CBK Privacy Policy 

At CBK Distribusjon, we prioritize your privacy and always strive for a high level of data protection. This privacy statement explains how we collect and use your personal information. It also outlines your rights.

It is important that you understand the privacy rules and feel confident in our handling of your personal data. You are always welcome to contact us if you have any questions. 

What are personal data and what is the processing of personal data?

Personal data is any kind of information that can be directly or indirectly attributed to a physical person. This can include images and audio recordings processed on a computer where no names are mentioned. Encrypted information and various types of electronic identities (e.g., IP numbers) are considered personal data if they can be linked to physical persons.

Processing of personal data includes collection, recording, organization, structuring, storage, processing, transmission, and deletion.

Who is responsible for the personal data we collect?

CBK Distribusjon AS, org. no. 995 971 003, with address Gneisveien 30, 2020 Skedsmokorset, is responsible for the processing of your personal data.

From which sources do we collect your personal information?

In addition to the information you provide us, we may also gather personal information from third parties.The information we collect from third parties is as follows:

1. Address information from public sources to ensure we have accurate address information for you.

2. Information on credit assessment from credit rating agencies, banks, or information companies.

3. Data from social media for marketing purposes.

How long do we store your personal information

We never store your personal information longer than necessary for each purpose.

What rights do you have as a registered individual

Right to access

We are always open and transparent about how we process your personal information, and if you wish to gain deeper insight into the personal data we process about you, you can request access to the data. Please note that if we receive a request for access, we may ask for additional information to ensure the effective handling of your request and that the information is provided to the correct person.

Right to rectification

You can request that your personal information be corrected if the information is incorrect. Within the framework of the specified purpose, you also have the right to supplement any incomplete personal information.

Direct marketing

Direct marketing refers to all types of proactive marketing measures (e.g., via email and SMS). Marketing measures where you as a customer actively chose to use one of our services or otherwise contacted us to learn more about our services are not considered direct marketing (e.g., product recommendations or other features). If you object to direct marketing, we will cease processing your personal information for that purpose and discontinue all types of direct marketing measures. 

How do we handle social security numbers?

We only process social security numbers when there is a clearly justified purpose, such as for secure identification or if there is another legitimate reason. We always minimize the use of social security numbers to the greatest extent possible.

How are your personal data protected?

We utilize IT systems to safeguard confidentiality, privacy, and access to personal data. We have implemented specific security measures to protect your personal information against illegal or unauthorized use (such as unlawful access, loss, destruction, or damage).

What does it mean that the Data Protection Authority is a supervisory authority?

The Data Protection Authority is responsible for monitoring the application of legislation and evaluating whether a company handles personal data correctly.

How can you contact us most easily with questions about data protection?

Since we take data protection very seriously, we have dedicated staff within the company who handle it. We can make changes to our privacy policies.

Right to erasure

You can request the deletion of the personal data we process about you if:

• The data are no longer necessary for the purposes they were collected or processed for.
• You object to a balancing of interests we have made based on legitimate interest, and your reason for deletion outweighs our legitimate interest.
• You object to processing for direct marketing purposes.
• Personal data is processed unlawfully.
• The personal data must be erased to comply with a legal obligation that we are subject to.

Please note that we may have the right to refuse your request if there are legal obligations preventing us from immediately deleting certain personal data. These obligations stem from accounting and tax legislation, banking and anti-money laundering legislation, as well as consumer legislation. It may also be necessary for processing to enable us to determine, assert, or defend legal claims.

Right to restriction of processing

You have the right to request that the processing of your personal data be restricted. If you dispute that the personal data we process is correct, you can request restricted processing while we verify the accuracy of the personal data. If you have objected to a balancing of legitimate interests that we have made as a legal basis for a purpose, you may request restricted processing for the time we need to assess whether our legitimate interests outweigh your interests by deleting the data.

If processing has been restricted in accordance with one of the situations above, we may only, in addition to storage itself, process the data to establish, enforce, or defend legal claims, to protect the rights of others, or if you have given your consent.

Right to object to certain types of processing

You always have the right to opt-out of direct marketing from us based on a balancing of interests.