Privacy policy

GDPR in a nutshell

What has happened: On May 25, 2018, Regulation (EU) 2016/679 of the European Parliament and of the Council of 27 April 2016 (more commonly known as "GDPR") entered into force in most countries in Europe. GDPR will also apply in Norway.

New for you: The GDPR largely continues the current regulations for the processing of personal data, but also introduces some new obligations for us and rights for you.

What rights you have:

Information: You are entitled to information about what personal data we process about you and how we process it.

Access: You may request a copy of the personal information we hold about you.

Rectification: You can demand to have your personal data corrected or supplemented.

Deletion: You can request deletion of all personal data, unless the data is necessary to provide a service to which you still wish to have access or we are required by law to retain the data for a certain period of time.

Restriction: You may request that we restrict the use of your information.

Data portability: You may request that your data be transferred to you or to another business in a structured, commonly used and machine-readable format.

Objection: You can request that we do not use your data for direct marketing purposes, including profiling for use in direct marketing. You can also object to being the subject of individual decisions of a legal nature that are exclusively automated.

What you should do:
You should read our privacy policy which gives you more information about your rights and how we process your personal data.

Privacy policy

Who we are: Solid Media AS, reg. no. 917 821 992 ("We", "Us" or "Our").

What we think about privacy: We are committed to processing your personal data in a safe and trustworthy manner.

How you share your personal data with us: In connection with you ("You", "You" or "Your") contacting Us at https://www.solidmedia.no or visiting the aforementioned website (the"Website") and making use of our digital marketing services (the"Services" or "Services"), personal data about You will be collected.

What a privacy notice is: This privacy policy ("Privacy Policy") contains information You are entitled to when information is collected from Our Website or Our Services and general information about how We process personal data. The Privacy Policy is governed by Norwegian law and may be updated from time to time, including as a result of changes in applicable data protection legislation or because Our Services are expanded or changed. We will notify You if this requires new consent from You.

Why you should read it: The purpose of this Privacy Policy is to inform You of Your rights, as well as Our policies and procedures for processing the personal data We receive from You through Your use of Our Website or Our Services. Please read this Policy carefully to get a clear understanding of how We collect, use, protect or otherwise process Your personal data.

How we have structured the declaration:

In order to achieve Our overall vision, We designed this Privacy Notice in a modern and reader-friendly format so that You do not have to read everything to find the answer to Your specific question. Please click on one of the topics below to be directed to the relevant information:

1. Consent form
2. Electronic marketing
3. Data controller
4. What is personal data?
5. What personal data do we process?
6. When do we process personal data?
7. The purpose of our processing?
8. How long will the personal data be processed?
9. Disclosure of personal data to third parties
10. Third party links
11. Information cookies
12. Security and safety
13. Transfer of personal data abroad
14. Your rights
15. Amendments
16. Contact us

1. Consent

In order to use Our Website or Services, it is necessary for You to provide Us with certain requested personal data. If You do not wish to provide Us with such required information, unfortunately We cannot provide You with access to requested Services.
By using Our Website or Our Services, You confirm that You have read and that You understand and consent to the contents of this Privacy Policy and to Our processing of Your personal data.
You may withdraw Your consent at any time by contacting Us as set out in section 16. Please note, however, that this may result in Us no longer being able to provide Our Services to You.
If children under the age of 13 have provided Us with personal data, We will delete the data as soon as We become aware of the situation. Parents can contact Us as set out in section 16.

2. Electronic marketing

By accepting this Privacy Policy, You may also consent to receive newsletters and favorable offers, as well as Your personal data being processed for marketing purposes within the following categories:

Targeted advertising in paid channels

Consent to marketing is not required to use Our Services and You may withdraw Your consent at any time by contacting Us as set out in clause 16.

However, if You withdraw Your consent to receive direct marketing from Us, We will not delete Your data from Our databases unless You expressly ask Us to do so.

3. Data controller

We, represented by the Chairman of the Board, are the data controller for the processing of personal data in connection with our business in accordance with the personal data legislation in force at any given time. Data controller means the person who determines the purpose of the processing of personal data and the tools to be used. The data controller has the overall responsibility for the processing of Your personal data.

Our General Manager is responsible for the day-to-day follow-up of matters relating to privacy in the business.

4. What is personal data?

Personal data means information that can be linked to a natural person, such as information about name, place of residence, telephone number and e-mail address. Processing refers to any use of personal data, such as collection, registration, compilation, storage and disclosure.

5. What personal data do we process?

By using Our Services, We may process Your personal data, including but not limited to:

a: Address

b) age

c) Workplace

d) Payment information (e.g. payment history, including date and time, amount charged, debit and credit card information and other related transaction details)

e) Your use of Our Services (e.g. search history and communication between You and Us)

f) e-mail address

g) Date of birth

h) Gender

i) mobile phone number

j) name

k) Personal identification number

l) Position

m) phone number

n) Education and training

In principle, We do not process sensitive personal data about You, unless it is relevant or necessary in order to provide Our Services. In cases where We wish to process sensitive personal data, We will first seek to obtain Your consent. If such information is disclosed, You consent to Us processing such sensitive personal data in line with this Privacy Policy for the purpose expressly stated at the time of Your disclosure of the personal data.

6. When do we process personal data?

We process personal data You provide through Your use of the Services, through ongoing communication with Us, when You subscribe to a newsletter, respond to a survey or marketing communication, order services or products from Our partners, visit the Website, use certain features on the Website or fill out a form.

7. The purpose of our processing of your personal data

We are committed to processing personal data in a way that allows You to feel confident that information about You is treated confidentially.

Unless You have consented to electronic marketing, We will only process personal data that is necessary for You to make use of Our Services.

We will process personal data that We receive directly from You, Our business partners or by technical means (such as automatic registration via Our servers) for the purposes described below and in order to provide, monitor and analyze the use of Our Services and carry out maintenance and improvements.

The purpose of Our processing of Your personal data is to serve Your use of Our Services in the best possible way. When You provide personal data to access Our Services, We will process Your personal data in order to:

a) Administer a survey, Your use of the Website or Our Services.

b) Process orders and transactions and send You information and updates regarding such orders and transactions.

c) Follow up on Your requests.

d) Provide You with customer service when We respond to Your requests for assistance.

e) Conduct internal investigations and risk assessments.

f) Keep you informed about Our offers, Our Services and news.

g) Detect and prevent fraud, spam, abuse, security incidents and other malicious activity.

h) Send You service or operational notifications, such as updates, security alerts and account alerts.

i) To provide, improve, maintain and protect Our Services and its content in order to provide You with better customer service.

k) Verify You as the copyright holder and information You have made available through Our Services.

We also conduct anonymized analyses in order to improve Our Services. Such analyses will be carried out using aggregated and anonymized personal data, and it will not be possible to use this data to identify You as an individual.

If You have consented to electronic marketing, You will also be able to receive information with offers and news from Us and Our partners within the categories specified in section 2.

We will not use the personal data for any purpose other than the stated purpose, unless there is express consent from You for use for another purpose. Personal data beyond this is processed in accordance with separate consent from You. Such consent may be withdrawn at any time by contacting us as stated in section 16.

8. How long will the personal data be processed?

We will not store Your personal data longer and to a greater extent than necessary to fulfill the purposes set out in this Privacy Policy, unless a longer retention period is required by applicable law, for example under the Bookkeeping Act. Retention of anonymized data is not subject to such limitations or requirements.

The period of time that We store personal data will vary depending on the use of Our Services and the personal data concerned.

When Your personal data is no longer necessary for Our purposes, We have procedures to delete or anonymize the personal data.

9. Disclosure of personal data to third parties

We work with third parties to provide Our Services and We may share your personal data with organizations that are Our service providers or partners and that are involved in:

a) Marketing activities

b) Data processing, maintenance, review and development of our business systems, procedures, infrastructure and other IT operations, including testing or upgrading Our computer systems or otherwise facilitating Our Services.

c) Accounting services

d) Debt collection activities

These third parties only have access to Your personal data for the purpose of fulfilling Our obligations to You, providing Our Services or if You have otherwise consented to this.

Before We disclose personal data to organizations performing services on Our behalf, We will require the service providers to use such personal data only for the purpose of providing such services to Us and We will obtain the safeguards deemed necessary for the protection of Your personal data.

In cases where We use subcontractors who process personal data on behalf of Us, We sign separate data processing agreements and You can rest assured that Your data will only be used for the purpose agreed with the supplier. This means, for example, that those who invoice for Us will only use the information they receive from Us to invoice, and nothing else.

For security reasons, We do not disclose the names of Our subcontractors in this Privacy Policy.

We will not otherwise share Your personal data with third parties unless disclosure of the personal data occurs:

a) With the consent of the data subject.

b) Pursuant to law or regulations issued pursuant to law.

c) By order of a court or other authority.

d) As part of payment collection etc. where there are objective reasons.

All third parties who receive personal data from Us are obliged to comply with Our personal data processing standards or equivalent standards, as well as obligations arising from the data protection legislation in force from time to time.

If required by law or if there is a suspicion that a crime has been committed in connection with the use of Our Services, personal information We have stored about You may be disclosed to public authorities.
We will, from time to time, disclose anonymized information to Our partners.

The personal data will be aggregated within Us before being disclosed, in anonymized form, to third parties.
If personal data may be subject to transfer to another organization in connection with a merger, financing, reorganization or dissolution transaction of all or part of Us, We will transfer Your personal data if the parties involved have entered into an agreement whereby the collection, use and sharing of the personal data is limited to the purposes above that are affected by the transaction.

The personal data shall only be used by the parties involved to carry out and complete the transaction. If another company acquires Us or Our business or assets, that company will have access to the Personal Data collected by Us and will assume the rights and obligations regarding Your Personal Data as described in this Privacy Policy.

10. Third party links

From time to time, at Our discretion, We may include or offer third party products or services on Our Website. We may also have links on Our Website to other websites that are not under Our control. These links are provided for information purposes only. These third party websites have separate and independent privacy policies. We encourage You to read the privacy policy of each website You visit. We have no responsibility for the content and activities of these websites.

11. Information cookies

We use cookies on Our Website. Our use of cookies is governed by Our Cookie Policy. We treat information collected through the use of cookies as non-personal information, with the exception of IP addresses or similar identifiers.

We use Facebook Pixel tracking to, among other things, assess the effectiveness of our social media campaigns and to deliver targeted marketing that we believe may be relevant to you and your interests.

For example, We may use tracking and marketing cookies to tailor the marketing and content made available to You on Our Website so that You do not see the same type of marketing on every visit and to measure the effectiveness of our marketing campaigns. For more information, please read Facebook's terms and conditions.

We use a tool called "Google Analytics" to collect data about Your use of Our Website. Google Analytics collects data such as how often You visit Our Website, what pages You visit when You do, and what other websites You visited before coming to Our Website. We use the data We receive from Google Analytics only to improve Our Website.

Google Analytics only collects the IP address assigned to You on the date You visit Our Website, rather than Your name or other identifiable information. We do not combine the data we collect using Google Analytics with personal data. Although Google Analytics creates a permanent cookie in Your browser to identify You as a unique user the next time You visit Our Website, the cookie cannot be used by anyone other than Google.

Google's ability to use and share information collected by Google Analytics about Your visits to Our Website is governed by the Google Analytics Terms of Service. You can prevent Google Analytics from recognizing You on return visits to Our Website by disabling cookies in Your browser.

12. Safety and security

The protection of Your personal data is important to Us. Therefore, We make every effort to maintain and use reasonable measures of physical and technical security of offices and information storage facilities to prevent loss, misuse, unauthorized access, disclosure or modification of Your personal data.
Your personal data is processed behind secured networks and is only accessible to a limited number of persons who have special rights to such systems and who are required to keep the personal data confidential. We use computer systems with limited access, located in facilities with physical security measures.

We evaluate Our data collection, storage and processing practices, including physical security measures, to protect unauthorized access to Our data systems.

All credit card payment transactions are processed through a gateway provider and are not stored or processed on our servers. In addition, all debit and credit card information you provide is encrypted via Secure Socket Layer (SSL) technology.

If an employee of Us misuses Your personal data, this will be considered a serious breach for which We may take disciplinary action, including termination. If an individual or organization misuses personal data they have received to assist with the provision of the Services, this will be considered a serious breach where We may take appropriate action, including termination of agreements between Us and the individual organization.

In case of discrepancies regarding your personal data, we will notify you by e-mail within 4 working days.

13. Transfer of personal data abroad

Your Personal Data may be transferred within the European Economic Area and other countries deemed by the European Commission to have an adequate level of protection of personal data on the basis of Article 45 of Regulation (EU) 2016/679. Your consent to this Privacy Notice represents Your agreement to this transfer. You can rest assured that We will only transfer personal data to third parties that We deem to have implemented adequate technical and organizational measures to secure your personal data.

14. Your rights

You have a number of privacy rights and we have worked to make it easy for you to exercise these rights with Us by contacting Us as set out in section 16.

Your rights include:

a) Information: You are entitled to information about what personal data we process about you and how we process it.

b) Access: You may request a copy of the information We hold about You.

c) Correction: You can demand correction and supplementation of information about You.

d) Deletion: You may request deletion of all personal data about You, unless the data is necessary to provide a service to which You still wish to have access or We are required by law to retain the data for a certain period of time.

e) Restriction: You may request that We restrict the use of Your information.

f) Data portability: You may request that Your data be transferred to You or to another business in a structured, commonly used and machine-readable format.

g) Objection: You may request that We do not use your data for direct marketing purposes, including profiling for use in direct marketing. You may also object to being subject to individual decisions of a judicial nature that are exclusively automated.

Please note that these rights are subject to certain restrictions imposed by law.

In Norway, the processing of personal data is mainly regulated by the Personal Data Act, but a number of other laws such as the Electronic Communications Act, the Marketing Act, the Bookkeeping Act and the Accounting Act also provide guidelines for how such information should be processed.

To protect Us from fraudulent access requests, We may require sufficient information from You to confirm that the person making the request is authorized to do so.

If You wish to exercise Your rights, please contact Us as set out in clause 16.

15. Amendment

The privacy policy and terms will be updated from time to time, e.g. as a result of Our Services being expanded or changed, and We will notify You if this requires new consent from You. In the event of major changes, We may also attempt to contact You directly through available channels such as e-mail or notifications on the Website.

16. Contact us

If You wish to exercise Your rights of access, rectification, erasure, restriction, data portability or objection of personal data or if

If you have any questions or requests regarding this Privacy Policy, Our processing or wish to complain about Our processing, please contact Us at support@solidmedia.no">support@solidmedia.no.

We will review all complaints and if a complaint is found to be justified, We will take all reasonable steps to resolve the issue.

You also have the right to lodge a complaint with the Norwegian Data Protection Authority about any matter relating to the processing of your personal data.

You can find information on how to contact the Data Protection Authority on the Data Protection Authority's website.