Processing of personal data in Airthings
When you use our website or any of our products, software or services Airthings will process your personal data. Below you will find information regarding which type of personal data that is being collected, the reasons for and purposes of why we collect the data and your rights regarding the processing of your personal data.
The controller of the personal data we process is Airthings AS by CEO Øyvind Birkenes.
Contact information for Airthings is:
- Address: Wergelandsveien 7, 0167 Oslo
- E-mail: email@example.com
- Telephone: +44 808 169 5752
- Organisation number: 993 092 045
For queries or questions regarding our processing of your personal data, you may contact firstname.lastname@example.org
1. The purposes of our data collection and what types of data we collect
We collect and process your personal data for various purposes depending on who you are and how we get in touch with you. We collect the following personal data for the purposes mentioned below:
- Sending out marketing materials, such as newsletters and information regarding our activities: The processing is necessary for the purpose of performing a contract with you as the data subject.
- Respond to incoming enquiries through our support channel and web application feedback channel: Name, telephone number, e-mail address and other personal data collected in connection with the enquiry. The processing purpose is based on the legitimate commercial interest of helping you with your enquiry.
- The recruitment of new vacancies and positions: CV, applications references and attestations. The processing of data is based on your given consent.
- Administration of your user account: Your name, e-mail address, user name and password. The processing purpose is based on the legitimate commercial interest of identifying our users and giving them access to a user account with their own credentials.
- Handling of your device: Data from your device, including location, time, sensor data, device identification, device name and details about air quality where the device is located. The processing purpose is based on the legitimate commercial interest in delivering and improving your user experience. Data regarding location, time and sensor data is processed based on the legitimate commercial interest in providing service to you around displaying and giving insights about air quality.
2. Disclosure of personal data to others
We do not give out or disclose your personal data to others unless there is a legal obligation for such disclosure. Examples as to basis for disclosure could typically be a contract with you or legal basis in the law instructing us to provide out the information. Airthings uses data processors to collect, store or in other way process data on our behalf. In such cases we have concluded data processing agreements to ensure the information security in all segments of the data processing. As of today we use the following data processors:
- Amazon. Data about you is processed by Amazon to provide customer support, handling your user account and handling the name, location and sensor data of your device. The processing is based on our legitimate commercial interest in processing these data for this purpose.
- Intercom. Data about you is processed by Intercom to provide customer support. The processing is based on our legitimate commercial interest in processing these data for this purpose.
- Consignor. Data about you is processed by Consignor to ship packages to your address. The processing is necessary for the performance of a contract with you.
- Ecombix. Data about you is processed by Ecombix to process orders in our web shop. The processing is necessary for the performance of a contract with you.
Slack. Data about you is processed by Slack to gather web application feedback. The processing is based on our legitimate commercial interest in processing these data for this purpose.
Hubspot. Data about you is processed by Hubspot to provide you with our newsletter. The processing is based on our legitimate commercial interest in processing these data for this purpose.
- Post Affiliate Pro. Data about you is processed by Quality unit to process orders in our web shop. The processing is necessary for the performance of a contract with you.
Your personal data might be transferred to countries outside the European Economic Area (third countries) in order to provide you services and where we use subcontractors. We always make sure that appropriate and suitable safeguards compliant with applicable laws are in place to protect your personal data.
Transfer to third countries will be protected by appropriate safeguards, namely the use of standard data protection clauses adopted or approved by the European Commission, a copy of which can be obtained from https://ec.europa.eu/info/law/law-topic/data-protection/data-transfers-outside-eu/model-contracts-transfer-personal-data-third-countries_en. Transfer to the United States will be either be subject to and protected by the said standard data protection clauses, or subject to the EU-US Privacy Shield Framework (for the data protection requirements under the EU-US Privacy Shield, see www.privacyshield.gov).
3. Storage period
We only store your personal data for as long as necessary for the purpose the data was collected for.
This means that personal data collection based on your consent will be deleted if you withdraw your consent. Data processed for the purpose of our newsletter will for instance be deleted after withdrawal of your consent.
Personal data we process in the performance of a contract with you will be deleted when the contract is implemented and all obligations pursuant to the contract have been implemented. Personal data related to your user account, including location data, is retained until you delete your account. Personal data related to shipment of packages is deleted after 2 years of last shipping date.
Sensor data collected from your device is deleted upon your request.
4. Your rights when we process your personal data
You have the right to obtain access to, correction and deletion of your personal data processed by us. You also have the right to obtain restriction of processing, direct objection to the processing and obtain the right to data portability. You can read more about the extent of your rights in the web pages of the Norwegian Data Protection Authority: www.datatilsynet.no.
To assert your rights please contact us through the aforementioned contact details. We will answer your request as soon as possible and in all cases no later than 30 days.
You can always withdraw your consent to our processing of your personal data. The easiest manner to withdraw your consent is to contact us through email@example.com.
If your opinion is that our processing of your personal data is not in compliance with the described manner here or in other ways not in compliance with the general data protection regulation, (GDPR) you can file a complaint to the Norwegian Data Protection Authority (Datatilsynet).
You can find information about how to contact the Norwegian Data Protection Authority on the web pages of the Authority: www.datatilsynet.no.
If there should be a change in our services or a change in the regulation regarding the processing of personal data, this can cause changes in the information given in this notice. If we have your contact information we will make you aware of these changes. In all cases updated information will always be easily accessible on our web pages.