Privacy Policy for Sulten

This Privacy Policy was last changed: September 2023

Processing of your personal data at Sulten

Sulten AS, org. no. 925 569 852, is the controller for the processing of your personal data when you use Sulten’s app or website. We are committed to taking good care of your personal data. In this Privacy Policy you can read about how we process your personal data and your rights.

“Personal data” means any information relating to an identified or identifiable natural person. “Processing” means any operation or set of operations which is performed on personal data, whether or not by automated means, such as collection, organisation, storage and erasure.

Why we process your personal data and what data we process

Processing of the personal data of our users

When you create a user profile in our app, the personal data we process is your name, email address and any information you provide in your recipes (including photos). This processing is necessary in order to administrate your user profile and the lawful basis for this is GDPR article 6 letter b.

Henvendelser

Dersom du kontakter oss via våre nettsider eller andre kanaler, behandler vi dine personopplysninger. Personopplysninger som behandles vil typisk være navn, telefonnummer, e-postadresse og eventuelle personopplysninger som måtte følge av henvendelsen. Opplysningene samles inn via kontaktskjema, ved henvendelser per e-post, ved utfylling av søknader/skjemaer eller når du kontakter oss på annen måte. Behandlingen av personopplysninger skjer på grunnlag av en interesseavveining, jf. GDPR artikkel 6 bokstav f. Vi har vurdert det slik at det er nødvendig for å oss for å lagre disse personopplysningene for å følge opp din henvendelse på en god måte.

Cookies

Vi benytter informasjonskapsler/cookies på nettsiden og i appen.

Data som samles inn lagres hos Firebase (personvernerklæring) og de er databehandler for tjenesten. All data er anonymisert. Vi har på ingen måte muligheten til å identifisere hvem du er.

Vi bruker Google Signals til å samle inn data som hjelpemiddel til å utvikle appen på best mulig måte, f.eks. kjønn, hvilken telefon brukeren har, samt deres interesser. All data er anonymisert. Vi har på ingen måte muligheten til å identifisere hvem du er.

Analyseverktøyet Google Analytics setter to informasjonskapsler til bruk i analyse av bruksmønstre, disse kapslene begynner på _ga og _gid.

Collaboration/campaigns

We process personal data about our collaborators, suppliers and others in order to fulfil our contractual obligations and in order to plan and carry out assignments and projects. The personal data we process for this purpose is name and contact information, such as e-mail address and telephone number, as well as personal data necessary for the specific project or collaborator/supplier relationship. This processing is necessary in order to perform our contractual obligation to you, cf. GDPR article 6 letter b. In some cases we process this personal data for our legitimate interests in organising our business, cf. GDPR article 6 letter f. Our assessment is that our interest in the processing, overrides the collaborator/supplier’s interests or fundamental rights and freedom which require protection of personal data.

Events

When we arrange seminars, courses and similar to our users, collaborators, supplier and others, we process personal data. This includes name, contact information, position and employer. The lawful basis for this processing is GDPR article 6 letter f. In order to organize this kind of events, we need some information about the participants, and our interest in the organisation of the event overrides the participant’s interests or fundamental rights and freedom which require protection of personal data. The personal data is deleted after the event.

Recruitment

When we recruit new employees, we collect personal data about candidates applying for a job with us: Name, contact information, photo, CV, application letter, diplomas, certificates, statements from references, notes from the interview and other information provided by the applicant. The lawful basis for this is GDPR article 6 letter f. We have a legitimate interest in recruiting people to our business. If you do not get a position with us after a recruitment process, we will delete the information about you shortly, unless you have consented to further storage. For the continued storage the lawful basis is GDPR article 6 letter a: Your consent. We keep your information for one year after you consent or until you withdraw your consent.

Disclosure of personal data to others

We do not sell or disclose your personal data to others unless there is a legal basis for such disclosure, for example if you consent to the disclosure, the disclosure is necessary for the performance of the contract we have with you, or if it is necessary in order to comply with a legal obligation Sulten is subject to.

We may use third party data processors to process personal information on our behalf. We have entered into data processing agreements with all of our data processors in order to ensure information security. Such data processors may be the supplier of our IT platform, our recruitmentsystem etc. We use Google Analytics to track the use of our app, which is a web analytics service offered by Google (an American company).

How long we keep your data

We retain your personal data for as long as it is necessary to complete the purpose of the processing, or otherwise for as long as it is required according to law.

Your rights

The Norwegian Privacy Act (personopplysningsloven) and GDPR provides you with a set of rights relating to the processing of your personal data. You have the right to request access to, rectification of and erasure of your personal data. Furthermore, you may have the right to restrict our processing and to object to our processing of personal data. You also have the right to receive your personal data in a structured, commonly used and machine-readable format and to transmit those data to another controller. For more information, please refer to Datatilsynet’s website: www.datatilsynet.no.

To exercise your rights, please contact us using our email feedback@sulten.app. We will respond to your inquiry as soon as possible and normally within 30 days. You can also contact us if you would like more information about the way we process your personal data.

We will ask you to confirm your identity or provide additional information before we allow you to exercise your rights to us. We do this to make sure that we only give access to your personal information to you and not someone who pretends to be you.

Complaints

If you believe that our processing of personal data does not comply with our Privacy Policy or applicable law, you have the right to lodge a complaint to the Norwegian Data Protection Authority (Datatilsynet). For more information, please refer to Datatilsynet’s website: www.datatilsynet.no.