Processing of personal information in Vita Pura AS

When you contact us as a customer, Vita Pura AS processes personal information about you. Therefore, below you will find information about what personal data is collected, why we do this, and your rights related to the processing of personal data.

The person responsible for the processing of personal data is André Myrvold Hefner, the Managing Director of Vita Pura AS. The contact information for Vita Pura AS is:

Address: Bjørumsvegen 15, 4820 Froland, Email: kundeservice@vitapura.no, Phone: 37 00 59 23 Organization No. 919 511 427    

You are welcome to contact us with any questions you may have about our processing of personal data.

Why do we collect personal information and what kind of information we collect?

We collect and use your personal information for different purposes depending on who you are and how we come into contact with you. We collect the following personal information for the purposes stated below:

1. Establishing (ordering the product) and maintaining customer relationships. For this purpose, we process the following data: contact information, identity documentation, payment information in the form of telephone number, email address, postal address and IP address for the order, as well as purchase history. The processing is conducted on the basis of GDPR (General Data Protection Regulations), Article 6 (1) (b), because it is required to fulfil an agreement we make with you as a customer.
2. Storage / retention of correspondence related to the customer relationship. Here we are talking about processing of personal information that is related to the subject in question. The processing takes place because we are legally obliged to keep the relevant information, and also for security reasons – see point 7.
3. Billing. Here we are talking about processing of contact details and payment information. The processing is based on GDPR Article 6 (1) (b). This processing is necessary to fulfil an agreement with you as a customer.
4. Distribution of marketing information, newsletters and other relevant information associated with our business and products. In this context, we process names, telephone numbers and email addresses. The processing takes place on the basis of the consent of the persons receiving the marketing information, pursuant to section 15 of the Marketing Act, -usually they are private customers. 
5. Information about potential customers. In this connection, we process contact information. The processing is conducted on the basis of GDPR Article 6 (1) (f). We regard that here it is necessary to take into account commercial considerations of our operations.
6. Recruitment. In this context, we deal with CVs, applications, testimonials, diplomas, references from referees, internal assessments / interview papers, any personality tests and ability tests. Here processing of personal data takes place on the basis of an agreement with the person who applied for a position with us, i.e. in accordance with GDPR Article 6 (1) (b).

If we retain application documentation after a recruitment process has been completed, this is done only with the consent of the applicant, cf. GDPR Article 6 (1) (a).

1. Security. In this connection, we process logs on servers, disclosures, any correspondence, clarifications, follow-up of security incidents, etc. The processing is conducted on the basis of GDPR Article 6 (1) (f). We regard that for this processing it is necessary to safeguard information security and prevent unauthorized disclosure of personal data.

1. Use of cookies for statistics and website development. We receive statistics and data from Google Analytics and Facebook. We refer to these companies’ terms of use for more information. We do not receive any personal information from these companies and do not store or process this information ourselves. 

Disclosure of personal data to others

We do not disclose or transfer your personal information to others, unless there is a legal basis or order for such disclosure. Examples of this would typically be legal obligations that require us to disclose the information to public agencies.

Vita Pura AS also uses external data processors to process personal data on our behalf. In such cases, we enter into agreements to safeguard information security at all stages of the processing. We currently use the following data processors:

• Direct House Arendal AS, Bjørumsvegen 15, 4820 Froland. Direct House operates our customer service and manages shipments, both outbound and inbound.
• Financ 2: PO Box 2033 Vika, 0125 Oslo. Finance 2 operates our invoice management, clearing and debt collection services.

All processing of personal data we are dealing with takes place within the EU / EEA area.

Storage time

We store your personal information with us for as long as it is necessary for the purpose for which the personal information was collected.

This means, for example, that the personal data that we process on the basis of your consent, will be deleted if you withdraw your consent. The personal information we process to fulfil an agreement with you is deleted when the agreement is fulfilled and all obligations arising from this agreement are also fulfilled. Personal data that we process in order to fulfil the legal obligations of the authorities, is deleted when it is justified by the legal basis. This applies, for example, to bookkeeping and accounting rules.

The table below provides an overview of how long we process personal data for various purposes:

Your rights when we process your personal information

You have the right to demand access, rectification or deletion of the personal data we process about you. You also have the right to demand limited processing and, under certain conditions, object to the processing. You can read more about these rights on the Norwegian Data Protection Authority’s website: https://www.datatilsynet.no/

To use your rights, please contact us by email or phone. We will respond to your inquiry as soon as possible, but within 30 days at the latest. We will ask you to confirm your identity or to provide further information before allowing you to exercise your rights. We do this to ensure that we only give access to your personal information to yourself – and not to someone who just claims to be you.

You may withdraw your consent for the processing of personal data with us at any time. The easiest way to do this is to unsubscribe by following the unsubscribe link in each newsletter. You can also contact us by email or phone.

Complaints

If you believe that our processing of personal data does not match what we have described here or that we have violated the privacy law in any other way, you can complain to the Data Inspectorate. You can find information on how to contact the Data Inspectorate on the Norwegian Data Protection Authority’s website https://www.datatilsynet.no/

Amendments

If there is a change in our services or changes in the rules on the processing of personal data, it may result in a change in the information provided here. If we have your contact information, we will notify you of these changes. Apart from this, you can always find up-to-date information on our website.