it is assumed that the personal data has been collected for specific, explicit and legitimate purposes and that there is a processing basis in line with the GDPR for the processing. Below is the personal data we process, the purposes for which we process your personal data, and what processing basis we have.

• One of our primary purposes for collecting personal data is to be able to fulfill our contractual obligations towards you as a customer in connection with your purchase from us. This applies to processing and delivering your orders, invoicing and other necessary offers connected to the purchase of our products.

Basis of processing: Execution of the agreement (terms of sale) with you (GDPR Article 6 (1) (b))

If you do not provide us with the above-mentioned personal data, we will not be able to fulfill our contractual obligations towards you.

• We may process personal data to respond to and follow up on inquiries from potential job candidates, visitors to our websites, customers and others who contact us, for example through our customer service. We may process personal data such as email, other contact information and other personal data provided in connection with the inquiry.

Processing basis: Our legitimate interest in responding to and managing inquiries to us (GDPR Article 6 (1) (f)).

We will not be able to respond to your inquiry without processing the personal data that is necessary to be able to respond to the specific inquiry.

• In order to process your use of the right of withdrawal, complaints and claims, it will be necessary to process your contact information (name and email), relevant purchase and other information you provide in connection with the use of of your right of withdrawal, complaint or appeal. In the case of a refund, it will also be necessary to process your payment information.

Processing basis: It will be necessary to fulfill the agreement we have entered into with you (GDPR Article 6 (1) (b)), fulfill our legal obligations under applicable consumer law (GDPR Article 6 (1) (c)) and our legitimate interests in defending ourselves against claims in the event of a dispute (GDPR Article 6 (1) (f)).

We will not be able to process your claims if we do not have access to the personal data necessary to process the specific claim.

• We may process personal data to comply with statutory requirements that apply to the operation of our business, including accounting obligations. We may process personal data such as your payment information.

Processing basis: Legal obligations (GDPR Article 6 (1) (c)),

• Another purpose is to be able to offer you good products and services through customized services, and to be able to deliver better services with more relevant content. We use the information we collect to be able to provide you with information about products you request, but also to understand our customers better. To achieve this, we conduct customer surveys, among other things. Furthermore, we analyze information about our customers' demographic and geographical conditions, interests and behavior based on the information we collect from our website or other services, so-called profiling. Customer and market analyses, as well as statistical processing, are done at an aggregated level that does not make it possible to identify individual customers.

Basis for processing: Your consent (GDPR Article 6 (1) (a))

• We may use your information to send you newsletters, inform you about new products, promotions, offers, competitions and other information about our products and activities that we offer and believe may be of interest to you by post, email, SMS/MMS or telephone. We may therefore use your information for direct marketing purposes, provided that you have not instructed us that you do not wish this to happen.
  To the extent that you do not have an active customer relationship with us [or have had one in the last 12 months], we will only use your information for electronic direct marketing purposes if you have given your consent to this. Your personal information may also be used for interest-based advertising on the internet via us or the digital advertising networks we work with, which in some cases may be tailored to your interests, based on information that we have collected, so-called profiling.

You can object to our use of your personal data for direct marketing purposes at any time by contacting us as described under "Contact" below, or directly in our electronic mailings.

Processing basis: Our legitimate interest (GDPR Article 6(1)(f)) or your consent (unless otherwise expressly provided in connection with the collection of your personal data) (GDPR Article 6(1)(a)). Janusfabrikken AS' legitimate interest in the aforementioned personal data processing is to be able to offer you a better shopping and customer experience, as well as to provide you with personalized offers and other relevant information.

• We may process personal data about visitors to our official website. We use cookies and other methods of collecting information to enable the websites to function, improve your navigation on the websites, analyze the use of the websites, provide improved functionality and personalization, and show you advertisements within your field of interest, where personal data such as IP address and your use of the websites may be processed. When we show you advertisements within your field of interest through the use of cookies, our processing will consist of profiling and transferring personal data to third parties, such as social media platforms, who display our advertisements.

Basis for processing: The processing of personal data that is necessary for the functioning of the websites (necessary cookies) is based on our legitimate interest in the functioning of our website (GDPR Article 6 (1)(f)). The basis for the other processing of personal data via cookies is your consent (GDPR Article 6 (1)(a)). You can read more about our use of cookies in our Cookie Statement (link).

• If you apply for a position at Janusfabrikken AS, we may process your personal data to assess your application, including your CV, application, certificates, references and other information that you provide in your application, or that we need to process in order to assess your application.

Basis for processing: Normally it is necessary to take steps at the request of the candidate prior to the (potential) conclusion of an employment contract (GDPR Article 6 (1) (b)). The processing may also be based on our legitimate interest in finding the best candidate for the position (GDPR Article 6 (1) (f)) or your consent (GDPR Article 6 (1) (a)).

If you do not provide us with your personal data, we will not be able to assess your application or offer you a job with us.

• In connection with the administration and management of contracts with Janusfabrikken AS' business partners, suppliers and so on, and for business purposes, we may process personal data such as contact information for contact persons at such business partners, in addition to personal data in contracts, ongoing commercial correspondence, invoices, meeting minutes, etc.

Processing basis: Our legitimate interest in entering into business relationships, fulfilling contracts and administering such relationships (GDPR Article 6 (1) (f)).

3. Who do we provide your data to?

We process your personal data with the utmost care, and your data is only used by us and selected third parties.

Third parties that we use to help us operate our business (such as for customer surveys and mailings) act as data processors for us and are only permitted to use your personal data on our behalf and for the specific tasks they perform for us on our instructions and where they are acting on our behalf. They are obliged to ensure that your personal data is kept confidential and secure. We use the subcontractor Shopify to operate the website. Information collected in connection with operating the website is stored on separate servers operated by the supplier. Only Janusfabrikken AS has access to the information collected.

In order to provide better services and for marketing purposes, we may also forward your personal data to third parties, most often to independent data controllers, so that they can perform a service for us or you, such as address updates, postal or shipping companies that will deliver products, insurance companies, banks and credit reference companies or to digital advertising networks with which we cooperate.

We may also in other cases hand over personal data to others, for example when we have reason to believe that the data is necessary to identify, contact or prosecute someone who may have hacked the website, or who has otherwise infringed or violated our rights or property or the rights of our customers or other visitors.

You can request a complete list of which third parties we share your personal data with. In that case, please contact us in accordance with Section 10.

4. Your rights

By law, you have the right to request information about the personal data we hold about you after you have identified yourself and indicated what information you wish to see. Such a request must be in writing, personally signed and sent to the address provided below under Section 10.

If you believe that the information about you is incorrect or incomplete, you have the right to contact us under the law with a request for rectification. We will correct or update your information.

You also have the right under the law to have your information removed or to require us to restrict the processing of your personal data, as well as to withdraw any consents. You also have the right under the law to have the personal data you have provided to us transferred (ported).

Please note that we may be required to retain some necessary personal data in order to comply with our legal obligations.

You have the right to object to the processing of your personal data that we carry out with the support of a balancing of interests, including profiling. We must then, after you have specified which processing you object to, demonstrate that there are overriding interests. You also have the right to object at any time to the processing of your personal data that is carried out in connection with direct marketing.

We will respond to your request as soon as possible, and at the latest within 1 month. In cases where we cannot fulfill your request, we will inform you of this, as well as why.

5. How long do we store your personal data?

We only store your personal data for as long as is necessary for the purposes set out in this privacy policy or for as long as required by law and agreements. Your personal data is destroyed or anonymized when it is no longer relevant for the purposes for which it was collected, or when it is no longer required by law and agreements. Personal data processed based on your consent will be deleted if you withdraw your consent.

6. What do we do to protect your personal data?

In order to prevent unauthorized access, use, alteration, destruction or disclosure, we have implemented appropriate standards to protect and secure the information about you that we process.

The actions are taken to prevent unlawful processing of the information about you and accidental loss or destruction or damage to this information. Janusfabrikken AS.no uses, among other things, SSL (Secure Socket Layer), which means that the orders you place are encrypted.

7. Links to other websites

Please note that this website may contain links to other websites. These websites have their own privacy policies that describe how personal data is collected and processed. If you provide personal data to a third-party website, the processing will be subject to that website's privacy policy. We are not responsible for third-party websites or how they process your personal data. We therefore recommend that you familiarize yourself with the privacy policies and terms of use of such third-party websites when you visit and use those websites.

8. Changes to the privacy policy

This privacy policy may be updated by us. If we make material changes to this privacy policy, we will notify you by placing a prominent notice on the website or notifying you in another appropriate place. We encourage you to read this privacy policy to stay informed about how we process your personal data.

9. Complaints and compensation

If you believe that your personal data has been processed incorrectly by us, please let us know as soon as possible. You can also complain about our processing of personal data to the Norwegian Data Protection Authority (link to contact information).

If you have suffered loss or damage as a result of our processing of your personal data being in breach of applicable law, you may be entitled to compensation. You can then claim compensation from us or go to court.

10. Contact

Janusfabrikken AS is the controller for the processing of your personal data, in accordance with what is written above, unless otherwise stated in connection with the collection of your information. Janusfabrikken AS complies with Norwegian data protection law. If you have any questions about the privacy policy or our processing of personal data, please send an email to netthandel@Janus.no. You can also contact us at the following postal address: Janusfabrikken AS, Stephansens veg 35, 5267 Espeland