"You," "your," and "User" mean each and every person who accesses or uses our Site or any Service (as defined in the applicable Terms and Conditions). The words "Ordinary Objects," “us,” and “we” mean Ordinary Objects AS.
Note, however, that other third parties may be the data controller for processing other information. If you for example have gained access to Ordinary Objects through a company you are affiliated with, the company will be responsible for processing for most purposes, while Ordinary Objects will be the data processor on behalf of the company. If you want more information about how third parties process your personal information, you can read more about this in the relevant third parties’ privacy statement.
2. About the collection of personal information
2.1 Purpose and legal basis of the processing
Ordinary Objects processes your personal data to pursue legitimate interest and in order to fulfil Ordinary Objects’s contract with you or with the data controller, and to provide you with the Services. This includes the following purposes.
- manage your access to the Software, which means creating a user to give you access to a virtual workshop,
- notify you that you have been invited to participate in workshops,
- give you the opportunity to store your content in the Software,
- improve and develop the Software.
- analyze how users use the Software
2.2. Which personal information we collect
Ordinary Objects processes the following personal data:
- Affiliation to a specific company or client that has acquired the Software
- Visitor statistics (website?)
- Usage pattern
2.3. Processing basis
We process personal data on the basis of the performance of the contract, meaning the services we provide to you, and for our legitimate interests, such as improvement of the services. We create and manage user accounts to give you access to the Software and process user behaviour information in order to develop and improve the Software, based on our legitimate interests. Our assessment is that the processing is necessary for purposes related to our legitimate interests and that these take precedence over your privacy.
2.4. Storage of personal information
Your personal information is only stored for as long as it is necessary to achieve the purpose of the processing. When it is no longer necessary to process the personal data, we will delete it, unless storage is required by law.
2.5. Sharing of personal information
In some cases, we share personal information with our subcontractors, such as cloud storage service providers, who are engaged by us to provide services. These subcontractors process personal information on our behalf and only in accordance with our instructions. In order to retain and secure your personal information, we always enter into data processor agreements with our subcontractors. All processing of your personal data takes place within the EU/EEA, unless authorized under the Chapter 5 of GDPR.
3. Your rights
When we process personal information about you, you are registered. As a registered user, you have the right to:
- Request access to your personal data that is being processed by us. You may request information on the purposes of the processing, the categories of personal data concerned, the envisaged period for which the personal data will be stored, any available information as to the personal data’s source, amongst others. Your right to access may be limited by national law;
- Request rectification of inaccurate personal data concerning you. Considering the purposes of the processing, you have the right to have incomplete personal data completed, including by means of providing a supplementary statement correction of any errors in the personal data we have stored about you,
- Request deletion of personal data concerning you, unless processing is necessary for exercising the right of freedom of expression and information, for compliance with a legal obligation, for reasons of public interest or for the establishment, exercise or defense of legal claims;
- Receive the personal data concerning you, which you have provided to us, in a structured, commonly used and machine-readable format and have the right to transmit those data to another controller ('right to data portability'); and
- Lodge a complaint with a supervisory authority.
Please note that exceptions to the mentioned rights may apply. For example, we may not disclose personal information if it violates the duty of confidentiality, or if we are required by law to store the information. If you wish to exercise your rights as registered, you can send us an email at firstname.lastname@example.org. In order for us to be able to make sure that you are who you claim to be, we may ask you to identify yourself.
You can exercise your rights by emailing us at email@example.com.
4. Contact information and complaint
If you wish to complain about our processing of personal information, you can contact the Norwegian Data Protection Authority. Contact information for the Norwegian Data Protection Authority can be found here.