.png)
Last modified: July 25th, 2023
This privacy policy explains what we do with the information we receive about you through our 24-Syv AS website (https://24-sju.com) and mobile application
We recommend that you read this statement carefully.
In our processing, we comply with the requirements of data protection legislation. This means, among other things, that:
Application. Welcome to the 24-Syv AS website (https://24-sju.com) and Mobile Application. This privacy policy is designed to help you understand how we collect, use and protect your personal information in accordance with global data protection laws, including but not limited to the EU General Data Protection Regulation (GDPR), California Consumer Privacy Act (CCPA), and other relevant data protection laws. By accessing and using our platform, you agree to the terms and conditions of this privacy policy.
We collect personal information that you voluntarily provide to us when you register for the services, express interest in receiving information about us or our products and services, when you participate in activities on the services, or otherwise when you contact us.
When you use the 24-Syv AS website, we may collect the following types of information:
2.1.1. Geolocation Information: We may request access or permission to track location-based information from your device, either continuously or while you use our website, to provide certain location-based services. If you wish to change our access or permissions, you can do so in your browser settings.
2.1.2. Newsletter Subscription: If you voluntarily subscribe to our newsletter, we collect your email address to send you updates and promotions.
2.1.3. Information Collected Automatically: Some information such as your Internet Protocol (IP) address and/or browser and device characteristics are collected automatically when you visit our services.
We automatically collect certain information when you visit, use or navigate the services. This information does not reveal your specific identity (such as your name or contact information), but may include device and usage information, such as your IP address, browser and device characteristics, operating system, language preferences, referring URLs, device name, country, location, information about how and when you use our services, and other technical information. This information is primarily necessary to maintain the security and operation of our services, and for our internal analytics and reporting purposes.
When you use our 24-Syv AS Android and iOS mobile app, we may collect the following types of information:
2.2.1. User Information: We may collect name, email address and personal number (national identity number) when you log in with 24-Syv AS.
2.2.2. Social Account Login:
Our platform allows you to log in with the following social media accounts:
When you choose to log in via a social account, you will be redirected to the respective platform's authentication system. To streamline the registration process, we may collect basic information from your social media profile, such as name, email address and profile picture. This data is used exclusively for the purpose of creating and maintaining your account on our platform and improving your user experience. We do not have access to your social account passwords or any sensitive information related to social media profiles.
2.2.3. Bank ID Login:
Our platform allows you to log in with Bank ID, a secure electronic identification system provided by a recognized financial institution. When you choose to log in with Bank ID, you are redirected to the bank's authentication system. To facilitate the login process, we may collect basic information provided by the bank's authentication service, such as your unique identifier. This data is used exclusively for the purpose of creating and maintaining your account on our platform and improving your user experience. We do not have access to your Bank ID credentials, personal identification numbers (PINs) or other sensitive information related to your bank account.
2.2.4. Payment Information Handling: When you make a payment on our platform, you are redirected to the secure payment gateway's system. You can rest assured that we do not collect, store or share any of your sensitive payment information, such as credit card numbers, bank account details or passwords. The entire payment process is handled by the Third Party Payment Gateway, which complies with the strictest security standards and encryption protocols. We recommend that you review their privacy policy to understand how they collect, use and share your personal information, and how you can set your privacy preferences on their websites and apps.
2.2.5. Geolocation Information: We may request access or permission to track location-based information from your mobile device, either continuously or while you use our mobile application(s), to provide certain location-based services. If you wish to change our access or permissions, you can do so in your device settings.
2.2.6. Mobile Device Access: We may request access or permission to certain features from your mobile device, including your mobile device's bluetooth, camera and other features.
2.2.7. Push Notifications: We may request to send you push notifications regarding your account or certain features of the application(s).
2.2.8. Store Information: We collect data about the stores you visit, navigate to and interact with in the app.
2.2.9. Offers and Purchase History: Information related to offers and your purchase history may be collected to personalize your experience.
2.2.10. Age Verification: For 18+ product purchases through the vending machine, we use video streaming to verify your age with your explicit consent.
2.2.11. Call Store Support: We collect data when you call to store support for assistance.
2.2.12. Information Collected Automatically: Some information such as your Internet Protocol (IP) address and device characteristics are collected automatically when you visit our services.
We automatically collect certain information when you visit, use or navigate the services. This information does not reveal your specific identity (such as your name or contact information), but may include device and usage information, such as your IP address and device characteristics, operating system, language preferences, referring URLs, device name, country, location, information about how and when you use our services, and other technical information. This information is primarily necessary to maintain the security and operation of our services, and for our internal analytics and reporting purposes.
We process your information to provide, improve and administer our services, communicate with you, for security and fraud prevention, and to comply with the law. We may also process your information for other purposes with your consent, including:
3.1. To facilitate account creation and authentication and otherwise manage user accounts. We may process your information so that you can create and log into your account, as well as keep your account in order.
3.2. To process and complete your purchase. We may process your information to complete the purchases you have made through the services.
3.3. To save or protect a person's vital interests. We may process your information when necessary to save or protect a person's vital interests, for example to prevent harm.
3.4. To provide and improve the platform's services and features.
3.5. To personalize your experience on the platform.
3.6. To communicate with you regarding our services, promotions and updates.
3.7. To perform age verification for product purchases over 18 years with your explicit consent.
3.8. To respond to your inquiries and provide customer support.
We only process your personal data when we believe it is necessary and we have a valid legal reason (i.e. legal basis) to do so under applicable law, such as with your consent, to comply with laws, to provide you with services to enter into or fulfill our contractual obligations, to protect your rights, or to fulfill our legitimate business interests.
4.1. If you are located in the EU or UK, this section applies to you.
The General Data Protection Regulation (GDPR) and UK GDPR require that we explain the valid legal bases we rely on to process your personal data. As such, we may rely on the following legal bases to process your personal data:
4.1.1. Consent: We may process your information if you have given us permission (i.e. consent) to use your personal information for a specific purpose. You can withdraw your consent at any time. Learn more about withdrawing your consent.
4.1.2. Contractual Necessity: We may process your personal data when we believe it is necessary to fulfill our contractual obligations to you, including providing our services or at your request before we enter into a contract with you.
4.1.3. Legitimate Interests: We may process your information when we believe it is necessary to comply with our legal obligations, such as cooperating with a law enforcement agency or regulatory body, exercising or defending our legal rights, or disclosing your information as evidence in legal proceedings in which we are involved.
4.1.4. Compliance: We may process your information to comply with legal obligations, such as registration requirements.
4.2. If you are located in Canada, this section applies to you.
We may process your information if you have given us specific permission (i.e. express consent) to use your personal information for a specific purpose, or in situations where your permission can be inferred (i.e. implied consent). You can withdraw your consent at any time.
In some exceptional cases, we may be permitted by applicable law to process your information without your consent, including for example:
4.2.1. If the collection is clearly in the individual's interest and consent cannot be obtained in time.
4.2.2. For investigation and fraud detection and prevention.
4.2.3. For business transactions provided that certain conditions are met.
4.2.4. If it is contained in a witness statement and the collection is necessary to assess, process or decide on an insurance claim.
4.2.5. To identify injured, sick or deceased persons and communicate with next of kin.
4.2.6. If we have reasonable grounds to believe that a person has been, is or may be subject to financial abuse.
4.2.7. If it is reasonable to expect that collection and use with consent would compromise the availability or accuracy of the information, and the collection is reasonable for purposes related to investigating a breach of an agreement or breach of the laws of Canada or a province.
4.2.8. If disclosure is necessary to comply with a subpoena, warrant, court order or rules of court relating to the production of records.
4.2.9. If it was produced by a person in the course of their employment, business or profession and the collection is consistent with the purposes for which the information was produced.
4.2.10. If the collection is solely for journalistic, artistic or literary purposes.
4.2.11. If the information is publicly available and specified by regulation.
We may share information in specific situations described in this section and/or with the following:
10.10. Cookies and Similar Technologies: Most browsers are set to accept cookies by default. If you prefer, you can usually choose to set your browser to remove cookies and to reject cookies. If you choose to remove cookies or reject cookies, this may affect certain features or services of our services. See our cookie policy for specific information about how we use such technologies and how you can refuse certain cookies.
Upon receiving your request, we must verify your identity to determine you are the same person about whom we have the information in our system. These verification efforts require us to ask you to provide information so that we can match it with the information you have previously provided us. For instance, depending on the type of request you submit, we may ask you to provide certain information so that we can match the information you provide with the information we already have on file, or we may contact you through a communication method (e.g. phone or email) that you have previously provided to us. We may also use other verification methods as the circumstances dictate.
12.2.4. Right to request deletion of your personal data
12.2.5. Right to obtain a copy of the personal data you previously shared with us
12.2.6. Right to opt out of the processing of your personal data if it is used for targeted advertising, the sale of personal data, or profiling in furtherance of decisions that produce legal or similarly significant effects ("profiling")
To submit a request to exercise these rights described above, contact us via email: info@24-sju.com.
If we decline to take action regarding your request and you wish to appeal our decision, please send us an email at info@24-sju.com. Within forty-five (45) days of receipt of an appeal, we will inform you in writing of any action taken or not taken in response to the appeal, including a written explanation of the reasons for the decisions.
This section applies only to Connecticut residents. Under the Connecticut Data Privacy Act (CTDPA), you have the rights listed below. However, these rights are not absolute, and in certain cases, we may decline your request as permitted by law.
12.3.1. Right to be informed whether or not we are processing your personal data
12.3.2. Right to access your personal data
12.3.3. Right to correct inaccuracies in your personal data
12.3.4. Right to request deletion of your personal data
12.3.5. Right to obtain a copy of the personal data you previously shared with us
12.3.6. Right to opt out of the processing of your personal data if it is used for targeted advertising, the sale of personal data, or profiling in furtherance of decisions that produce legal or similarly significant effects ("profiling")
To submit a request to exercise these rights described above, contact us via email: info@24-sju.com.
If we decline to take action regarding your request and you wish to appeal our decision, please send us an email at info@24-sju.com. Within sixty (60) days of receipt of an appeal, we will inform you in writing of any action taken or not taken in response to the appeal, including a written explanation of the reasons for the decisions.
Under the Virginia Consumer Data Protection Act (VCDPA):
"Consumer" means a natural person who is a resident of the Commonwealth acting only in an individual or household context. It does not include a natural person acting in a commercial or employment context.
"Personal data" means any information that is linked to or reasonably linkable to an identified or identifiable natural person. "Personal data" does not include de-identified data or publicly available information.
"Sale of personal data" means the exchange of personal data for monetary consideration.
If this definition "consumer" applies to you, we must adhere to certain rights and obligations regarding your personal data.
Your rights with respect to your personal data:
12.4.1. Right to be informed whether or not we are processing your personal data
12.4.2. Right to access your personal data
12.4.3. Right to correct inaccuracies in your personal data
12.4.4. Right to request deletion of your personal data
12.4.5. Right to obtain a copy of the personal data you previously shared with us
12.4.6. Right to opt out of the processing of your personal data if it is used for targeted advertising, the sale of personal data, or profiling in furtherance of decisions that produce legal or similarly significant effects ("profiling")
Exercise Your Rights Provided under Virginia VCDPA
You may contact us by email: info@24-sju.com.
If you are using an authorized agent to exercise your rights, we may deny a request if the authorized agent does not submit proof that they have been validly authorized to act on your behalf.
Verification Process
We may request that you provide additional information reasonably necessary to verify you and your consumer's request. If you submit the request through an authorized agent, we may need to collect additional information to verify your identity before processing your request.
Upon receiving your request, we will respond without undue delay, but in all cases, within forty-five (45) days of receipt. The response period may be extended once by forty-five (45) additional days when reasonably necessary. We will inform you of any such extension within the initial 45-day response period, together with the reason for the extension.
Right to Appeal
If we decline to take action regarding your request, we will inform you of our decision and reasoning behind it. If you wish to appeal our decision, please send us an email at email: info@24-sju.com. Within sixty (60) days of receipt of an appeal, we will inform you in writing of any action taken or not taken in response to the appeal, including a written explanation of the reasons for the decisions. If your appeal is denied, you may contact the Attorney General to submit a complaint.
We retain your information for as long as necessary to fulfill the purposes outlined in this privacy policy, unless otherwise required by law.
We will only retain your personal information for as long as it is necessary for the purposes set out in this privacy policy, unless a longer retention period is required or permitted by law (such as tax, accounting or other legal requirements). No purpose in this notice will require us keeping your personal information for longer than the period of time in which users have an account with us.
When we have no ongoing legitimate business need to process your personal data, we will either delete or anonymize such information, or, if this is not possible (for example, because your personal information has been stored in backup archives), then we will securely store your personal information and isolate it from any further processing until deletion is possible.
We aim to protect your personal information through a system of organizational and technical security measures. We have implemented appropriate and reasonable technical and organizational security measures designed to protect the security of any personal information we process. However, despite our safeguards and efforts to secure your information, no electronic transmission over the Internet or information storage technology can be guaranteed to be 100% secure, so we cannot promise or guarantee that hackers, cybercriminals or other unauthorized third parties will not be able to defeat our security and improperly collect, access, steal or modify your information. Although we will do our best to protect your personal information, transmission of personal information to and from our services is at your own risk. You should only access the services within a secure environment.
We reserve the right to update or change this privacy policy at any time. Any changes take effect immediately after the updated privacy policy is posted on the platform. We encourage you to read this privacy policy often to stay informed about how we protect your information.
If you have questions or concerns regarding this privacy policy or our data practices, please contact us at:
24-Sju AS
Askimveien 157
1408 Kråkstad
Norway
Website: https://24-sju.com
Email: info@24-sju.com
Phone number: +47 40 31 24 24
By using the 24-Syv AS website and mobile app, you consent to the collection, use and sharing of your information as described in this privacy policy.
