Processing of personal data in Soundsensing AS
When you use our website or any of our products, software, or services, Soundsensing AS (“Soundsensing”) will process your personal data. Below you will find information regarding which type of personal data that is being collected, the reasons for and purposes of why we collect the data and your rights regarding the processing of your personal data.
The controller of the personal data we process is Soundsensing AS by CEO Ole Johan A. Bjerke. Contact information for Soundsensing is:
● Address: Øvre Slottsgate 18/20, 0157 Oslo
● E-mail: contact@soundsensing.no
● Telephone: +44 91 75 20 50
● Organisation number: 922 774 692
For queries or questions regarding our processing of your personal data, you may contact contact@soundsensing.no
1. The purposes of our data collection and what types of data we collect We collect and process your personal data for various purposes depending on who you are and how we get in touch with you. We collect the following personal data for the purposes mentioned below:
1. Sending out marketing materials, such as newsletters and information regarding our activities: The processing is based on your consent (GDPR Article 6 (1) (a)).
2. Respond to incoming enquiries through our support channel and web application feedback channel: Name, telephone number, e-mail address and other personal data collected in connection with the enquiry. The legal basis for such processing is our legitimate interest in providing support to answer and manage inquiries and other communication (GDPR Article 6 (1) (f)).
3. The recruitment of new vacancies and positions: If you apply to a position at Soundsensing, we may process your personal data in order to assess your application such as CV, application, certificates, references and other information you may provide or which we need to verify to assess your application. The legal basis for such processing is normally that it is necessary in order to take steps at the request of the candidate prior to (potentially) entering into an employment contract with us. The legal basis for such processing is based on our legitimate interest in finding the best candidate for the position (GDPR Article 6 (1) (f)), or your consent (GDPR Article 6 (1) (a)).
4. Contract management and business relationship: In connection with the administration and management of contracts with our customers, business partners, etc. and for business and partner relationship purposes, Soundsensing may process personal data such as contact information and contact persons at such customers, business partners etc., in addition to personal data contained in contracts, ongoing commercial correspondence, invoices, minutes of meeting etc. The legal basis is our legitimate interest in entering into business relationships, fulfil contracts and administer such relationships (GDPR Article 6 (1) (f)).
5. Administration of your user account: Your name, e-mail address, user ID and password. The processing purpose is based on the legitimate commercial interest of identifying our users and giving them access to a user account with their own credentials, or your consent (GDPR Article 6 (1) (a)).
6. Handling of your device: Data from your device, including location, time, sensor data, device identification, device name and details about sound quality where the device is located.. Data regarding location, time and sensor data is processed based on the legitimate commercial interest in providing service to you around displaying and giving insights about sound quality. In such contractual relationships between Soundsensing and individuals, personal data may be necessary to the execution or the performance of the contract. The legal basis for such processing is based on the legitimate commercial interest in delivering and improving your user experience (GDPR Article 6 (1) (b)).
In order to obtain information regarding the use of our web pages we use cookies. The processing of cookies is based on the commercial interest of adjusting our web pages for the benefit of users. We ensure your data protection by only using this information for statistical purposes. In these statistics it is not possible to identify you as an individual.
2. Disclosure of personal data to others
We do not give out or disclose your personal data to others unless there is a legal obligation for such disclosure. Examples as a basis for disclosure could typically be a contract with you or legal basis in the law instructing us to provide out the information. Soundsensing uses data processors to collect, store or in other way process data on our behalf. In such cases we have concluded data processing agreements to ensure the information security in all segments of the data processing. As of today we use the following data processors:
● Squarespace. Data about you is processed by Squarespace to process orders in our web shop, and other enquiries through our website. The processing is necessary for the performance of a contract with you.
● Hubspot. Data about you is processed by Hubspot as part of our customer management system. The processing is based on our legitimate commercial interest in processing these data for this purpose.
● Mailchimp. Data about you is processed by Mailchimp in order to send you our newsletter. ● Heroku. Data about you is processed by Heroku as part of our web application, to let you access and manage view your sensor and user data. The processing is necessary for the performance of a contract with you.
Your personal data might be transferred to countries outside the European Economic Area (third countries) in order to provide you services and where we use subcontractors. We always make sure that appropriate and suitable safeguards compliant with applicable laws are in place to protect your personal data.
Transfer to third countries will be protected by appropriate safeguards, namely the use of standard data protection clauses adopted or approved by the European Commission, a copy of which can be obtained from
https://ec.europa.eu/info/law/law-topic/data-protection/data-transfers-outside-eu/model-contracts-trans fer-personal-data-third-countries_en. Transfer to the United States will be subject to the EU’s standard contractual clauses (“SCC”) between the Controller and the relevant company at the location, or other
legal basis for such transfer pursuant to GDPR Chapter V, in addition to supplementary measures if this, in the Controller’s sole discretion, is required as set out in the ruling by the Court of Justice of EU (CJEU) in case C-311/18 or any subsequent laws, regulations or recommendations/guidelines from the European Data Protection Board or any national data protection authority.
3. Third-party websites and social media
The websites of Soundsensing may include links to other third-party sites. These third-party sites have their own privacy policies that determines how personal data are collected and processed. If you submit personal information to any of these third-party sites, your information is governed by their respective privacy policies. Soundsensing takes no responsibility for such third-party sites, how they
are operated and how they process your personal data. We recommend that you familiarize yourself with such third-party sites’ privacy policies and terms of use when visiting and using such sites.
When you “like” or join our page on Facebook or other social media platforms, this will be shared with the relevant platform. The same applies to any activities on our social media accounts, such as content posted by you or posts that you “like”. The relevant social media platforms have their own privacy policies, in which you can find more information about the processing of personal data in relation to such social media platforms.
4. Storage period
We only store your personal data for as long as necessary for the purpose the data was collected for. This means that personal data collection based on your consent will be deleted if you withdraw your consent. Data processed for the purpose of our newsletter will for instance be deleted after withdrawal of your consent.
Personal data we process in the performance of a contract with you will be deleted when the contract is implemented and all obligations pursuant to the contract have been implemented. Personal data related to your user account, including location data, is retained until you delete your account. Active sensor data are continuously aggregated and anonymised and may be used on a continued basis in an anonymised form to improve our services. Personal data related to shipment of packages is deleted after 2 years of last shipping date. Sensor data collected from your device is deleted upon your request. Please note that continued storage may be necessary due to statutory obligations to which Soundsensing is subject, e.g statutory rules related to storage for accounting purposes, or due to the legitimate interest of Soundsensing such as establishing, exercising or defending a legal claim.
5. Your rights when we process your personal data
You have the right to obtain access to, correction and deletion of your personal data processed by us. You also have the right to obtain restriction of processing, direct objection to the processing and obtain the right to data portability. You can read more about the extent of your rights in the web pages of the Norwegian Data Protection Authority: www.datatilsynet.no.
To assert your rights please contact us through the aforementioned contact details. We will answer your request as soon as possible.
You can always withdraw your consent to our processing of your personal data. The easiest manner to withdraw your consent is to contact us through contact@soundsensing.no.
6. Complaints
If your opinion is that our processing of your personal data is not in compliance with the described manner here or in other ways not in compliance with the general data protection regulation, (GDPR) you can file a complaint to the Norwegian Data Protection Authority (Datatilsynet). You can find information about how to contact the Norwegian Data Protection Authority on the web pages of the Authority: www.datatilsynet.no.
7. Changes
If there should be a change in our services or a change in the regulation regarding the processing of personal data, this can cause changes in the information given in this notice. If we have your contact information we will make you aware of these changes. In all cases updated information will always be easily accessible on our web pages.
Last updated: 16.10.2024
