Katapult is the service manager for the company’s processing of personal data. It is voluntary for those who visit the website to provide personal information in connection with services such as receiving newsletters and using the share and tip service. The treatment basis is the consent of the individual, unless otherwise specified.
Web analytics and cookies
As an important part of the work of creating a user-friendly website, we look at the user pattern of those who visit the site. We analyze user behavior to make the user experience better. The purpose of using cookies is therefore to improve the customer experience. To analyze the information, we use the analysis tool Google Analytics.
The information collected by Google Analytics is stored on Google’s servers in the United States. Information received is subject to Googles guidlines for Privacy.
An IP address is defined as a personal information because it can be traced back to a particular hardware and thus to an individual. We anonymize the user’s IP address before the information is stored and processed by Google. Thus, the anonymised IP address cannot be used to identify the individual user.
Your IP address is also logged for a short period by our web servers. The user’s IP-address, time of day, website address, HTTP status, number of bytes sent, HTTP referer and HTTP user agent is logged for 15 days. Beyond this point, the data is deleted.
Katapult stores information about which keywords users use on our sites through Google Analytics. The purpose of the storage is to make our information offer better. The usage pattern for search is stored in aggregate form. Only the keyword is stored, and they cannot be linked to other user information such as IP addresses.
The “Share with others” feature is voluntary and can be used to forward links to the site by email, or to share the content of social networking sites such as Facebook or Twitter. Information about tips is not logged with us, but is only used there and then to post the tip of the social networking site. However, we cannot guarantee that the online community will not log this information. All such services should therefore be used wisely. You may contact the relevant service provider or online community to receive information about its collection, use, processing and personal data protection. If you use the e-mail feature, we only use the e-mail addresses given to forward the message without any form of storage.
It is possible to subscribe to newsletters and information about our events for anyone wishing to receive such information. In order for us to be able to send email you must register an email address. Legal basis for processing for this purpose is consent, cf. GDPR Article 6, paragraph 1, letter a. To be able to invite you to relevant events, we also record which business you are working for, legal basis for this is GDPR Article 6, paragraph 1, letter f , a legitimate interest. This information is not shared with other businesses and is deleted when we are told that you no longer wish to receive information from us. The information is also deleted if we receive feedback that the e-mail address is no longer active. ActiveCampaign is our data processor for the newsletter.
Where it is possible for the users to make comments on articles, the name and e-mail address are required. The name and email address will not be published with the comment, but will be stored with us so that the user can easily comment on the articles later. The legal basis for the treatment is Article 6 (1) (f) of the GDPR, a legitimate interest.
When you enroll in courses and events, we ask you to register your name, organization, address, email, job phone, position and invoice reference. With the exception of name and organization, which will be published on participant lists, information is not shared with others, with the exception of sharing with data processors we have engaged for this purpose (eg for managing course submissions and for conducting the actual course event). Legal basis for the processing of personal data in connection with this is the GDPR Article 6, paragraph 1, letter a, consent, or alternatively letter b, to fulfill an agreement that the data subject is party to or to take action on the data subject’s request before sourcing.
Login with general user management
Some services require that you log in via our general user management. In these, it will be possible to register names, e-mail, telephone, organization and website. The information is not shared with others.
Page and service functionality
Cookies are used in the operation and presentation of data from websites. Such cookies may include language code information for language selected by the user. It can be cookies with information that supports the load balancing of the system so that all users are guaranteed the best possible experience. For services that require login or search, cookies can be used that ensure that the service presents data to the right recipient.
We may share your information:
With the public if you submit content to one of our forums, such as blog comments, social media posting, or other features of our services that are publicly visible;
with third parties such as other sites that integrate with our API or our Services;
or those with an API or service that we integrate with;
Any necessary third party engaged by us, including data processors, vendors, consultants, marketing partners, and other service providers who need access to such information to perform work on our behalf;
In response to an information request by a competent authority if we believe disclosure is under or otherwise required by applicable law, regulation, license or legal process;
if we otherwise notify you and you consent to the sharing; and in an aggregate and / or anonymous form which cannot be reasonably expected to be used to identify you.
We have established procedures for managing personal information in a secure manner. The measures are of a technical and organizational nature. We make regular assessments of the security of all key systems used for the handling of personal data, and agreements have been entered into that require suppliers of such systems and partners to ensure satisfactory information security.
You can at any time request access, limitation, correction, relocation (the right to data portability) and the deletion of personal information we hold. You also have the right to request a copy of the personal information in machine-readable format. In some cases, we are required by law to process certain personal data and in these cases your rights will be limited. If you do not wish to publish or give us access to your personal information, you are in your full right, but it is not necessarily possible for us to offer you the service you request.If you disagree with the way we process your personal information, you can appeal to Datatilsynet.
If you use the “contact us” service on our website, you are asked to leave information about your name, email address and a custom description of what we can help you with. The purpose of this function is that we can easily follow up inquiries from you as a user, customer or potential customer. The basis for treatment is consent, cf. GDPR Article 6, no. 1, letter a.
If you have inquiries regarding our privacy statement or wish to exercise your rights, please contact us:
Contact by email: _____________
Postal address: ___________
Governing law and venue
This privacy statement is governed by Norwegian law. Venue is Oslo District Court.