Privacy policy
Types of Data collected
IP address and browser/device information
In order to create usage statistics to analyse and improve this website, Open Concept AS records your anonymised IP address, certain elements of your browser/device configuration (such as screen size, browser type, operating system and device type) and your approximate location, if available.
The analytics tool we use is called Matomo and is maintained by us. Your IP address is anonymised and your full IP address is not stored. Usage information is aggregated and not identifiable on an individual basis, and is not sent to third parties.
The legal basis for collecting this information is our legitimate interest to analyse usage in order to operate, maintain and improve our website.
Cookies
The website uses cookies (small text files written by your browser to your device) to track returning visits and navigation paths through the website. Cookies are not required to use this site, and may be turned off. If you don’t know how, the easiest way to find out is to search for “disable cookies” (followed by the name of your browser) in your preferred search engine.
The website is fully usable with cookies turned off. If you want to turn them off, consult this guide.
However, many websites are dependent on cookies to function properly (especially webshops). It can therefore be a good idea to install a browser plugin to control the use of cookies (and other tracking mechanisms) on a site-by-site basis. Ghostery is a popular tool for this purpose - with the added benefit of making you aware of just how much tracking is taking place on the web in general.
Other
The name and email address of customer contact persons are kept as long as necessary to fulfill contractual agreements or legal obligations. The data is kept by our invoicing partner under a data processing agreement.
Where data is stored
All usage data is stored within the EEA. The website and analytics software are physically hosted in Germany.
Duration of storage
Personal data is only stored as long as it is necessary to provide a requested service dependent on this data. Identifiable IP addresses are not stored.
Your rights under the GDPR
The General Data Protection Regulation (GDPR) establishes a number of rights for individuals concerning their personal data, such as the right to information about what personal data is kept, to have it corrected or erased, and to protest against its processing.
Access to personal data
You may make a Subject Access Request to Open Concept AS, which will be responded to within one month. The response will indicate if Open Concept AS possesses any personal data about you, and if so will include a description of your data, any recipients of it, and a copy of your data.
Right to rectification and erasure
You have the right to correct any inaccurate personal data held by Open Concept AS. You also have the right to request erasure of any data that is no longer necessary for the purpose for which it was collected.
Right to restriction of processing and withdrawal of consent
You may have the right to restrict the processing of your personal data or object to the processing of your data. You also have the right to withdraw previously given consent to process personal data.
If you wish to withdraw consent for the processing of your personal data or otherwise restrict or object to the processing of your personal data please contact Open Concept AS (contact info below).
Rights to data portability
You have the right to receive your personal data that Open Concept AS holds by consent in a structured, commonly used and machine-readable format and have the right to transmit that data to another controller without hindrance from Open Concept AS.
A comprehensive description of individual’s rights is maintained by the ICO (in English). For Norwegian users, see the Norwegian Data Protection Authority’s site.
All inquiries relating to personal data maintained by Open Concept AS should be directed to post@openconcept.no. You may also contact us by phone or postal mail.
Complaints
If you would like to make a complaint about our data processing, contact the Norwegian Data Protection Authority:
Datatilsynet
Pb 458 Sentrum
0105 Oslo, Norway
Ph. +47 22 39 69 00
www.datatilsynet.no
postkasse@datatilsynet.no