COMPLIANCE WITH DATA PROTECTION LEGISLATION
We comply with the data protection legislation in force and therefore, also in your interest, take protecting your personal data very seriously. For this reason, we wish to inform you about the collection and processing of your data in connection with our website and the provision of our services.
The Controller, as referred to in the General Data Protection Regulation and other data protection laws in force in the EU, is:
Karenslyst allé 8b
Tel. +47 23 12 06 55
2. GENERAL INFORMATION ON DATA PROCESSING
2.1. SCOPE OF PROCESSING OF PERSONAL DATA
If you visit our website without otherwise providing us with information, we collect only the information that your browser transmits to our web server.
In general, we only process personal data if this is necessary to provide a functional website, as well as our content and services. Personal data is only processed with the prior consent of the user. An exception applies in cases where practical reasons make it impossible to obtain a consent in advance and legal regulations permit the processing of the data.
2.2 LEGAL BASIS FOR THE PROCESSING
If we obtain a consent from the data subject for purposes of conducting processing operations, Article 6(1)(a) EU GDPR applies as the legal basis.
For processing personal data necessary for performing an agreement to which the data subject is a party, Article 6(1)(b) GDPR applies as the legal basis. This also applies to processing operations that are required in order to conduct pre-contractual steps.
If personal data must be processed in order to fulfil a legal obligation to which our company is subject, Article 6(1)(c) applies as the legal basis.
If vital interests of the data subject or another natural person necessitate the processing of personal data, Article 6(1)(d) GDPR applies as the legal basis.
If the processing is necessary to protect a legitimate interest of our company or of a third party, and this interest is not outweighed by the interests and fundamental rights and freedoms of the data subject, Article 6(1)(f) GDPR applies as the legal basis for the processing. The legitimate interest of our company consists of performing our business activity. It also includes using server log files, cookies and Google Analytics.
2.3 ROUTINE ERASURE OF PERSONAL DATA
We process and store the data subject's personal data only for as long as necessary to accomplish the purpose for which they were collected. Data may be stored for a longer period if this has been specified by the European or national legislator in European Union regulations, laws or other provisions to which the data controller is subject, or if you have given us your express consent to further storage.
As soon as the data are no longer needed to accomplish the purpose for which they were collected or the statutory duty of retention has expired, the personal data are routinely erased.
3. AUTOMATIC COLLECTION OF DATA WHEN VISITING OUR WEBSITE
3.1. SERVER LOG FILES
Every time our website is visited, we automatically collect and store on our server the following log file information:
- browser type and version
- the user's operating system and service provider
- the user's IP address
- date and time of the server request
- websites from which the user's system arrives on our website (referrers)
- websites called up by the user's system via our website
The stored data are analysed for statistical purposes. They are also analysed for the purpose of making our website more user-friendly, effective and secure. These data are not combined with other personal data sources. The data are erased immediately after the statistical analysis has been completed.
This website mainly uses so-called session cookies. A randomly generated unique ID number, known as a session ID, is stored in a session cookie. A cookie also contains details about its origin and the storage period. These cookies cannot store any other data.
The session ID enables, for instance, the placement of an order within a shopping basket system and the transfer of the data you have entered in our contact form. Once you leave our website, the session cookies are automatically erased.
3.3. GOOGLE ANALYTICS
This website uses Google Analytics, a web analysis service provided by Google Inc. ("Google"). Google Analytics uses so-called "cookies", text files that are stored on your computer and make it possible to analyse your use of the website. The information generated by the cookie regarding your use of this website is normally transferred to and stored on one of Google's servers in the USA. However, if IP anonymization is activated on this website, your IP address will be abbreviated beforehand by Google within Member States of the European Union or in other States party to the Agreement on the European Economic Area. Only in exceptional cases will the full IP address be transferred to and abbreviated by one of Google's servers in the USA.
Google will utilise this information on behalf of the operator of this website to analyse your use of this website, compile reports on website activity and to provide its operator with additional services related to the use of the website and of the Internet. The IP address transmitted from your browser in connection with Google Analytics is not combined with other data held by Google.
You can prevent the storage of cookies by selecting the appropriate settings on your browser software. However, please note that if you do this, you may not be able to make full use of all features of this website. In addition, you can prevent Google from collecting and processing the data gathered by the cookie and relating to your use of the website (including your IP address) by downloading and installing the browser plug-in available at the following link: tools.google.com/dlpage/gaoptout.
Furthermore, you may object to the collection and storage of data anytime with prospective effect.
Finally, please note that this website uses Google Analytics with the extension "_anonymizeIp()", which ensures that IP addresses are only processed in truncated form to prevent direct references to people.
You will find more information about Google Analytics on the Web at the following link owned by the manufacturer, Google:
3.4 LINKS TO OTHER WEBSITES
In a number of places on our website, we provide links to other websites. Kindly visit these sites directly to obtain information about data protection.
4. COLLECTION OF PERSONAL DATA/CONTACT FORM
We generally collect and process personal data only to the extent technically necessary for purposes of communicating with you, initiating the agreement and implementing and/or brokering services via our website (Art. 6(1)(b) GDPR). Your personal data will never be used for another purpose inside/outside our company, sold or otherwise disclosed to third parties without your express consent, and you may revoke your consent anytime. Personal data are also only collected by us if you voluntarily share them with us.
A contact form that can be used to contact us electronically is available on our website. You may also contact us via the e-mail address provided. If you, as a user of our website, initiate contact with us via these channels, the personal data transmitted by you are stored automatically. The storage of these data only serves the purpose of processing the same or making contact.
Your data may also be disclosed to other companies within the Marti AS if this is necessary to process your requests. Furthermore, we may engage service providers to fulfil your request. These service providers are carefully selected and commissioned by us and are obligated to follow our instructions.
5. RIGHTS OF THE DATA SUBJECT
5.1. VIS-À-VIS US
If your personal data are processed, you are a data subject as referred to in the GDPR, and you have following rights vis-à-vis the Controller:
- right of access
- right to rectification
- right to erasure (right to be forgotten). This right is restricted if the processing is necessary to fulfil contractual or statutory obligations.
- right to restrict processing
- right to object to the processing
- right to revoke the data protection consent
- right to data portability
5.2 VIS-À-VIS THE DATA PROTECTION SUPERVISORY AUTHORITY
- Right to lodge a complaint with a supervisory authority
Under Art. 77 GDPR, you, as a data subject affected by a data protection infringement, have the right, without prejudice to any other administrative or judicial remedy, to lodge a complaint with the appropriate (data protection) supervisory authority.
The supervisory authority with which the complaint has been lodged shall inform the complainant on the progress and the outcome of the complaint, including the possibility of a judicial remedy pursuant to Art. 78 GDPR.
Marti Group's range of services is continuously expanding. For this reason or because of other changes in circumstances, Marti Group may adapt the present Privacy Statement anytime without prior notice or communication. The current published version shall apply.
For all questions or concerns related to data protection, please contact our data protection officer who can be reached at firstname.lastname@example.org or via post to Marti AS, Data Protection, Karenslyst allé 8b, 0278 Oslo, Norway.
Updated on 25-05-2018