Data Privacy Policy

This data privacy policy explains how we collect and use (process) personal data in our business. Bino Training AS is responsible for the treatment.

Bino Training AS
Company address: Neuberggata 25A,  0367 OSLO
Org.nr.: 927 552 051
E-mail: post@binotraining.com

We take your privacy seriously and we have taken several measures to ensure that we provide you with clear information about how we process your data and what rights you have. If you feel that something is unclear or missing, please do not hesitate to contact us.

Your rights

‍Contact us if you have questions about or want to exercise one of your rights. You are entitled to a response within 30 days at the latest. Read more on the Norwegian Data Protection Authority's website.

- Access to and correction of your own information: You can request a copy of all information we process about you, and ask us to correct information that is incorrect.
- Deletion or restriction: In some situations, you can ask us to delete and/or limit the processing of information about yourself, but we cannot delete data we are required to process.
- Object to processing: If we process information about you on the basis of legitimate interest, you have the right to object.
- Data portability: If we process information about you based on consent or a contract, you can ask us to transfer information about you to you or to another data controller.
- You also have the right to withdraw your consent at any time.
- If you are not satisfied with the processing of your data, you can complain to the Norwegian Data Protection Authority, but we hope that you will tell us directly first so that we can try to resolve the matter for you in a good way.

We process data on behalf of:

- Customers
- Potential customers
- Contact persons at suppliers and partners
- Visitors to the website
- Job seekers
- Employees
- Former employees

How is information obtained?

‍It is voluntary to provide us with personal information, but in order to carry out a transaction, we do need some information from you. We neither rent, buy nor sell personal data from/to others. We do not use automated decisions or profiling in the processing of your personal data, and we do not process special categories of personal data beyond what applies in a normal employment relationship.

‍We process personal data when you:

- Buy our products/services
- Contact us by phone, SMS, our website, e-mail or social media
- Sign up for the newsletter
- Register for events organized by us
- Answer a survey
- Use our website

Purpose, legal basis and storage

‍According to Article 6 No. 1 of the Personal Data Protection Regulation, we process personal data on the basis of:
‍
a) Your consent
b) An agreement we have entered into
c) A legal obligation we have
d) A legitimate interest we believe we have

As a general rule, personal data must not be processed and stored for longer than is necessary to fulfill the purpose of the processing. To comply with this, we have annual GDPR audits where we formally assess and review our privacy work. The purpose is to change, update and, if necessary, delete personal data. In general, we will not process personal data for longer than 3 years. However, we will retain data for as long as we are required to do so by applicable legal obligations, for example related to accounting, tax or employment legislation, and/or other relevant rules and regulations.

Your personal data will only be stored as long as we have a purpose and a legal basis:

- Until you withdraw your consent (e.g. related to marketing via e-mail and SMS)
- As long as we have a contractual obligation, and possibly in accordance with accounting and bookkeeping rules (e.g. related to sales)
- As long as we have a legal obligation and in accordance with applicable laws and regulations (e.g. related to employment)
- As long as we have a legitimate interest or until you ask us not to process your personal data in such a way (e.g. related to marketing to existing customers)

You can contact us at any time if you want us to stop processing or delete your personal data. We will fulfill our obligations under relevant legislation. Note that we cannot delete personal data we are legally obliged to process.

We also have routines to ensure that personal data is deleted from all relevant systems when we no longer have a purpose and/or a legal basis for continuing to process them.

How we process personal data

‍Here we describe in detail when and how we process your personal data, for what purposes, on which legal basis and for how long.

We process personal data when:

1) You communicate with us
When you give us your business card or contact us via the website (contact form, comment field, chat or similar), by e-mail, via telephone (call, text message) or social media, we process personal data. Depending on where and how you send us a message, this may be your name, contact information, IP address and other information you choose to send to us. We use a CRM (Customer Relationship Management) and a customer support system to process personal data about potential and existing customers.

The purpose is to be able to respond to inquiries from you, for history, and to have documentation in case we receive claims, complaints or legal claims. The legal basis is f), where the legitimate interests are to be able to respond to inquiries from you, for history, and to have documentation in case we receive claims, complaints or legal claims. We review, archive and delete inquiries as necessary, but no less often than every 3 years. Accounting material is kept for up to five years, according to the rules in the Bookkeeping Act.

2) You buy our products and services (Membership)
‍When you buy products and services from us, we process personal data such as name, contact information, order and payment information and purchase history.

- Name
- Date of birth
- Gender/Height/Weight
- Activity level (optional)
- Injuries or medical conditions relevant for the training (optional) 

The purpose is to be able to deliver products and services to you after order/purchase, to have a history of sold products and services and otherwise to manage and follow up the customer relationship with you. The legal basis is b) agreement and c) legal obligation according to e.g. the Bookkeeping and Tax Act. Accounting material is kept for up to five years, according to the rules in the Bookkeeping Act.

3) Marketing in existing customer relationships
‍When you become a customer with us, we process personal data as mentioned above. If you have an existing customer relationship with us, we will be able to send you marketing by e-mail and SMS, in line with Section 15 of the Marketing Act.

The purpose is to be able to provide good customer service. The legal basis is f), where the legitimate interests are to be able to offer you relevant products and services. The legal basis can also be a), where you have given us your consent. You can unsubscribe from e-mail and SMS marketing at any time. Information on how to unsubscribe is stated in all e-mails and SMSs we send that are linked to marketing. The information is stored as long as the customer relationship exists, until you unsubscribe or until you object to the processing, if necessary.

4) You are applying for a job or working with us
‍When you apply for a job with us, we process personal data such as name, contact information, CV and other information we need to be able to assess your application. The legal basis is b) agreement, and possibly article 9 no. 2 b) and h) if your application contains special categories of personal data. The information is deleted after a person has been selected for the job, unless you have consented to us storing your information for longer in the event that you wish to apply for a job at a later time.

For employees, we process personal data as mentioned above, in addition to information that is necessary to be able to pay salaries and otherwise administer the employment relationship. The legal basis for this is b) agreement, c) legal obligations according to applicable laws for employment relationships and possibly article 9 no. 2 b) and h) in the case of special categories of personal data. Information about employees is deleted as a general rule when the employment relationship ends, unless special reasons (such as a dispute about dismissal or dismissal) make it necessary to keep them longer. Information related to salary administration is kept for up to five years, according to the rules in the Bookkeeping Act.

5) You sign up for the newsletter
‍We send out newsletters by e-mail with information about new articles, blog posts, discounts, offers, videos, checklists and similar. The newsletters occasionally contain information about our products and services. When you subscribe to the newsletter, we process personal data such as name, contact information and IP address.The purpose is to be able to inform about relevant news and offers, as well as to provide good customer service to potential and existing customers. The legal basis is a) consent. Subscribing to the newsletters is voluntary and you can withdraw your consent (unsubscribe) at any time by clicking on "unsubscribe" at the bottom of one of the emails.

The supplier we use to send out newsletters has integrated analysis that shows that subscribers open and possibly click on links in the newsletters. This functionality is integrated into the system and cannot be disabled. If you do not want your data to be analyzed in this way, you should not become a subscriber. We use the data to analyze the results of the newsletters and to tailor the content to our subscribers. The legal basis is f), where the legitimate interest is to continuously improve our products and services. The data is kept for as long as you subscribe and it is then deleted at our next GDPR audit.

6) You sign up for an event
‍When you participate in free events with us, we process personal data such as name and contact information. For payment arrangements, we also collect order and payment information. The purpose is to be able to offer relevant courses, lectures and workshops or to fulfill an agreement on an ordered event. The legal basis is a) consent or b) agreement and c) legal obligation according to e.g. the Bookkeeping and Tax Act. We may also use your personal data to send you a request for an evaluation of the event you attended, and possibly invite you to other similar events. The legal basis is f), where the legitimate interest is to continuously improve our products and services, and offer you good customer follow-up.

The information is kept until you request that it be deleted or at the latest up to 36 months after the event, or, by agreement, up to five years according to the rules in the Bookkeeping Act.

7) You answer a survey
‍We always inform about the purpose of the surveys we carry out, and whether they are anonymous or not. We do not share the information with others, or use it for purposes other than what we have stated. In the case of anonymous surveys, we do not collect personal data. The legal basis for surveys that are not anonymous is a) consent. The information is kept until you request that it be deleted or at the latest up to 36 months after you answered the survey.

8) You are a supplier or collaborate with us
‍When you enter into an agreement with us either as a supplier, partner or data processor, we process personal data such as name, contact information and correspondence. The purpose is to be able to enter into an agreement with you and the legal basis is b) agreement. The information is kept for up to five years according to the rules in the Bookkeeping Act. We process personal data related to general correspondence and communication as described above.

9) You use our website
‍When you use our website, we process personal data in line with our cookie statement. The purpose is to manage our website, promote the company and respond to inquiries from visitors. The legal basis for cookies that store or process information that falls under § 2-7b of the Electronic Communications Act is consent through a preset in your browser, in line with Nkom's recommendations as described here (May 2020).

Who we share personal data with
‍In order to run our business efficiently and securely, we sometimes need to share your personal information with parties such as:

- Data processors: providers of various services that process your personal data on our behalf (for example for IT and administration services, accounting, cloud storage, web hosting, sending e-mails and the like)
- Professional advisers from industries such as lawyers, finance, accounting, auditing and insurance
- User support for IT and administration systems
- Public authorities we are obliged to report to

We require that everyone we share your personal data with secures your data in accordance with good information security and in accordance with the requirements of the Personal Data Protection Regulation. We enter into a data processing agreement with everyone who processes data on our behalf.

Transfer of personal data outside the EU/EEA
‍In some cases, your personal data is transferred outside the EU/EEA, for example where we use suppliers outside the EU/EEA to handle the sending of newsletters, to process customer data, to make products and services available on our website, to enable payment, for security on our website and otherwise to be able to run our business in a safe and efficient way.

The transfer of personal data to outside the EU/EEA is only permitted to countries approved by the European Commission, or under the necessary guarantees according to the Personal Data Protection Regulation. This could be, for example, the EU's standard contracts. If you want to know which suppliers we use outside the EU/EEA, and get access to documentation of necessary guarantees, you can contact us.

Safety
‍We take information security seriously, and we will always do our utmost to safeguard your personal information in the best possible way. Among other things, we use strong passwords, encryption of data, access control, backups and two-factor authentication to secure our data and prevent unauthorized persons from gaining access to view, change, delete or in any way influence the data we store, including your personal data.

We only use reputable providers of IT and administration services such as web hosting, website and PC security, virus software, e-mail provider, backup, and more. We only allow others to access and/or process your personal data in accordance with our instructions, and only where strictly necessary (e.g. for IT support).

Third party cookies
‍Bino Training uses third-party cookies (such as Google Analytics, Tag Manager, Facebook Pixel and Intercom) to register the type of services our visitors are interested in, and to measure the traffic on our websites. Bino Training uses this information to improve the website, customize our offers and customer services. Bino Training uses both temporary and persistent third-party cookies. The persistent third-party cookies are not stored on your computer for longer than 13-24 months.

‍Avoid cookies
‍If you do not want to accept the use of cookies, you can adjust the settings in your browser (often under Internet selection) to automatically reject cookies or to inform you every time a website wants to store a cookie. Please note that if you choose to automatically reject cookies, not all functionalities on Bino Training’s website will be available to you.

‍Deletion of cookies
‍You can also delete cookies that have been stored on your computer. You do this via the menu in your browser. How this is done depends on your browser.Cookies that detect JavaScript propertiesTo access all the features of a website, your browser should be set to enable JavaScript. If it is not allowed in your browser you will see a modified version of the web pages. The settings for the browser can usually be found under Tools / Settings in the menu on your browser.

‍Consent to the use of cookies
‍If your settings in your browser are set to accept cookies, you agree that Bino Training uses cookies when you visit our website.

Privacy notice
‍We may, without prior notice, change or update this privacy policy. Updated privacy policy is available at www.binotraining.com 

‍Bino Training AS will at all times follow the applicable regulations for privacy. Questions can be directed to post@binotraining.com