Privacy statement for Nørs App
We are committed to safeguarding your privacy. It’s your data and you’re the boss! You should therefore feel confident that we process your personal data securely. All processing of personal data is in accordance with Norwegian law. Personal data is information that can be linked to you as a person, such as your name, place of residence, phone number, email address and IP address, while sensitive personal data may say something about your state of health.
DATA CONTROLLER
Nors Care AS has overall responsibility for the processing of personal data. Nors Care AS’s address is Stortingsgata 28, NO-0161 Oslo and its organisation number is 918 158 073.
ABOUT THE NORS CARE SERVICE
Nors Care AS (‘NC’) offers its services through the mobile phone application Nørs (‘Nørs’). Nørs has been developed to provide reliable information to pregnant women, their partners and parents of young children. Whether you want to use Nørs is voluntary. You can also use Nørs for a period of time and then decide to stop using it at a later date. See the rules on consent below.
1. ABOUT THE PERSONAL DATA ACT
NC complies with the regulations laid down in the Personal Data Act and the General Data Protection Regulation (GDPR). All personal data that the User provides to NC are processed by us in our capacity as data controller.
2. ABOUT DIFFERENT USERS
Registered user of Nors
If you decide to register, an Account is created and you become a User of Nørs. Your data will then be stored by NC. As User, you have the following advantages:
Access to all services
Adapted ‘My Week’ for you and your needs
Access to your Account from other devices
The following describes how NC processes your data if you are a registered user. This privacy statement explains in more detail how NC processes your personal data. Further information on the principles and regulations for the processing of personal data is available on the Data Protection Authority's website. User of Nors+ (subscription service) The Nørs app is basically free for everyone to use. Users of the app can purchase the subscription service Nørs+ and get access to more services and functionality. The User does not provide any personal data to become a user of Nørs+. This privacy statement will also apply to users who decide to become users of Nørs+. You will find the terms of use for Nørs+ here.
3. THE PURPOSE OF PROCESSING PERSONAL DATA
The purpose of Nørs collecting personal data is to make the lives of the service’s users, i.e. pregnant women, their partners and the parents of young children, easier and safer. No personal data are processed until you have given your consent.
4. USE OF PERSONAL DATA
NC collects and stores personal data only to the extent that you have given your consent. NC stores the personal data on servers in the EU (Germany). NC only uses personal data for the purpose set out in the legislation and that we have informed you of in advance and to which you have given your consent. Everyone who has access to personal data has a duty of confidentiality, also after they have left NC’s employ.
5. THE DATA PROCESSED AND WHY THEY ARE PROCESSED ACCOUNT INFORMATION – MANDATORY INFORMATION
To register an Account, you must provide the following information:
Mobile phone number Used to provide two-factor authentication for logging into your Account. We take your security seriously, which is why we use this type of authentication.
Your age Used to provide you with relevant content and functionality.
If you are pregnant:
Your due date Used to give you an overview of the remaining weeks of your pregnancy, as well as health advice for the relevant week of your pregnancy.
Role in pregnancy (whether you are the pregnant woman or partner) Used to provide relevant content and functionality
Whether you’re a first-time mother or have given birth before Used to provide relevant content and functionality
Whether you are expecting one or multiple children (twins, triplets etc.) Used to provide relevant content and functionality
If you are the parent of small children:
Your gender Used to provide relevant content and functionality
Your child's date of birth Used to provide relevant health advice depending on your child's age
First name of your child Used to allow you to easily navigate to the right child (if you include more than one child)
Gender of your child Used to provide relevant content and functionality
OTHER INFORMATION
If you consent, NC may collect the following information to improve your user experience: Location information from the device you use when you use the Nors app. You may withdraw your consent for us to do so at any time by emailing privacy@norscare.com You may also, as a user of NC, enter other types of information to increase the usefulness of the service. This could include your child's weight, height and head circumference. This information is voluntary for users of the service. Any data you decide to enter will be processed in the same way as mandatory information you provide to register your Account.
DATA AND THIRD PARTIES
NC does not share any sensitive personal data with third parties. NC uses analytics tools to gain insight into the needs of users, so that we can create better solutions. The analytics tool enables us to collect anonymised and aggregate user data, and not health data or sensitive personal data.
6. Disclosure of personal data
Personal data about you will not be disclosed to others. We will not sell, swap or otherwise disclose information of any kind about you.
7. Personal data storage period
Your personal data will be stored as long as you consent to it.
8. Right of access
You always have right of access to the information we have registered about you in connection with NC. You can send a request to privacy@norscare.com to access the information securely.
9. How can I manage my consents?
In the current version of the app, you manage your consents by emailing privacy@norscare.com.
10. Right to rectification
You have the right to have your personal data rectified or supplemented in accordance with the General Data Protection Regulation. You can rectify the personal data we process about you by sending an email to privacy@norscare.com.
11. Right to erasure
You have the right to have personal data about you erased. If you wish to erase your user profile or object to some of the processing you have previously consented to, you can do so by sending an email to privacy@norscare.com. The data you have provided to NC will be erased if you wish to erase your profile or you have been inactive for more than 10 years. If you want to use Nors after ten years of being inactive, you must create a new profile. In the event of death, your profile and stored information will immediately be locked when NC receives information of the death and then erased after three months.
12. Right to restriction of processing
If you do not want NC to erase your personal data, but you have reason to want us to stop processing it in ways other than storage, you have the right to request this under certain circumstances. This could be, for example, if you dispute the accuracy of the personal data, believe the processing is unlawful, or the personal data is no longer needed for the purpose of the processing. For such inquiries related to personal data, you can contact us by sending an email to privacy@norscare.com.
13. Right to data portability
You have the right to: Obtain your personal information and store it on a private device for further and personal use. Move, copy or transfer your personal data to another company. To exercise this right in relation to NC, you can contact us by sending an email to privacy@norscare.com.
14. Right of objection
Under the General Data Protection Regulation, you have the right to object to the processing of your personal data under certain conditions. You can read more about the right of objection on the Norwegian Data Protection Authority’s website: You can contact us by sending an email to privacy@norscare.com for more information.
15. The right to lodge a complaint with a supervisory authority
If you believe our processing of your personal data is in breach of the General Data Protection Regulation, or other data protection regulations, you have the right to lodge a complaint with the supervisory authorities. For Norway, this is the Data Protection Authority, and complaints can be lodged on its website.
16. Changes to privacy terms and conditions
NC reserves the right to change the Privacy Statement with one month's notice on Nors Care’s website. If, in NC's opinion, the change is to the benefit of the users or is of minor importance, the change can be implemented without notice. If NC discontinues one or more of the services, information about this will be given with a minimum of one month's notice on Nors Care’s website, where you will receive information about the process and how it will affect you as a user.
17. How is the data secured?
We take your privacy seriously and therefore require two-factor authentication when registering NC users. The solution is in line with the requirements of the Code of Conduct for Information Security in the health care and care services (www.normen.no). This means that NC's information security is safeguarded in accordance with the Personal Data Act. The following are examples of other measures we have taken to provide satisfactory security with regard to the confidentiality, integrity and availability of your personal data: Encryption of the content of your profile, automatic monitoring of the services to detect viruses, error situations, misuse and hacking attempts etc. These and other measures implemented by NC contribute to achieving a level of security appropriate to the risk involved in processing the personal data.
CONTACT INFORMATION
If you have any questions regarding NC’s processing of your personal data, or you have general questions about privacy and security in NC, you can contact us at privacy@norscare.com.