PRIVACY POLICY
Here at TNYEYS, we take your privacy and the processing of your personal information very seriously. Therefore, we have prepared this privacy policy where we describe our contact information, information regarding the personal data we process, and your rights regarding them and how you may exercise them. You can always contact customer service if you have any questions regarding our processing of personal data or this privacy policy.
Contact Information:
Company Name: Epilot AS
Organization Number: 918 816 380 VAT
Country of Operation: Norway
Email Address: contact@tnyeys.com
Postal Address: Epilot AS, Jomfrubråtveien 71, 1179, Oslo
Contact Details for Customer Support: contact@tnyeys.com
What are personal data?
Personal data is all information related to an identifiable or identified person (you as a user). An identifiable person is someone who can be identified, directly or indirectly, for example by reference to an identification number or to one or more factors specific to his or her physical, physiological, mental, economic, cultural, or social identity.
Personal data we process
Your personal data can only be processed by us with your consent, when necessary for the performance of a contract of which you are a party, or when necessary for us to comply with a legal obligation. The processing of personal data, the specific purposes of the processing, the legal bases for the processing, and how long we store your personal data are described below.
Name
Your name will be collected and processed by us as it is required by the shipping company to deliver your order. The processing is necessary to perform a contract of which you are a party, and we protect your name during the period of contractual relations where you are a party, and for two years thereafter.
Your name will be shared with our third-party logistics providers, Posten AS and Bring AS, as the personal data is necessary for a shipping company to be able to deliver your ordered products.
Email address, phone number, and home address
To send you email alerts regarding your order, your email address, phone number, and home address will be collected and processed by us, as it is necessary for the performance of a contract of which you are a party. We protect your email address, phone number, and home address during the period of contractual relations where you are a party, and for two years thereafter.
Your email address, phone number, and home address will be shared with our third-party logistics providers, Posten AS and Bring AS, as the personal data is necessary for a shipping company to be able to deliver your ordered products.
You can also, with your consent, subscribe to our newsletter. In that case, your email address will be stored with us for this purpose until you withdraw your consent by unsubscribing.
Payment information
When you pay for your order, your payment information will be processed through our website by our payment service provider, as it is necessary to perform a contract of which you are a party. Such information is only temporarily stored until the payment is completed.
PayPal, Vipps, and Stripe
To offer you Klarna, Vipps, and Stripe payment options, we transfer some of your personal data to Klarna, Vipps, and Stripe, such as contact and order details, so that Klarna, Vipps, and Stripe can assess whether you qualify for their payment options and then tailor the payment options for you. General information about Klarna, Vipps, and Stripe can be found on their websites. Your personal data is handled in accordance with applicable data protection law and in accordance with the information in Klarna, Vipps, and Stripe's privacy policy.
Third-party websites
When you use our website, you may be referred to third-party websites beyond our control. We are not responsible for the content or privacy policies on such sites.
Cookies
A cookie is a small piece of data that can be stored on your computer or mobile device, used to allow the website to "remember" you and your preferences over time. Session cookies are only stored for a short time (up to 30 minutes after the visit), while persistent cookies can be stored for up to 12 months after your last visit to the website.
You can manage cookies and whether you accept cookies or not on your computer or mobile device by entering the browser settings. For most browsers, you can categorically accept, reject, or delete cookies at any time.
Web analytics
We may use third-party service providers to monitor and analyze the use of our service.
Google Analytics
Google Analytics is a web traffic analysis service provided by Google that tracks and reports traffic on the website. Google uses the data collected to track and monitor the use of our service. This data is shared with other Google services. Google may use the collected data to contextualize and personalize ads within its own advertising network.
You can choose to make your website activity unavailable to Google Analytics by installing the Google Analytics opt-out browser add-on. With this add-on, JavaScript content for Google Analytics (ga.js, analytics.js, and dc.js) running on websites is prevented from sharing information about visit activity with Google Analytics.
For more information about Google's privacy practices, please visit Google's privacy terms website: http://www.google.com/intl/en/policies/privacy/
Security
We are committed to ensuring the security of personal information and all data we collect from clients. We use physical, technical, and organizational security measures to protect your personal data that we have collected from unauthorized access and third parties.
Summary of your rights regarding us:
As a user, you have the opportunity to claim several rights against us. These rights are listed here and then described in detail below. You will find our contact information at the top of this privacy policy.
Right to erasure/be forgotten
Right to withdraw consent
Right to access
Right to rectification
Right to restriction of processing
Right to data portability
Right to object
Right to lodge a complaint with a supervisory authority
Right to erasure/be forgotten
You have the right to request that we delete all personal data about you that we process. We will delete the data as soon as possible, but in any case within one month. However, if the personal data is necessary for the performance of our contractual obligations to you or to preserve a legal basis, we will not delete the information until it is no longer necessary. We will also, without your explicit request, delete such personal data that we have collected but no longer have a legal right to process.
Right to withdraw consent
You have the right to withdraw your consent at any time. If you do so, we will delete such personal data that is not subject to any other legal basis than your consent. Deletion will take place as soon as possible. Please note that your withdrawal of consent does not oblige us to delete personal data processed based on contractual relations or other legal basis.
Right to access
You have the right at any time to receive confirmation from us as to whether personal data concerning you is being processed. You also have the right to access this personal data and receive the following information:
The purposes of the processing
The categories of personal data concerned
The recipients or categories of recipients to whom the personal data has been or will be disclosed
The envisaged duration of storage of your personal data or the criteria for determining the duration of storage
The existence of automated decision-making and profiling
Right to rectification
You have the right at any time to demand that we correct information about you
that is inaccurate within one month. Considering the purposes of the processing, you also have the right to complete incomplete personal data about you, including by providing a supplementary statement.
Right to restriction of processing
Instead of requesting that we delete data, you have the right to request restrictions on the processing of your personal data. This can be achieved in the following situations:
You believe that the information stored about you is incorrect, and processing is restricted for a period that allows the data controller to verify the accuracy of your personal data
The processing of your personal data is unlawful, but you want the use of it to be restricted instead of deleted
We do not need your personal data because it is no longer necessary for the purposes for which it was collected, but you need the information to establish, exercise, or defend legal claims
You have objected to the processing of automated decisions or profiling, where a restriction shall be achieved during the period while we assess whether our basis for processing overrides your objection
Right to data portability
You have the right to obtain personal data about you that we process and that you have provided to us. You may also request that we transfer your personal data to another service provider or data controller if we consider it technically possible. The right applies only if the information you want disclosed has been collected based on your consent or if the processing of personal data is carried out by automated decisions and means.
Right to object
You have the right at any time to object, for reasons related to your particular situation, to the processing of your personal data. This can be done when personal data is processed as part of an automated decision, including profiling and direct marketing, if such processing would have been carried out (see "Personal data we process" above).
Right to lodge a complaint with a supervisory authority
You have the right at any time to file a complaint with a supervisory authority regarding our processing of your personal data. Wherever we operate, even if it is not in the Member State where you have your habitual residence, you have the right to submit a complaint to your national supervisory authority. Follow the link below to find the contact information for your national supervisory authority:
https://ec.europa.eu/justice/article-29/structure/data-protection-authorities/index_en.htm
About this privacy policy
With regard to Regulation (EU) 2016/679 (General Data Protection Regulation, GDPR), we must convey what personal data about you we collect and process, and for what purposes. In this privacy policy, you will find all the information we are obliged to inform you about.
The full regulation, in your language, can be found by following this link:
If you wish to defend your rights, as listed in this privacy policy, you can contact us using the contact information above.