Who is responsible
Jab Jab Academy AS org nr. 918899324, Munkedamsveien 61, 0270 Oslo is responsible for processing your personal data. You can contact us at any time by e-mail or other means as stated in the contact section.
Where we gather your personal data
We gather information about you in several ways. If you fill out a form we store this data either by consent such as our newsletter signup, or to fulfill an order for a product or service. You can at any point update your consents by contacting us or following instructions we send you.
If you purchase tickets to an event or other services we are required to store certain data for up to five years due to accounting laws. This information is never used for any other purpose. We might however send you relevant information to your purchase such as information related to the event or links. Your purchase data might based upon your consent also be used to target newsletters to you.
- Personal data such as name, email, billing information is stored in our systems.
- Our CRM system stores what products or tickets you have purchased.
- Billing information or credit card information is stored by our payment partner Stripe Payments.
Use of services
If you login to a service or interact with emails, bots or other services we store information in order to provide the service you want. This data is also stored so that we can improve newsletters and other communications with you. Analytical data is stored, but always anonymized using Google Analytics.
When you use our services we store the following:
- Your name and email
- What newsletters you receive, open and what links you click
- Your purchase history
- What pages you visit on our websites
Third party data
Certain advertising partners provide data back to us. This data is anonymized, but with pixels and tracking cookies we can do retargeting. We also receive analytical data.
Use of purchase data
Based on your consent we can use your purchase data to improve communications with you. You can always retract this consent either directly or by contacting us.
Purpose of processing
We mainly process your personal data to deliver on an agreement between us or to send you newsletters. At any point you are free to contact us to see what the basis of our processing is.
To fulfill our agreement we typically process your data in the following ways:
- To confirm orders or send you a receipt
- To handle returns, accounting or other obligations after a purchase
- To send you information about your purchased product
- To contact you in order to improve our service or offerings
- To administer competitions or deliver freebies
- To send you a newsletter
Most of our communication is based on consent. For an overview of what consents you have provided feel free to contact us.
When you buy a product we are required by law to store certain information based on among other laws norwegian laws on accounting. In these cases data is stored for a minimum of five years.
Access to your personal data
Privacy laws are strict and we take our job as a data processor very serious. We always strive to follow any organisational or technical requirements to secure our processing of your personal data. To provide you with an overview we have a site https://thomasmoen.com/partners that provides you with an overview of our partners and suppliers. Any third party that has access to your personal data only process this data in accordance with a separate Data Processing Agreement between us and the partner. This limits their allowed processing to provide agreed services to us. Only people required access to your data can view it.
Our main partners are as follows:
- Hosting – Namecheap
- Klaviyo – E-mail partner
- Stripe – Payments
As a main rule your data is never transferred outside of the EU or EEC and we always have agreements with strict security requirements. We will never sell or share your personal data with any other partner. Some processing might happen outside of the EU or EEC, in these cases the partner is approved to process by the European Data Inspectorate.
In situations where we are required to provide data to authorities we only do this under warant by norwegian police. We have never provided data to authorities to this date.
We process your data as long as we either have an agreement, we are required by law or you have consented. Each year we have a revision of personal data and try to limit the amount of data we have stored to what we need in order to provide a good service. At any point you can contact us and ask to delete, update or gain a copy of stored data. See the contact section for information about how to contact us.
There are strict rules both to our organisation and our security when processing your personal data. The goal is to prevent loss, access or other risks. We always strive to make changes and improvements in our internal security guideline.
You have the right to know what data we store and how this data is used. In addition to that we want you to be aware of other rights you have when allowing us to process your personal data.
You have the right to see everything stored about you, as well as change any data we got wrong. To see what data we have stored about you see the list above in this statement or contact us by following the instructions below. Any consent you have provided us with can easily be removed as well.
If you see something we might have stored that you do not wish us to store you can have us delete that or any other data we have stored about you. You can also ask to have this data made available to you. This is a free service in accordance with your rights.
Please note that we are unable to delete data where our right of processing is legal such as accounting. We always strive to store the minimum required amount of data in cases such as this. Your data stored on legal rights of processing is never used for any other purpose.
If you want to complain about something we do the Norwegian Data Inspectorate has information about this on their website www.datatilsynet.no. The Norwegian Data Inspectorate is the correct authority for any complaints you might have.
Changes or updates
This Privacy Statement might be updated from time to time. In cases where there are major changes introduced we will inform you about this. The privacy statement will always be in accordance with any changes in laws or statements issued that are relevant to our processing of personal data. The latest version of this Privacy Statement will always be available on our website.
We encourage you to contact us whenever you see us, but you can also do so digitally following these instructions. If you request access to information do note that we have up to 30 days to reply.
Munkedamsveien 61, 0270 Oslo. [email protected] or +47 92 28 03 48
Last updated 20.05.18