Privacy Policy

PRIVACY POLICY FOR SENDSMART SOLUTIONS

This privacy policy applies to SendSmart Solutions AS (“SendSmart,” “we,” or “us“), with organization number 989 079 255 and registered address at Pløens gate 4, 0181 Oslo.

SendSmart acts as the data controller for the processing of personal data described in this privacy policy.

If you have questions about this privacy policy or the assessments we have made, you can contact us at info@sendsmart.no or by phone at +47 22 40 29 60. For exercising your rights, you can find more information in section 7 below.

1. WHO ARE WE?

SendSmart provides comprehensive solutions for packaging and special shipping, printing and copying, and mailbox rental. As part of our special shipping offering, we provide complete solutions for safe and secure shipping to and from destinations worldwide. Packaging and packaging materials suitable for our customers’ shipping needs are also available from us. We also offer flexible and cost-effective solutions for printing and copying. If needed, our customers can also receive assistance with graphic design. In our store at Youngstorget in Oslo, we offer secure mailbox rental services ideal for both businesses and individuals. Upon request, SendSmart can also offer mail forwarding or scanning services.

As a customer of ours, one of our top priorities is for you to trust us and how we handle your personal information. In this privacy policy, we will explain why we collect information about you, how we use that information, and how we protect your privacy.

This privacy policy applies to the processing of personal data necessary for us to provide our services to you as our customer. We will also process some personal data in connection with your interactions with our website sendsmartsolutions.no.

2. WHO WE PROCESS PERSONAL DATA ABOUT

This privacy policy pertains to the processing of personal data about the following individuals:

Private customers
Contacts at our business customers
Contacts at our suppliers and partners
Visitors to our website sendsmartsolutions.no

3. PURPOSES, TYPES OF PERSONAL DATA, AND LEGAL BASIS

Below, we have provided an overview of the purposes for which SendSmart processes personal data, the types of personal data processed, and the legal basis for the processing.

3.1 Processing of Personal Data in Connection with Ordering, Purchasing, and Execution of Our Parcel and Shipping Services

To process your request to receive our packaging and shipping services or to provide you with an offer for such services via our shipping form on our website, we need to process certain personal data about you as a customer. In this context, we will process the following personal data:

Name
Address
Email address
Phone number

This type of personal data processing is necessary to fulfill an agreement with you regarding the delivery of parcel and shipping services or as a pre-contractual necessity for us to provide you with an offer in connection with entering into such an agreement for the delivery of parcel and shipping services, as per GDPR Article 6(1)(b).

Furthermore, SendSmart must process your payment information to execute payment for the relevant service you wish to receive from SendSmart. This type of personal data processing is also carried out to fulfill the service agreement with you, as per GDPR Article 6(1)(b).

If you do not enter into an agreement with SendSmart as an individual (private customer) but instead act as a contact person or representative on behalf of a business customer, we will process the same personal data mentioned above based on GDPR Article 6(1)(f). The processing of your personal data as a contact person for a business customer is related to our legitimate interest and the purpose of administering our contractual offering, contractual relationship, or communication in connection with the contractual relationship, with our business customers.

3.2 Processing of Personal Data in Connection with Ordering, Purchasing, and Execution of Our Printing and Copying Services

To process your request to receive our printing and copying services or to provide you with an offer for such services via our printing and copying form on our website, we need to process certain personal data about you as a customer. In this context, we will process the following personal data:

Name
Address
Email address
Phone number
Any other personal data you may provide in the message field in the printing and copying form on our website

This type of personal data processing is necessary to fulfill an agreement with you regarding the delivery of printing and copying services or as a pre-contractual necessity for us to provide you with an offer in connection with entering into such an agreement for the delivery of printing and copying services, as per GDPR Article 6(1)(b). Alternatively, personal data in connection with pre-contractual communication and offers may also be processed based on your consent, as per GDPR Article 6(1)(a).

3.3 Processing of Personal Data in Connection with Ordering, Purchasing, and Rental of Mailboxes

To process your request to receive our mailbox rental service at SendSmart or to provide you with an offer for such service via our mailbox form on our website, we need to process certain personal data about you as a customer. In this context, we will process the following personal data:

Name
Address
Email address
Phone number
Any other personal data you may provide in the message field in the mailbox form on our website

This type of personal data processing is necessary to fulfill an agreement with you regarding the rental of a mailbox or as a pre-contractual necessity for us to provide you with an offer in connection with entering into such an agreement for mailbox rental, as per GDPR Article 6(1)(b). Alternatively, personal data in connection with pre-contractual communication and offers may also be processed based on your consent, as per GDPR Article 6(1)(a).

3.4 Processing of Personal Data in Connection with Marketing

As of now, SendSmart does not process any personal data about our customers for the purpose of conducting marketing activities. However, this is something that SendSmart may initiate in the future so that you as a customer can receive the best possible information about our services and offers.

To the extent that SendSmart processes personal data about you as a customer to send you digital marketing, this will only be done if you have given your consent. Digital marketing includes newsletters and other marketing materials sent via email or SMS. For this purpose, we will only use your name (or job title) and your email address or phone number. This processing of personal data will be carried out in accordance with GDPR Article 6(1)(a) and the Marketing Act § 15 (consent).

You can withdraw your consent for marketing at any time. You can do this by clicking on the link in the email you receive from us or by contacting us directly.

3.5 Use of Cookies

SendSmart does not use any cookies on the website www.smartsolutions.no beyond what is necessary to operate the website.

4. RECIPIENTS OF YOUR PERSONAL DATA

SendSmart may, in some cases, disclose personal data to others to the extent necessary for the administration of our operations and to conduct our business.

SendSmart may, for example, share your personal data with our supplier of IT systems and technical support, CRM systems, and supplier contact forms on our website. These entities process personal data as data processors, and their processing is subject to a data processing agreement. The suppliers are required to act in accordance with documented instructions from SendSmart and cannot use personal data for their own purposes.

Additionally, in certain cases, we may disclose your personal data to other companies that will be responsible for how they process your personal data. We may, for example, disclose your personal data to partners who handle payment services and public authorities if required by law or by a legally binding court order or judgment.

If SendSmart sells or acquires a business or assets, SendSmart may transfer your personal data to a potential seller or buyer of such a business or assets.

If SendSmart or a significant portion of SendSmart’s assets is sold to another company, the personal data of our customers may also be shared in connection with the sale.

We implement appropriate technical and organizational security measures in accordance with applicable data protection laws to ensure that your personal data is handled securely when transferred or shared with a third party.

5. TRANSFER OF YOUR DATA TO COUNTRIES OUTSIDE THE EU/EEA

As a general rule, we process your personal data within the EU/EEA. If personal data is processed outside the EU/EEA, there is either a decision from the EU Commission that the relevant third country guarantees an adequate level of protection, or we ensure that appropriate safeguards are in place to protect your rights under the GDPR. Examples of such suitable safeguards include data transfers subject to EU Commission’s standard contractual clauses or the relevant third party adhering to approved codes of conduct.

If you would like more information about the security measures SendSmart has implemented, you can contact SendSmart using the contact information provided at the beginning of this privacy policy.

6. RETENTION PERIOD OF YOUR DATA

SendSmart will retain your personal data for as long as necessary to fulfill the purposes of processing your personal data.

Personal data processed in connection with pre-contractual offers will be deleted immediately within a reasonable time after an offer is declined, and no agreement is entered into with you as a customer.

Personal data processed in connection with the administration and execution of the agreement we have with you in connection with the delivery of our services will be stored for a minimum of three years after the agreement is concluded to handle any complaints or warranty claims related to the agreement.

In addition, we have an obligation to retain certain information as a result of statutory obligations such as accounting legislation and accounting regulations. Certain information will also be retained to meet property law requirements.

7. YOUR RIGHTS

SendSmart has implemented relevant and tailored technical and organizational security measures to protect your information and ensure your rights. Below is an overview of your rights in accordance with the GDPR:

Right to Access:

We strive to be open and transparent about how we process your personal data. If you want to know more about how we process your personal data or want to receive the personal data we have stored about you, you can request access to the information we have about you. If we receive a request for access, we may ask you for more information about who you are to ensure that we provide the data to the correct person.

Right to Rectification:

If you become aware that we have outdated or incorrect information about you, you can request that we correct the error by contacting us at any time.

Right to Erasure and Restriction:

You have the right to request the deletion of your personal data or that its use be restricted, for example, if you believe that your personal data is being processed in violation of applicable law. We will strive to comply with a request to delete personal data as far as possible, but we cannot do so if we are legally required to retain certain information, for example, for accounting purposes or to comply with a legal claim.

Right to Data Portability:

In some cases, you may have the right to have the personal data you have provided to us delivered in a structured, commonly used, and machine-readable format. If technically feasible, you can also request to have the data transferred to a third party.

Right to Object:

You have the right to object to our processing of your personal data if it is processed based on our legitimate interests, for example. Your personal data cannot be used for direct marketing purposes on this basis if you object to such processing. If you do not want your information to be used for direct marketing, we will stop processing your personal data for such purposes.

In addition, you can withdraw any consents you may have given for the processing of personal data for marketing purposes. See below for the right to withdraw consent.

Right to Withdraw Consent

If you have given consent to our processing of your personal data, you have the right to withdraw this consent at any time by contacting us. However, this does not affect the legality of the processing based on your consent before you withdrew it.

Right to Lodge a Complaint with the Data Protection Authority

If you want to complain about our processing of your personal data, you are welcome to contact SendSmart directly. If the specific matter you want to complain about is not resolved by us and you wish to proceed with the matter, you can complain to the relevant supervisory authority:

Datatilsynet

Postboks 458 Sentrum

0105 Oslo

E-mail: postkasse@datatilsynet.no

www.datatilsynet.no

If you wish to exercise any of your rights as outlined above, you can contact us at any time. Our contact information can be found at the beginning of this privacy policy.

8. CHANGES TO THE PRIVACY POLICY

We will periodically update or change the privacy policy. In the case of major changes, we will inform you accordingly.