1. Purpose

Proper processing of personal data shall create confidence and security for you as our customer and interested parties.

All personal data is processed in accordance with the applicable privacy law and General Data Protection Regulation (GDPR) at any given time.

This privacy policy will explain in what way a company within the Avarn Security Group AS (Group) overall processes personal data that the organisation collects in different circumstances. This policy is complemented by other policies, instructions and information on how personal data is handled within the Group and which are more specific to the processing of personal data that is carried out depending on the service.

2. Responsibilities within the organization

Every company within the Group has a clear personal data responsibility for processing personal data and the Group has an appointed Data Protection Officer.

3. Processing of personal data and purposes

Avarn Security only collects personal data that is necessary and relevant for the purpose. Avarn Security assesses risks and carries out data processing impact assessments when relevant to the personal data processing.

Avarn Security collects your data so that the company can:

• identify you as a customer, user and/or payer,
• provide agreed service,
• improve and develop our services,
• manage your customer account,
• provide and improve our customer service,
• carry out a credit check,
• communicate with you,
• connect your services with other services if you request this, such as connecting to specific applications. If you request such a connection, we will process information necessary to integrate our services with the services of the interested party,
• invoice and recover amounts due
• complaint handling
• prevent and stop unwanted and harmful use of services,
• create customer/user profile to offer personalized content, products and services,
• analyse the use of our systems and services to identify trends/patterns and to collaborate with others on the development of new services,
• provide you with information about products and services based on your preferences, interests, marketing and to review, investigate and implement actions in the event of breach of contract.

As an employee, Avarn Security's processing of personal data is primarily described in internal documentation.

4. Legal basis for processing personal data

Avarn Security only processes personal data in accordance with applicable legislation.

The legal basis for Avarn Security’s processing of personal data may vary depending on the processing performed.

5. Personal data that we collect

Collected personal data depends on the service provided.

Avarn Security may collect the following data:

• Your name, telephone number, date of birth, email address, postal address when you register as a customer or user of our services.
• Social security numbers (certain services).
• Username and password to access our services.
• Payment information such as credit card information, creditworthiness and other relevant banking and account information.
• Information about your customer account and our communication with you.
• Invoice information.
• Information generated in connection with the use of the services, such as the time and duration of use of an application or service and any costs associated with its use.
• Information about your location when using an Avarn Security location-based service, such as when using a location app from Avarn Security on a mobile phone, or for alarm or image transmission.
• Information you provide when you visit our websites and/or use any of our services.

Such information may include IP address, overview of when, where and how you used the service(s), when you visited the website as well as information about which, websites led you to our websites and which of our pages you visited and possible biometric data where it is required for authentication or use of services.

6. Special categories of personal data

Avarn Security only processes special categories of personal data when there is a legal basis for the processing.

7. Records of processing activities

Avarn Security keeps records of the processing of personal data that the company performs. The contents of the records are compliant with applicable legislation.

8. Service providers and subcontractors

Avarn Security may share personal data with service providers and/or subcontractors. These are companies that handle development, operation, technical support and maintenance and that processes personal data on behalf of the company.

Service providers and subcontractors act as Avarn Security’s processors. The processors engaged may only process personal data in accordance with the purposes and instructions provided by the company for the processing. Furthermore, the processor and those acting under the direction of the processor may never access more personal data than is required for the performance of the service covered by the agreement with the company.

Data processing agreements are established in accordance with the requirements of applicable law at any given time with all processors of Avarn Security.

9. Source for collection of personal data

You provide Avarn Security with most of the data Avarn Security collects.

We collect data from you when:

• a contract has been settled with you for the delivery of a service, and the processing is necessary to provide the agreed service,
• You have given your consent to process your personal data

In some cases, however, Avarn Security will be able to obtain personal data from external sources. Avarn Security only collects personal data from other parties for specified purposes and will inform you when this will occur. For example, in the case of a credit check or a check of obedience when hiring, when is necessary for us to comply with legal requirements.

10. Security of personal data

Avarn Security maintains a high level of security for the personal data we handle, and we take appropriate technical and organizational security measures to protect, prevent and limit the risk of the personal data we process from being lost, destroyed, manipulated or made available to unauthorized persons.

Organizational and technical measures are also adapted so that appropriate protective measures are taken depending on the personal data processing that takes place.

Where possible and/or appropriate, personal data is encrypted, pseudonymised or anonymised.

11. Recruitment and hiring

Personnel employed by Avarn Security goes through security checks and gets approved by the supervisory authority in connection with employment. Confidentiality and professional secrecy apply to all employees.

Employees are well informed and work according to specific instructions for each service and/or task performed. Employees are trained in the regulations regarding processing of personal data.

12. Marketing

Avarn Security has established processes for handling direct marketing and there is always an opportunity to opt out of direct marketing.

13. Personal data breach

In the event of a personal data breach, Avarn Security has established processes to handle incidents and inform data subjects (including employees and customers) as well as to report the incidents that by law must be reported to the relevant supervisory authority.

14. Storage location and retention time for personal data

Avarn Security securely stores your data within the Nordic countries and within the EU/EEA.

Avarn Security will keep your data as long it is necessary to achieve the purpose of the processing. The personal data will then be deleted, unless Avarn Security is required by law to continue storing the personal data.

15. What are your protection rights?

For more detailed information about your rights, please visit Avarn Security's website under the “Your protection rights”.

16. Cookies

For more detailed information about how we use cookies and other technologies for tracking, please visit Avarn Security's website under the Cookie Policy.

17. Children's Online Privacy Protection

Avarn Security don’t allow minor visitors, nor collects data or information from them.

18. Changes to our privacy policy

Avarn Security keeps its privacy policy under regular review and places any updates on this web page.

19. How to contact us

If you have any questions about Avarn Security’s privacy policy, the data we hold for you, or you would like to exercise one of your data protection rights, please do not hesitate to contact us.

Email us at: post@avarnsecurity.com

Should you wish to report a complaint or if you feel that Avarn Security has not addressed your concern in a satisfactory manner, you may contact the Supervisory Authority in your home country.