Privacy policy

What does our Privacy Policy cover?

Our privacy policy is effective as of: 15th of June 2017

Our policy applies to our website: IndependenceStep.com

In which situations do we process your data?

We are: a recipient of your personal data.

We process your personal data in the private sector.

We collect personal data of customers/clients.

We process your personal data in a situation that concerns a professional activity or that concerns a commercial activity.

What are our legal grounds for processing your data?

We process your u2018non-sensitiveu2019 personal data.

The legal ground for our processing of your u2018non-sensitiveu2019 personal data is your consent.

A contract to which you are a party.

From whom and how do we collect your data?

We collect your personal data directly from you.

We collect your personal data electronically with the use of a web form.

Electronically with the use of a session cookie. The session cookie is erased at the time you close the Web browser.

Electronically with the use of a persistent cookie. The persistent cookie is erased at the time you erase the cookie or at the time the cookie expires automatically by default.

Your provision of the personal data to us is permitted and voluntary. You can freely give us: We collect the data from you.

If you fail to provide the personal data to us and your provision of the personal data to us is voluntary then you can experience some consequences: It will be impossible to use the services provided on IndependenceStep.com

Your provision of personal data is a requirement that is necessary for the entry into a contract.

Do we perform automated decision-making and profiling?

We do not use your personal data to make automatic decisions about you or the automatic decisions are made by a computer and are made with a human influence.

About our purposes and interests

We process your personal data for purposes that are real and present.

We process your personal data for purposes that are legitimate.

We prevent the processing of your personal data for a secondary purpose that is inconsistent with the primary purpose for which your personal data is collected initially.

We do not process your personal data for a secondary purpose without your prior consent or without a legitimate and legal ground.

If we collect your personal data initially for a primary purpose and our secondary purpose is inconsistent with the primary purpose then we inform you before we process your personal data for the secondary purpose.

Do we minimize your data?

The personal data that we collect are adequate and relevant to our processing purposes.

We limit our collection of your personal data to an amount that is needed for the purposes for which we process the personal data.

We limit our processing of your personal data to an extent that is needed for the purposes for which we process the personal data.

We limit our collection of your personal data to a frequency that is needed for the purposes for which we process the personal data.

We limit our processing of your personal data to a frequency that is needed for the purposes for which we process the personal data.

Are your data accurate?

The personal data that we collect about you are accurate and up-to-date at the time of the collection.

We take reasonable steps to ensure swift deletion or rectification of the personal data that are inaccurate.

How long do we keep your data?

We limit to store your personal data to a time that is needed for the purposes for which we process the personal data.

We review the need to continue the storage of your personal data:

We delete your personal data within a specified time-limit: Every three months we consider deleting data.

If the further retention of your personal data is needed for the purposes that are specified by law, then we can further retain your personal data.

Do we share your data?

We do not disclose your personal data to recipients.

We keep a record of the parties who request that we disclose your personal data and we keep a record of the parties' requests.

We publish the names of the parties who request that we disclose your personal data and the names are published at: independencestep.com/disclosurerequests

We transfer your personal data to a third party that processes the personal data on our behalf: hosting company

Do we transfer your data outside the EU or EEA?

We do not transfer your personal data to countries outside the EU and EEA and we do not transfer your personal data to an international organization.

How secure are your data?

We secure the processing of personal data against the threats to the processing and our security ensures the protection of the personal data.

We have an internal policy for the security of personal data.

Our internal policy for the security of personal data provides the management guidance on the security of personal data.

We have a procedure and an ability to discover, notify and document the breach of the security of the processing of personal data.

If we discover a breach of the security of the processing of personal data then we report the breach to the management.

We investigate the breach.

We prevent accidental or unlawful destruction, loss, alteration, unauthorised disclosure of, or access to, the personal data.

We mitigate the immediate risk of a damage.

Additional information

We add further information that ensures fair and transparent processing of your personal data.

An approved certification body does not certify that we comply with the law.

We do not follow an approved code of conduct which demonstrates that we comply with the law.

What are your rights?

We fulfil your rights that concern the protection of your personal data.

You have the right to object to the processing of your personal data for the purpose of direct marketing.

You can exercise the right at the time of your choice.

If you object to the processing of your personal data for the purpose of direct marketing, then the law forbids that we process the personal data for the purpose of direct marketing.

You have the right to access your personal data.

If you request that we confirm whether or not we process your personal data, then you have a right that obliges us to confirm that we process or do not process your personal data.

Your right to obtain confirmation from us that we process or do not process your personal data

does not include data that is anonymous. includes the personal data that concern you.

Does not include personal data that does not concern you.

Includes pseudonymous data that can be clearly linked to you.

We must give you access to your personal data If you request that we confirm whether or not we process your personal data, and we process your personal data, and you request to access your personal data. We must provide you with a copy of your personal data if you request that we confirm whether or not we process your personal data , and we process your personal data, and you request a copy of your personal data. If you request further copies of your personal data, then we can charge you with a reasonable fee that we base on the administrative costs.

You have the right to the information about our safeguards for the transfer of your personal data to a country that is outside the EU and the EEA if you request that we confirm whether or not we process your personal data , and we transfer your personal data to a country that is outside the EU and the EEA.

You have the right to the rectification of your personal data.

Your right to obtain rectification of inaccurate personal data does not include data that is anonymous.

Includes the personal data that concern you.

Does not include personal data that does not concern you.

Includes pseudonymous data that can be clearly linked to you.

We must rectify your personal data if we process your personal data, and your personal data are inaccurate, and you request to obtain the rectification of your personal data.

We must complete your personal data if we process your personal data, and your personal data are incomplete, and you request to obtain the completion of your personal data.

You have the right to provide us with a supplementary statement.

If your personal data are disclosed to a recipient, then we communicate the rectification of your personal data to the recipient. If the communication of the rectification to the recipient is impossible or involves a disproportionate effort, then we do not communicate the rectification to the recipient.

You have the right to the erasure of your personal data.

We must erase your personal data without undue delay if you request to obtain the erasure of your personal data, and we process your personal data, and your personal data are not necessary to the purposes for which we process the personal data.

We must erase your personal data without undue delay if you request to obtain the erasure of your personal data, and we process your personal data, and you withdraw your consent on which we base the processing of your personal data, and another legal ground does not exist for our processing of your personal data.

We must erase your personal data without undue delay if you request to obtain the erasure of your personal data, and we process your personal data, and our processing of your personal data is necessary for the performance of a task that we carry out in the public interest or in the exercise of an official authority that is vested in us, and our processing is necessary for the purposes of the legitimate interests that we pursue or a third party pursues, and you object to our processing of your personal data, and our processing of your personal data have a legitimate ground that does not override your objection.

We must erase your personal data without undue delay if you request to obtain the erasure of your personal data, and we process your personal data, and you object to our processing of your personal data for the purposes of direct marketing to you, and our processing of your personal data have a legitimate ground that does not override your objection.

We must erase your personal data without undue delay if you request to obtain the erasure of your personal data, and our processing of your personal data are unlawful.

We must erase your personal data without undue delay if you request to obtain the erasure of your personal data, and a legal obligation in Union or Member State law that applies to us requires that we erase your personal data.

We must erase your personal data without undue delay if you request to obtain the erasure of your personal data, and your personal data is collected in relation to the offer of information society services.

We must communicate the erasure of your personal data to the recipients to which we disclose the personal data (if any). If the communication of the erasure to the recipient is impossible or involves a disproportionate effort, then we are not required to communicate the erasure to the recipient.

You have the right to obtain from us the restriction of our processing of your personal data.

Your right to obtain restriction of our processing of your personal data does not include data that is anonymous.

Includes the personal data that concern you.

Does not include personal data that does not concern you.

Includes pseudonymous data that can be clearly linked to you.

We must restrict the processing of your personal data for a period to verify the accuracy of your personal data if you request to obtain the restriction of the processing of your personal data, and you contest the accuracy of your personal data.

We must restrict the processing of your personal data if you request to obtain the restriction of the processing of your personal data, and the processing of your personal data are unlawful, and you oppose the erasure of your personal data.

We must restrict the processing of your personal data if you request to obtain the restriction of the processing of your personal data, and we do not need your personal data for the purposes of our processing, and you require your personal data for the establishment of a legal claim, or you require your personal data for the exercise of a legal claim, or you require your personal data for the defence of a legal claim.

We must restrict the processing of your personal data if you request to obtain the restriction of the processing of your personal data, and you object to our processing of your personal data that are necessary for the performance of a task that we carriy out in the public interest or in the exercise of an official authority that is vested in us, and you object to our processing of your personal data that are necessary for the purposes of the legitimate interests that we pursue, and you wait to verify that our processing of your personal data have a legitimate ground that does not override your objection.

If we disclose your personal data to a recipient, then we must communicate the restriction of processing of your personal data to the recipient. If the communication of the restriction to the recipient is impossible or involves a disproportionate effort, then we are not required to communicate the restriction to the recipient.

If we restrict our processing of your personal data, then we can store the personal data, process your personal data on the basis of his or her consent, process your personal data for the establishment of a legal claim, process your personal data for the exercise of a legal claim, process your personal data for the defence of a legal claim, process your personal data for the protection of the rights of a person, process your personal data for the reasons of a public interest of the Union or of a Member State.

If you obtain a restriction of our processing of your personal data, then we must inform you before a lift of the restriction.

How can you exercise your rights?

We enable you to communicate with us about the exercise of your rights concerning the protection of your personal data.

You can send your request that concerns the protection of your personal data to: our webform at: independencestep.com/privacycontact

You receive our answer to your request that concerns the protection of your personal data at your email address.

We have a person who is responsible for the handling of your request that concerns the protection of your personal data.

We have a policy that ensures that your requests concerning the protection of your personal data are recognized and handled within the time-limits of the law.

We inform you of our handling of your request concerning our exercise of your rights for the protection of your personal data within: a month of the reception of your request.

Do you have a right to complain?

You can lodge a complaint to a supervisory authority at your habitual residence in the EU and the EEA. You can lodge a complaint to a supervisory authority at the place of your work in the EU and the EEA. You can lodge a complaint to a supervisory authority at the place of the alleged infringement in the EU and the EEA. The supervisory authority should inform you of the progress and the outcome of the complaint within a reasonable period.

You can mandate that an organization lodges a complaint on your behalf with a supervisory authority.

The supervisory authority should inform you of the progress and the outcome of the complaint within a reasonable period.

You can seek a judicial remedy in the EU and the EEA against a controller and a processor and a supervisory authority.

You can mandate that an organization exercises your right to a judicial remedy on your behalf. You can mandate that an organization exercises your right to a compensation for a damage as a result of a breach of the law on the protection of the personal data on your behalf.

Can you access and make choices for your data?

Currently, you cannot declare your choice about our processing of your personal data to us.

Will you be informed about our policy changes?

If we make a change to our policy then we publish a new version of our policy.

You cannot read the prior versions of our policy.

A change of our policy will not reduce your rights without your prior consent.

How to contact us

Independence Step AS

Dr.Randers gate 3 1830 ASKIM

NORWAY

Org. ID: 918 770 402

Powered by SIGNATU

privacy@independencestep.com

EH +47 984 46 191

Our responsibility

We alone decide why and how your personal data are processed and we process your personal data. Hence we are a u2018controlleru2019 and a u2018processoru2019.

LASTING VALUES - TOGETHER

About Our dream team Contact Press/News Terms Privacy FAQ