It is important to us that the personal data we process is secure and only used for legitimate and agreed purposes.
This privacy policy provides information about how Servion AS processes personal data about customers, suppliers and visitors to our website.
We encourage you to read this policy carefully.
In accordance with the Personal Data Act (Act of 15 June 2018 No. 38) and the General Data Protection Regulation (GDPR), we are obliged to process personal data in a lawful, fair and secure manner.
1
Data controller
Servion AS (org.no. 937 131 259 MVA) is the data controller for the processing of personal data as described in this policy.
Contact information:
Servion AS
Orkdalsveien 30
7300 Orkanger
Email: [email protected]
Phone: +47 96 00 59 70
The general manager has the overall responsibility for the company's processing of personal data.
2
What is personal data
Personal data is any information that can be linked to an identified or identifiable natural person. Examples include name, address, phone number, email address and information about housing or technical installations that can be linked to a person.
3
Which personal data we process
Servion processes personal data in connection with:
- Inquiries via website, phone, email, chat and social media
- Ordering service, installation or inspection
- Entering into service agreements and subscriptions
- Invoicing and accounting
- Customer dialogue and customer service
- Marketing where consent has been given
We may process, among other things:
- Name
- Address
- Phone number
- Email address
- Invoice information
- Information about housing and technical installations (for example type of heat pump, serial number and service history)
- Communication between the customer and Servion
- Photos taken in connection with service (for documentation of work)
We do not process more personal data than is necessary for the purpose.
4
Purpose of processing
The purpose of processing is to:
- Deliver inspections, service, installation and maintenance
- Administer service agreements and subscriptions
- Document completed work
- Fulfil agreements with customers
- Provide customer service and follow-up
- Fulfil legal obligations (accounting, bookkeeping, etc.)
- Improve our services
5
Legal basis for processing
Processing of personal data takes place on the following legal bases:
Contract (GDPR Art. 6(1)(b))
Processing is necessary to fulfil agreements regarding service, installation or subscriptions.
Legal obligation (GDPR Art. 6(1)(c))
Processing of invoice and accounting information in accordance with the Bookkeeping Act.
Legitimate interest (GDPR Art. 6(1)(f))
Follow-up of customer relationships, improvement of services and necessary internal administration.
Consent (GDPR Art. 6(1)(a))
When sending newsletters or using non-essential cookies.
6
Cookies
Servion uses cookies on servion.no to:
- Ensure that the website functions technically
- Analyze traffic and usage patterns
- Improve user experience
For strictly necessary cookies, we rely on legitimate interest. For analytics and marketing, consent is obtained in accordance with the Electronic Communications Act section 2-7 b.
7
Sharing of personal data
We do not share personal data with third parties beyond what is necessary to deliver our services.
We use subcontractors in areas including:
- Accounting
- IT operations and cloud solutions
- Payment solutions
- CRM and service solutions
These process personal data on our behalf and in accordance with a data processing agreement.
We may also be legally required to disclose information to public authorities.
As a general rule, we do not transfer personal data outside the EU/EEA. If such transfer occurs, it will take place in accordance with applicable regulations.
8
Retention and deletion
We store personal data as long as necessary to fulfil the purpose of processing.
Accounting information is stored in accordance with the requirements of the Bookkeeping Act (normally 5 years).
Service history may be stored as long as the customer relationship exists, and for a period after termination in order to document previous work and safeguard complaint and warranty responsibilities.
Information is deleted or anonymized when it is no longer necessary.
9
Your rights
You have the right to:
- Access to which personal data we process about you
- Correction of inaccurate information
- Deletion of information where the conditions are met
- Restriction of processing
- Data portability
- Object to processing based on legitimate interest
- Withdraw consent
Requests regarding rights should be sent to [email protected].
We will respond to requests without undue delay and no later than within 30 days.
10
Information security
Servion carries out regular risk assessments and has established technical and organizational measures to ensure confidentiality, integrity and availability.
Access to personal data is granted only to employees with a work-related need. All employees are subject to confidentiality obligations.
In the event of breaches of personal data security, we will handle this in accordance with applicable regulations.
11
Complaint
If you believe that our processing of personal data is not in accordance with the regulations, you have the right to lodge a complaint with the Norwegian Data Protection Authority (Datatilsynet).
We nevertheless recommend that you first contact us so we can clarify any misunderstandings.
12
Changes to the privacy policy
We may update the privacy policy as needed, for example due to changes in legislation or in our services. An updated version will always be available on servion.no.