Privacy Policy for OSO inCharge
Privacy Policy for OSO Energy
Processing of personal data in OSO Energy AS
This privacy statement describes how OSO Energy AS collects and uses your personal data when you are a customer, visiting our website or using the OSO inCharge app.
The responsible party for processing the personal data is OSO Energy AS (business reg.no. 925156663). If you have any questions about the processing of your personal information, you can contact us at:
| Business address: | Industriveien 1, Loesmoen. 3200 Hokksund. |
| Postal address: | postboks 112. 3301 Hokksund |
| Email: | privacy_no@oso.energy |
| Phone: | +47 32 25 00 00 |
1. WHY DO WE COLLECT PERSONAL DATA AND WHAT KIND OF INFORMATION DO WE COLLECT
We collect and use your personal data for different purposes depending on who you are and how we get in touch with you. The data we collect is described below:
As customer
If you are a customer of ours, our processing of your personal data may be summarized as follows, depending on the type of customer relationship we have with you:
| Processing/purpose | Type of data and source: | Legal basis: |
|---|---|---|
| Establishment of customer relationships. | Contact information; name, address, email, password, serial number of water heater. This is information we collect directly from you or through the installer. | Necessary to enter into a contract with the registered user, GDPR Article 6(1)(b). |
| Use of the OSO inCharge App |
Establishment of user profile in the App:
Operational data from water heater:
|
Necessary to enter into a contract with the registered user, GDPR Article 6(1)(b). Electricity meter ID is required for the interface between the smart-grid system and the water heater |
| Optimization of services / system development | To optimize and further develop our services, we may use aggregated and / or anonymised information about you, including your use of the services and the App. | GDPR Article 6(1)(f). We have a legitimate interest in offering our customers the best possible service, including the App. |
| Customer contact | When you contact us via email, phone, etc. we will process the contact information necessary to reply to the inquiry, including name, telephone number, email address, address and any personal information that may result from the inquiry. | GDPR Article 6(1)(a) and (f). If you contact us, this means directly or indirectly that you agree to us processing the personal data necessary to carry out your request. To the extent that we contact you unsolicited, we have a legitimate interest in processing personal data in order to provide customer service to our existing customers. We have a legitimate interest in communicating with you if you request this and to handle any issues that arise as a result of this contact. |
| Marketing | Name, address, phone number, email address. | GDPR Article 6(1)(f). If we collect personal information about you as a result of you being a customer with us, we may contact you with information about similar products and services (including special offers, discounts, etc.) as long as you have not reserved yourself against such inquiries. |
Visitors to our website
| Processing: | Type of data: | Legal basis: |
|---|---|---|
| Customer contact | When you contact us via the contact form on our website, we will process the contact information necessary to answer the inquiry, including name, telephone number, email address, address and any personal information that may result from the inquiry. | GDPR Article 6(1)(f). Our processing is based on a balance of interests according to the GDPR, Article 6(1)(f), where our legitimate interest is to be able to answer the inquiry. |
2. DISCLOSURE OF PERSONAL INFORMATION TO OTHERS
We do not pass on your personal information to others unless there is a legal basis for such disclosure. Examples of such a basis will typically be an agreement with you to hand over data to network companies or a legal basis that requires us to publish the information.
OSO uses data processors to collect, store or otherwise process personal data on our behalf. In such cases, we have entered into data processor agreements to ensure information security in all stages of the processing. All processing of personal data that we carry out takes place within the EU / EEA area, unless otherwise explicitly mentioned above.
3. DATA RETENTION
We store your personal information with us for as long as is necessary for the purpose for which the personal information was collected.
- We store information related to your account as long as you have an agreement to use the OSO app. If you decide to terminate the agreement, we will also delete the associated data. However, we may store personal information for longer, should it be necessary to pursue any legal claims or to comply with legal obligations.
- Payment and invoice-related information can be stored for up to 5 years after the end of the customer relationship, in accordance with the Norwegian Bookkeeping Legislation.
4. YOUR RIGHTS WHEN WE PROCESS YOUR PERSONAL INFORMATION
You have the right to demand access, correction or deletion of the personal data we process about you. You also have the right to demand limited processing, direct objections to the processing and demand the right to data portability. You can read more about the content of these rights on The Norwegian Data Protection Authority’s website: www.datatilsynet.no
To exercise your rights, you must contact us at privacy_no@osoenergy.no
We will respond to your inquiry to us as soon as possible, and no later than 30 days.
We will ask you to confirm your identity or provide additional information before we allow you to exercise your rights against us. We do this to make sure that we only give access to your personal information to you – and not someone who pretends to be you.
For the personal data processing that is based on consent, you can at any time withdraw your consent for the processing of personal data with us. The easiest way to do this is to contact us at privacy_no@osoenergy.no
5. COMPLAINTS
If you believe that our processing of personal data does not comply with what we have described here or that we otherwise violate privacy laws, we hope you will contact us. However, you also have the right to complain to the Norwegian Data Protection Authority.
You can find information on how to contact the The Norwegian Data Protection Authority on their website: www.datatilsynet.no
6. CHANGES
Should there be changes to our services or in the regulations for processing personal data, it may lead to a change in the information you have provided. If we have your contact information, we will notify you of these changes. Otherwise, updated information will always be easily available on our website and in the app.