Processing of Personal Data
In this privacy policy, we explain what types of personal data we store and how we process them.
Below, you will find information about the personal data collected, why we do this, and your rights related to the processing of personal data.
The data controller for the personal data we process is:
Name: Morten Kjellmann
Organization name: Mk Evol AS
Organization number: 820 626 842
If you have any questions about our processing of your personal data or wish to exercise your rights, you can contact us by email.
Email: morten@m-trax.no
Personal Data We Collect and Process
We process the following categories of personal data:
- Basic information: name
- Contact information: phone number, email address
- Customer activity: reading and interaction history from websites or electronic communication we send out. Also, technical information about the devices you use to access the website, e.g., screen size.
Personal data is collected directly from you when you contact us by phone or through a contact form, or it is generated anonymously when you use our services and products.
The legal basis for generating anonymous statistics is Article 6(1)(f) of the General Data Protection Regulation (GDPR), which allows processing that is necessary for a legitimate interest that outweighs the individual’s right to privacy. Our legitimate interest is to improve, detect errors in, and further develop our websites and services.
We use an IT operations model where we rely on external providers for running and maintaining our internal IT services, including website hosting, case management/archiving, and video conferencing. All infrastructure and data are located within the EU/EEA or countries deemed to have an adequate level of protection by the EU Commission.
How We Use Personal Data
Service delivery / contract fulfillment
We use your personal data to fulfill our agreements with you, i.e., when you order a product or service from us. The legal basis is that the processing is necessary to fulfill a contract with you.
Customer relationship management
We use your data to manage our customer relationship with you. This includes responding to inquiries, customer service, complaint handling, and troubleshooting. The legal basis is that the processing is necessary to fulfill a contract with you.
Analysis, business development, and service improvement
We continuously work to develop and improve our services and products. Much of this involves analyzing various forms of personal data, such as customer activity and history. The legal basis is our legitimate interest.
Customized user experience
We tailor the user experience and communication based on your customer relationship using personal data. The legal basis is our legitimate interest.
Sales and marketing
We use personal data for sales and marketing of our products and services, for example, by sending you emails. The legal basis is consent. Emails for this purpose are sent only with your agreement, e.g., by subscribing to a newsletter.
Customer reviews
Occasionally, we publish customer reviews on our websites that may contain personal data. We always obtain the customer’s consent before publishing their names along with reviews. The legal basis is consent
System monitoring and troubleshooting
We monitor our systems for errors and issues. Some of these processes involve storing and processing personal data. The legal basis is our legitimate interest.
Security, fraud detection, and criminal activity
We process personal data to protect our users and ourselves from fraud, misuse, and criminal acts. The legal basis is our legitimate interest.
Compliance with legal obligations
In some cases, we are required to process personal data to comply with legal obligations. An example is sales data, which we must record and retain under accounting laws. The legal basis is that the processing is necessary to fulfill a legal obligation
Retention Period
We retain your personal data for as long as it is necessary for the purpose for which it was collected.
We delete or anonymize personal data once the purpose is fulfilled, unless the law requires or allows us to retain the data longer.
This means that, for example, personal data processed based on your consent will be deleted if you withdraw your consent.
Your Rights
If you wish to exercise any of your rights, contact us at the email address mentioned above.
You are entitled to a response without undue delay and no later than one month.
- Right to access your data: You may request a copy of all data we process about you.
- Right to correct personal data: You can ask us to correct or supplement inaccurate or misleading data.
- Right to delete personal data: In certain situations, you can ask us to delete your data.
- Right to restrict processing: In some cases, you can ask us to restrict processing of your data, e.g., by managing your consent or opting out.
- Right to object: If we process your data based on our tasks or a balance of interests, you have the right to object.
- Right to data portability: You have the right to receive your data in a structured, commonly used, and machine-readable format.
Complaints
If you believe we are not complying with data protection laws, please notify us first via your usual contact. You may also lodge a complaint with the Norwegian Data Protection Authority (Datatilsynet).
Changes
If our services or data protection regulations change, this may result in updates to this privacy notice. Updated information will always be easily available on our website. Users should regularly check the privacy notice to stay informed. Continued use of the website constitutes acceptance of any changes.