Bi-O AS (Ltd) (“we”) is committed to make sure that you can trust us and how we process your personal information. In this privacy statement, we explain why we collect information about you, how we use this information, and how we take account of your privacy.
Personal information is information and assessments that can be linked to an identifiable individual. This can be, for example, name and contact information, purchase history or information about interests.
Use of personal data must comply with the Personal Data Act. We, as the data controller, will ensure that we use personal information about you in accordance with the rules of law.
2 What personal information do we have about you
Depending on what information you give us, how you use our services, and what permissions you give us, we have this information about you:
- Personal info: Information you provide when you create a user account or order membership or products / services, such as name, address, telephone number and e-mail address. You can choose to give us more information about yourself, such as gender and date of birth.
- Purchase information: Information we receive when you shop in our online store, such as what you have purchased, card number and payment method (eg Visa). If you have a user account with us, you will get an overview of your previous purchases in your user account.
- Communication: Information you give us when you contact us, such as emails sent between us.
- Information about use of the website: Information we receive when you use our website and app, such as what kind of device you have (eg mobile or PC), IP address, which pages you visit and what functions you use there.
- Information from partners: Information we receive from our partners.
- Profiling information: Information and assumptions we make automatically based on the other information (mentioned above) we have about you, such as your preferences and interests and which demographic groups you belong to, and as information about place of residence and cultivation opportunities, unless you have objected to this.
3 What do we use the personal information for
We use your personal information for the following purposes:
- Offer website and app: We can use information to adapt our website and possibly the app to the technical equipment you use. We can also use the information to adapt the content on our website and possibly the app to what we think you are interested in.
- Carry out orders: We use information to carry out your purchases, e.g. to send you goods, receive payment and save purchase history
- Create user account: We use information if you create a user account, e.g. to give you access with username and password, to store your contact information and payment information, and for you to see your purchase history.
- Customer service: We store information that you provide and receive if you contact us to provide service and manage your membership / customer relationship.
- Statistics: We compile statistics to improve and further develop our products and services. As far as possible, we do this with anonymous information, without knowing that the information is specifically related to you.
- Marketing: We use your contact information (eg telephone number and email address) to send you recommendations and information about our offers. We may use profiling information to make the recommendations and information as relevant to you as possible, unless you have objected to this. If you wish, we will also send you recommendations and information about our partners’ offers.
The legal basis for purposes 1, 4 and 5 is our legitimate interest in being able to offer, further develop and market our services.
The legal basis for purposes 2, 3 and 4 is to fulfill our contract with you.
The legal basis for purpose 5 may also be your consent, if you have given us this. It may be necessary to send you marketing if you no longer have a user account with us, or if we send you inquiries about the work of our partners.
4 Who do we share personal information with
We may share personal information with companies that provide technical and administrative services to us, such as IT providers, but will limit this as much as possible, and in any case have agreements with them to ensure your privacy.
We may disclose information in individual cases, for example to public authorities, in case of suspicion of crime.
If you consent, we may share your personal information with our partners as described in your consent. This can e.g. be public service providers, such as the Norwegian Genetic Resource Center, so that they can send you recommendations and information that is relevant to you, or so that they can carry out their own market analyzes and service development.
We use IT suppliers outside the EEA. If we transfer personal data out of the EEA, we ensure that privacy is ensured through the conclusion of contracts. You can request more information or a copy of the security mechanisms we use to secure the transfer of the information.
We may also share anonymised information with partners for e.g. market analysis and service development.
5 For how long do we store personal information
We store information about you, only as long as it is necessary to achieve the purpose for which it was collected, or if we are required to store the information. The information will be deleted or anonymised when it is no longer needed to achieve the purpose. Below is an overview of how long we store your information:
- Information about you: If you have a user account with us, we will delete the information when you cancel the user account or if you have been inactive for more than 12 months. If you do not have a user account with us, we will delete the information three months after the last interaction took place, unless you ask us to save information for the next purchase.
- Purchase information: If you have a user account with us, we store your purchase history (overview of which memberships and other products or services you have purchased) for 12 months in your user profile. We will delete your card number three months after the last interaction, unless you ask us to save the information for the next purchase. We store transactions and payment information for 5 years in accordance with the Accounting Act.
- Information about use of the website: We store information about your use of our website for up to 6 months.
- Information from partners: We store any information from partners as long as you have an active user account with us or as long as you have consented. We will delete the information if you cancel the user account or the user account has been inactive for 12 months.
- Communication: We store communication with our customers for three years, unless we need to store it longer, e.g. in connection with complaints or claims.
- Profiling information: If you have a user account with us, we delete the information when you cancel the user account or the user account has been inactive for more than 12 months. We will delete the information sooner if you object to being profiled.
6 Your rights
You may have the right to ask us to:
- Provide you with additional information about how we process your personal information
- Give you a copy of personal information about you
- Update your personal information
- Delete information that we no longer have a basis for storing
- Limit or stop the processing of your information
- Oppose you automatic individual decisions, including profiling
- Provide you with information you have provided to us in a structured, commonly used and machine readable format or, where technically possible, ask us to transfer this to another company
- Withdraw any consent you have given us
Be aware that there are restrictions on these rights. Feel free to contact us if you want more information about this.
If you believe that we process personal data in violation of the Personal Data Act, you have the right to complain to the Norwegian Data Protection Authority. Before you do this, we would like you to contact us so that we can answer your questions or clear up any misunderstandings.
7 Website Cookies
We may use website cookies on our website to ensure functionality on the website, analyze web traffic and see which areas of our website you have visited.
The Electronic Communications Act received on 1 July 2013 and a provision on the conditions associated with the storage of information in communication equipment – the so-called “cookie section” (Electronic Communications Act §2-7b).
Cookies are used for personalization, login, language management and for statistics used to improve the website.
8 Changes to the Privacy Statement
We will be able to update the privacy statement from time to time. You will be notified of significant changes. You will always find the latest version of our privacy statement on the website / app.
If you would like to get in touch with us, you can use the following contact information:
Email: use form in the footer bar of the site
Address: Bi-O AS, Sørbråtveien 27, 0891 OSLO, NORWAY.