Last updated 19.04.2024  

1 WHAT DOES THIS STATEMENT APPLY TO?

The privacy policy informs you about how the company processes personal data in connection with the dobee solution. Personal data is all information that can be linked to a specific identifiable person. The dobee solution aims to make effective goal management fun. Dobee is a completely new employee, mobilization and collaboration SaaS solution, which allows you and your team to realize the most important goals and initiatives that create results, restructuring and growth for the organisation. dobee must:

• motivate and get people to stand up
• update on developments and follow up at the right time
• create a culture of effort and interaction
• free up time in a busy everyday life
• update on progress – efficiently and honestly

Purpose is responsible for processing and is concerned that your personal data is processed in accordance with the Personal Data Act, which makes the EU’s personal data protection regulation (“GDPR”) Norwegian law. Below we will describe what the company does with the personal data.

2 WHAT DOES THE PROCESSING OF PERSONAL DATA MEAN TO YOU?

The personal information is processed to achieve specific goals that are positive for the employer’s operations, as well as to comply with documentation requirements imposed on us by the authorities. In principle, the processing of personal data is not intended to cause you any inconvenience. We describe the specific purposes in more detail in point 3.

3 WHICH PERSONAL INFORMATION DO WE PROCESS AND WHY DO WE DO IT?

The purpose describes why we process personal data. All processing of personal data must have a processing basis (authorization) for it to be permitted.

1. Manage the customer relationship
   1. The purpose of the processing
      • Offer and deliver our services
      • Ensure administration and invoicing.
   2. What personal data is processed? Name, e-mail address, telephone number of the relevant contact person in the business.
   3. What treatment basis do we have? GDPR article 6 no. 1 letter f: Legitimate interests. The legitimate interests are to achieve objectives in the business, motivate employees, simplify work and achieve better results – both professionally and financially.
2. Statistics and analyses
   1. The purpose of the processing Purpose AS will collect data from the solution to shed light on how use of the solution achieves the best results. This is done by collecting information related to use of the solution. All data is turned into statistics, and cannot is linked to you as an individual.
   2. What personal data is processed? Goals and results that are entered into the solution. These will be converted into statistical data.
   3. What treatment basis do we have? GDPR article 6 no. 1 letter f: Legitimate interests. The legitimate interest is to obtain information about the kind of organization of activities that leads to the best achievement of the goal.
3. Disputes about the contractual relationship
   1. The purpose of the processing If a disagreement arises and we have to use personal data for debt collection or complaints bodies or court proceedings, the preparatory work will be based on all personal information that is necessary to recover/determine the claim.
   2. What personal data is processed? Including contact information and information about the agreement.
   3. What treatment basis do we have? GDPR article 6 no. 1 letter f: Legitimate interests. The legitimate interest is to recover what customers owe us and to defend the company against unjustified claims.
4. Information about potential customers
   1. The purpose of the processing If we have reason to believe that a person or business may be a future customer, we will list the person in our CRM system and make contact.
   2. What personal data is processed? Name and contact information.
   3. What treatment basis do we have? GDPR article 6 no. 1 letter b: If the information is processed to implement measures on the data subject request before entering into an agreement. GDPR article 6 no. 1 letter f: Legitimate interests. If the information is processed without the data subject contacting Purpose. The legitimate interest is to get more customers and thus increase turnover.

4 HOW LONG DO WE STORE THE PERSONAL DATA?

We do not keep personal data longer than necessary. When personal data are no longer required, they are deleted or anonymised. Customer information relating to the customer relationship is retained for three years after the customer relationship has ended. In some cases, data must be stored for a longer period, for example for accounting purposes. We then follow the storage deadlines in the Bookkeeping Act and Regulations. Information that does not constitute personal data has no deletion period. We retain information about general customer inquiries and potential customers for up to 12 months after the inquiry.

5 WHO DO WE SEND PERSONAL INFORMATION TO AND WHERE DO WE GET INFORMATION FROM?

We do not share personal information with third parties. We use HubSpot and the ActiveCampaign CRM system. We obtain information from our network, including on LinkedIn and events. Information is also entered by yourself.

6 WHAT RIGHTS DO YOU HAVE?

You have a number of rights in connection with data processing:

1. Access to your personal data You can gain insight into which information we process and how the processing takes place. You can also receive a copy of the personal data.
2. Correction or deletion of the personal data we process about you You can demand that incorrect information be corrected or deleted without undue delay.
3. Right to object to the processing You can object to the processing of information taking place, and we will stop the processing if your interests outweigh Mesta’s interests in the processing.
4. Right to demand limited processing In some situations, you can also ask us to limit the processing of information about you. When the treatment of personal data is limited, the business must store the data, but as a general rule not use it for anything without your consent.

The easiest way to invoke rights is to contact us via the e-mail mentioned in point 7. You can also contact us in another way through the aforementioned channels.