Privacy Policy

PRIVACY POLICY

1. Introduction

Smartstaff AS (“We”, “Us” or “Our”), org. no. 916 127 693, aim to be as open and transparent as possible around the purpose and Your rights concerning the personal data We collect when You visit Our Website.

I connection with Your (“You” or “Your”) registration at Our Website www.smartstaff.no (“Website”) and use of Our service for the facilitation of contact between establishment and suppliers (“Service”»), We will collect personal data about You. Please read Our standard terms and conditions to get a clear view of Your rights and obligations under the Service.

This privacy policy (“Privacy Policy”) has been compiled to better serve those who are concerned with how their Personal Data is being used in the System, hereunder to inform You of Our policies and procedures regarding the collection, use and disclosure of the personal data.

Please read this Privacy Policy carefully to get a clear understanding of how we collect, use, protects or otherwise process Your personal data.

The privacy policy is governed by Norwegian law and may be updated from time to time, partly as a result of changes in current privacy legislation or because the Service is expanded or changed. We will notify you if this requires new consent from you.

2. Consent

In order to use You of the Service, it is necessary that You provide us with certain requested personal data. If You do not wish to provide Us with such necessary information, We unfortunately cannot give You access to the requested Service.

By using the Service, You confirm that You have read and agreed to the contents of this Privacy Policy and to Our processing of Your personal data.

You may withdraw Your consent at any time by contacting Us as specified in Clause 18. Please note that this may cause Us to no longer deliver Our Service to You.

If children under the age of 16 have given Us personal data, We will delete the information as soon as We become aware of it. Parents or legal guardians may contact Us as specified in clause 18.

3. Electronic marketing

By accepting this Privacy Policy, You agree to receive newsletters and favourable offers.

Marketing consent is not required to use the Service and You may at any time be withdrawn by contacting Us as specified in Clause 18.

However, if You withdraw Your consent to receive direct marketing from Us, We will not delete Your information from Our databases unless You explicitly ask us for this.

4. Data controller

We, through Our chairman of the board of directors, are the data controller and have the primary responsibility for processing personal data in connection with Our business in accordance with the at all times applicable privacy legislation. The term "data controller" means the person who determines the purpose of processing of personal data and the means to be used. It is the data controller who has the overall responsibility for the processing of Your personal data.

Our CEO has the responsibility for the daily operations pertaining to privacy-related matters.

5. What is personal data?

Personal Data is information relating to an identified or identifiable natural individual, which is an individual who can be identified, directly or indirectly, in particular by reference to an identification number or to one or more factors specific to his physical, physiological, mental, economic, cultural or social identity.

6. What kind of personal data do we process?

By using the Service We may process personal data about You, including but not limited to:

a) Address
b) Age
c) Applications
d) Citizenship
e) Communication with Us or other users.
f) CV
g) Date of birth
h) Description of yourself
i) Education
j) E-mail
k) Employer
l) Gender
m) Identification number
n) Interests
o) IP-address
p) Location
q) Name
r) Password
s) Payment history, including date and time, amount, debit and credit card information and other related transactional details.
t) Personality
u) Personalised profile settings
v) Pictures
w) Position
x) Preferences
y) Referrals
z) Requested work
aa) Telephone number
bb) Username
cc) Your use of the Service, for instance Your search history.

As a main rule, We do not process sensitive personal data about You unless it is relevant or necessary to provide Our Service to You. In cases where We wish to process sensitive personal data, we will first seek to obtain Your consent.

7. When do we collect personal data?

We collect personal data when You register on Our Website, use Our Service, subscribe to a newsletter, respond to a survey or marketing communication, surf the Website, use certain Website features, fill out a form, open a support ticket, or Use or enter information on Our Website.

8. Purpose of our processing of your personal data

We are committed to processing personal data in such a way that You can feel confident that Your information is processed confidentially.

We process personal data that is necessary to enable You to make use of Our Services.

We will process personal data that We receive directly from You, Our affiliates or in technical ways (such as automatic registration through our servers) for the purposes described herein and in order to offer, monitor and analyse the use of the Service, and perform maintenance and improvement.

The purpose of Our processing of Your personal data is to serve Your use of the Service in the best possible way. When You provide personal data to access Our Service, We will process Your personal data to:

a) Manage a survey, Your use of the Website or Service.
b) Request and present ratings of users and the Service.
c) To process orders and transactions and to send information and updates pertaining to such orders and transactions.
d) Assisting You and Our Partners in Disputes.
e) To fulfil requests You may make.
f) Provide customer service when We respond to Your request for assistance.
g) Conduct internal investigations and risk assessments.
h) Keep You informed about Our offers, Our services and news.
i) Register and prevent fraud, spam, abuse, security incidents, and other harmful activity.
j) Send you service or operating messages, such as updates, security alerts, and account alerts.
k) To provide, improve, maintain and protect Our Services and content in order to better serve You.
l) To personalise Your experience and to allow Us to deliver the type of content and product offerings in which You are most interested.
m) To verify You as a user and facilitate information that You have made available in the Service.

We also carry out anonymous analysis to improve Our Service. Such analysis will be conducted using aggregated and anonymised personal data, and this information will not be used to identify You as a person.

If You have agreed to online marketing, You will also be able to receive information with offers and news from Our partners.

We will not use Your personal data for any purpose other than the specified, unless expressly agreed upon by You for use for any other purpose. Personal data beyond this will be processed in accordance with Your own consent. Such consent may be withdrawn at any time by contacting Us as specified in Clause 18.

9. For how long do we keep your personal data?

We keep Your Personal Data only as long as it is required for the reasons it was collected and/or disclosed by You, unless otherwise provided by applicable law. Processing of anonymous data is not subject to such limitations. m

The time period in which We store personal data varies, depending on Your use of the Services or System or the type of personal data.

When your personal data is no longer required for Our purposes, We have procedures to destroy, delete, erase or convert it into an anonymous form.

You may request to have the personal data deleted from Your user profile. If You wish to delete Your profile, Your personal data will also be deleted.

10. Do we disclose personal data to third parties?

We cooperate with third parties to provide the Services and We may share Your personal data with Our third party service providers or partners who are involved in the processing, maintenance, review of development of Our business systems, including testing or upgrading Our business systems or other simplifications.

These third parties will only receive access to Your personal data for the purpose of fulfilling Our obligations to You, deliver the Service or if You otherwise have consented.

We use a tool called “Google Analytics” to collect data about Your use of this Website. Google Analytics collects data such as how often You visit this Website, what pages You visit when You do so, and what other websites You used prior to coming to this Website. We use the data we get from Google Analytics only to improve this Website. Google Analytics collects only the IP address assigned to You on the date You visit this Website, rather than Your name or other identifying information. We do not combine the data collected through the use of Google Analytics with personal data. Although Google Analytics plants a permanent cookie on Your web browser to identify You as a unique user the next time You visit this Website, the cookie cannot be used by anyone but Google. Google’s ability to use and share information collected by Google Analytics about Your visits to this Website is restricted by the Google Analytics Terms of Use and the Google Privacy Policy. You can prevent Google Analytics from recognising You on return visits to this Website by disabling cookies on Your browser.

If We were to disclose Personal data to organisations that perform services on Our behalf, We will require those service providers to use such Personal Data solely for the purposes of providing services to Us and to have appropriate safeguards for the protection of that personal data.

All third parties who receive personal data from Us are obligated to adhere to Our standards for the processing of personal data or equivalent standards, as well as obligations in accordance with the at all times applicable privacy legislation.

You acknowledge that We cooperate with government authorities, law enforcement officials and private entities to enforce and comply with any applicable law. Please note that there are circumstances where the use and/or disclosure of Personal Data may be justified or permitted or where We are obliged to disclose Personal Data without Your consent.

Occasionally, we may transfer anonymous personal data to Our partners. Personal data will be aggregated by Us before such transfer.

Where Personal Data may be subject to transfer to another organisation in contemplation of a merger, financing, reorganisation or dissolution transaction of all or part of Us, We will do this only if the involved parties have entered into an agreement under which the collection, use and disclosure of the personal data is restricted to those purposes that relate to the transaction, including a determination of whether or not to proceed with the transaction, and is to be used by the involved parties to carry out and complete the transaction. If another company acquires Us or Our business or assets, that company will possess the personal data collected by Us and will assume the rights and obligations regarding your personal data as described in this Privacy Policy.

11. Third party links

Occasionally, in Our sole discretion, We may include or offer third party products or services on Our Website. We may also have links on Our Website to other websites that are not under Our control. These links are offered for information purposes only. These third party websites have separate and independent privacy policies. We encourage You to read the privacy policy of every website You visit. We have no responsibility or liability for the content and activities of these linked websites.

12. Visibility

We will display Your personal information on Your profile page and other sites on the Website according to the settings you specify in Your profile and Your interaction with other users. We recommend that you protect Your anonymity if You consider it necessary and We encourage You to consider which personal data You provide on Your profile page or in connection with Your interaction with other users.

13. Cookies

We use cookies on the Website. Our use of cookies are governed by Our Cookie Policy. We treat information collected by cookies and other technologies as non-personal information, unless IP addresses or similar identifiers are considered personal data by local law.

14. Security

Safeguarding Your personal data is Our highest concern. As such, We endeavour to maintain and employ reasonable measures for the physical, procedural and technical security with respect to the offices and information storage facilities involved with Your personal data, so as to prevent any loss, misuse, unauthorised access, disclosure, or modification of Your personal data.

Your personal data is contained behind secured networks and is only accessible by a limited number of individuals who have special access rights to such systems, and are required to keep the personal data confidential. We use computer systems with limited access housed in facilities using physical security measures.

We review Our data collection, storage and processing practices, including physical security measures, to guard against unauthorised access to Our computer systems.

All payment transactions are processed through a gateway provider and are not stored or processed on Our servers. In addition, all debit and credit card information You supply is encrypted via Secure Socket Layer (SSL) technology.

If any employee of Us misuses personal data, this will be considered as a serious offence for which disciplinary action may be taken, up to and including termination of employment. If any individual or organisation misuses personal data - provided for the purpose of providing services to or for Us - this will be considered a serious issue for which action may be taken, up to and including termination of any agreement between Us and that individual or organisation.

In case of any data breach concerning Your personal data, We will notify You via email or in-site notification within 4 business days.

15. International transfer

Your personal data may be transferred to — and maintained on — computers located inside of the European Economic Area and other countries which the European Commission has considered to have an adequacy of protection of personal data on the basis of article 45 of Regulation (EU) 2016/679. Your consent to this Privacy Policy followed by Your disclosure of such personal data represents Your agreement to that transfer.

16. Accessing, amending or deleting your personal data

You have, with the exceptions provided by the at all times applicable privacy legislation, the right to receive access, update, correct or delete the personal data that You have provided through Your use of the Service, by contacting us as prescribed in clause 18.

By using this Service, We will, as far as practicable, grant you access to Your personal data. To the extent We can give you such access, We will do it for free, as well as cases where it would require a disproportionate effort from our side.

We may also reject requests that are unreasonably repetitive, require disproportionate technical effort (for example, developing a new system or fundamentally changing an existing practice), or would be extremely impractical (for instance, requests concerning information residing on backup systems).

We endeavour to ensure that any personal data provided and in Our possession is as accurate, current and complete as necessary for the purposes for which We use that personal data. If We become aware that personal data is inaccurate, incomplete or out of date, We will revise the personal data and, if necessary, use Our best efforts to inform third parties which were provided with inaccurate Personal data so that those third parties may also correct their records.

If Your personal data is wrong, We strive to give You ways to update it quickly or to delete it. To guard against fraudulent requests for access, We may require sufficient information to allow Us to confirm that the individual making the request is authorised to do so before granting access or making corrections.

All registered users may review, update, correct or delete the personal data provided in their registration or profile by contacting Us (see clause 18 below) or by changing their "user preferences" in their profile. If you completely delete all such personal data, then your profile may become deactivated.

17. Modifications

Our Privacy Policy may be updated from time to time due to amendments or expansions in the System, and We will notify You if this requires a new consent from You. In case of any material changes we will contact you through the available channels such as e-mail or notifications on Our Website.

18. Contact

If You have any questions or requests regarding this Privacy Policy, Our Data collection or processing practices, or wish to bring a complaint to Our attention, You may contact Us at [privacy@smartstaff.no].

We will investigate all complaints and if a complaint is found justified, We will take all reasonable steps to resolve the issue.

You also have the right to file a complaint with the Data Inspectorate regarding any issue pertaining to the processing of Your personal information.