Integrity policy (GDPR)
Ulvang protects your integrity and strives to always protect your personal data in the best possible way. You can read about how we treat your integrity below.
1. General information about GDPR
Here you can read about what the privacy reform entails for your customer relationship with Ulvang and Brav Norway AS (the owner company of Ulvang). If you have any other questions, you are welcome to contact us at [email protected]
What is GDPR?
The EU's new privacy reform, better known as the "GDPR" (General Data Protection Regulation), is designed to improve your data security across European country borders in EU and EEA countries. Privacy is important to us in Ulvang, and here you will find information about how we work to comply with the new privacy rules.
A safer e-commerce for you as a customer.
The new regulation becomes part of the Norwegian legislative text, and is an additional assurance that your personal information is processed properly and in accordance with the law. It will be a greater responsibility with us when processing and securing your customer data, at the same time as you will be able to carry out your online shopping in the same way as before.
Your current consent is still valid. What is new is that you can now choose whether you want offers and news via e-mail and that the information about your consent and what it means is up to date. You can withdraw your consent at any time by contacting [email protected] You can also easily unsubscribe from the newsletter by following the instructions at the bottom of the newsletter you received.
Treatment manager and third party
Chief Executive Officer of Brav Norway AS (Ulvang's owner company) is overall responsible for Ulvang's processing of personal data. To provide a tailor-made buying experience for you, we use external partners, but your personal data will in no way be breached or sold to third parties. We guarantee that. In our privacy statement you can read more about our processing of personal data.
In connection with the GDPR, we have adapted and simplified our privacy statement. In the statement you can read more about how we process your personal information and what types of information it applies. The declaration states which customer data you leave with a purchase with us, and the contact points for the information internally in our system.
Data Protection Officer
We have appointed a Data Protection Officer, who is an employee of Brav Norway AS. The ombud is our internal privacy adviser who follows up on ensuring that the privacy is safeguarded and that we are always within the regulations.
Increased security for your customer data
The new directive requires that we have a complete overview of all the company's personal data and make demands on the safety of these. In the event of a data breach, which may be of importance to your personal information, we follow the rules for reporting duty specified in the GDPR.
2. Privacy statement
This privacy statement describes how we collect and process personal information.
Brav Norway AS, Managing Director, is responsible for the treatment of the company's processing of personal data. The person responsible for the treatment has the highest responsibility for ensuring that all processing and handling of personal data takes place in accordance with applicable legislation. The day-to-day responsibility is delegated to our Privacy Officer, also known as the "Data Protection Officer". The delegation covers only the tasks and not the responsibility itself.
Brav Norway AS has its own privacy agent, a DPO. The tasks of the Data Protection Officer are to provide employees with information and advice on the privacy legislation, to monitor compliance with the Privacy Regulation and internal guidelines, as well as to provide advice on privacy consequences and be the point of contact for the data subjects and the audit.
Processing of personal information on Ulvang.no
The web editor has the daily responsibility for Brav Norway AS 'processing of personal information on ulvang.no. It is voluntary for those who visit the websites to provide personal information in connection with services, such as receiving newsletters. The treatment basis is the consent of the individual, unless otherwise specified.
Evry AS is our general data processor, and is a supplier for the development and maintenance of our ERP system. Byte AS is our operating supplier and data processor for ulvang.no.
Information collected in connection with the operation of a website is stored on its own servers which are operated by the supplier. Only Brav Norway AS, Evry AS and Byte AS have access to the information collected. A separate data processing agreement between Brav Norway AS and Evry AS regulates what information the supplier has access to and how it should be processed.
In order to make a purchase on ulvang.no we need name, address, mobile number and e-mail.
This is necessary to be able to send the products you have ordered to the correct shipping address, keep up to date with the order movements and contact you if it should be needed according to your order.
We are required to keep order information in connection with accounting, tax handling and any warranty / return handling. This history is deleted after ten years. We also store the IP address used for ordering for security reasons. The order information is stored securely in our e-commerce platform, as well as in our ERP system.
You have the right to access your personal data which we have registered in accordance with applicable law. You may at any time request this information without consideration in accordance with the law. Normally, you will receive the personal information you have requested from us within 3-5 business days, but we note that it may take longer periods of time.
You may also, at any time, ask us to delete or modify your personal information provided that we are not obliged to keep it in accordance with applicable law or any other obligation we may have.
Information must be provided / transferred in a secure manner. If you send the request electronically (eg via email or chat), and unless you ask otherwise, the information should be provided in a regular electronic form.
You can withdraw your consent at any time by contacting [email protected] or by using the information at the bottom of any newsletter we send out.
You have the right to appeal to the Data Inspectorate if you find that your personal data is not processed in accordance with this declaration.
If you have experienced anything that you believe is a violation of the regulations of Brav Norway AS, you can complain by sending a written request to [email protected] or in the form of a letter to the following address:
Brav Norway AS Blåswixvegen 5 NO-2624 Lillehammer Norway
Note the correspondence with "GDPR".
If you still feel that you have not received enough answers from us, you can appeal to the Data Inspectorate by sending a letter to the Data Inspectorate, PO Box 8177, 0034 Oslo. The Data Inspectorate will then consider whether to follow the case further.
Personal data storage
The Accounting Act requires us to store transaction data for 5 years, but in order to safeguard customers' rights in connection with the warranty and complaint in accordance with the Consumer Purchase Act and the Purchase Act's terms of sale, we store purchase history for 10 years.
Securing personal information
Ulvang.no has good routines to ensure that unauthorized persons do not gain access to your personal data and that the processing of data takes place in accordance with the requirements of current legislation. All pages on ulvang.no are encrypted with Buypass Class 2 (SHA256RSA) certificate. Our ERP system is also secured with encryption (Microsoft IT TLS CA 2, SHA256RSA).
You can rest assured that we store your personal information safely.
Delivery of goods
We cooperate with UPS and Posten / Bring for the transport of goods and we provide personal information that is necessary for them to be able to deliver the goods to you. The information shared with the carriers is the name, address and telephone number. The information is deleted from the carriers within 36 months, unless applicable legislation indicates otherwise.
For security reasons, we keep history containing the IP address we receive orders from. Payment information at Brav Norway AS is: IP address, name, address, e-mail and mobile phone number. This information is stored securely at Klarna, which is our partner in payment solutions.
All systems that process personal information related to the payment of orders are strictly limited to employees who perform the necessary tasks related to the order.
Card numbers are not stored beyond what is necessary to ensure effective handling of any issues with charge, cancellation of reservation and credit. It is not possible for ulvang.no to see your entire card number in any of our systems.
If you choose card as payment method, payment information and card information will be shared with our payment provider for cards, Klarna. Payment and card details are only used to make a payment.
To make it even easier when shopping, you can choose to store your card information securely in the checkout. Our payment partner, Klarna, will then store the card in their secure systems so that you can buy through this. We do not store your card information beyond referencing it with an identifier. Later purchases on the stored card are easy to carry out, so it is important that you log out of your customer account once you have completed the transaction, possibly ensuring that unauthorized persons do not have access to the device you are using. You are responsible for not sharing your username and password with others.
Invoice information is also stored in Klarna's secure solution. If you choose an invoice as a payment method, your personal identification number will be stored securely at Klarna, so that a credit check can be carried out.
The information you provide for online payments will only be linked to your customer account. The information is stored in accordance with applicable laws. The purpose is that you should not have to provide the payment information every time you make a purchase with us.
Klarna is certified according to the card companies' strictest regulations, PCI Level 1.
Cookies are small text files that are stored on your device when you download a website. These are used, among other things. to improve your user experience and remember who you are, so you stay logged in.
The purpose of cookies is to provide the online store with basic functionality such as session management, analysis, personalization and marketing.
First-party cookies are required for the web site to work.
Third-party cookies are used for analysis, marketing and personalization of the website.
How to Avoid Cookies
If you want to avoid using cookies, you can set your browser to not accept them. See the browser's help pages for settings. Please note that if you choose to exclude cookies, several of the functions on Ulvang.no will not work.
We collect unidentified information about visitors to ulvang.no. The purpose of this is to compile statistics that we use to improve and further develop the information on the website. Examples of what the statistics answer to are how many people visit different pages, how long the visit lasts, which sites the users come from and which browsers are used.
The information is processed in an unidentified and aggregated form. By de-identified is meant that we cannot trace the information we collect back to the individual user. We collect the entire IP address, but the IP address is unidentified so that only the first three groups in the address are used to generate statistics. That is, if the IP address consists of the numbers 126.96.36.199, only 195.159.103.xx is used. In addition, the IP addresses are processed at the aggregate level, ie all data is merged into one group and not processed individually.
We use the Google Analytics analysis tool on our site. Information from this tool is never provided from Brav Norway AS to other parties.
In order to give you a relevant and good experience in our online store, we use some features and systems to personalize the content to suit you and your interests.
We send out newsletters about 1-3 times per. month by email, depending on the season. In order for us to be able to send email you must register an email address. MailChimp is the data processor for the newsletter. The email address is stored in a separate database, not shared with others and deleted when you cancel the subscription. The email address will also be deleted if we receive feedback that it is not active.
The treatment basis for email marketing is consent
We want our marketing to be perceived as relevant and valuable to you at all times, therefore the content will often be adapted to you. We work with selected system vendors to get a good solution related to e-mail shipments.
We and our partners track ads to know which ads you have seen online, and what products you have looked at with us. With this we can customize the store according to your interests and show you relevant products at the next opportunity.
The marketing manager has the daily responsibility for Brav Norway AS 'processing of personal data related to marketing, analysis and personalization.
Personal data to third parties
Brav Norway AS will never share, sell, transfer or otherwise disclose your personal information in any other way than described in our privacy statement. The only exception to this is whether we are legally obliged or get your specific consent. Partners will only gain access to the information if this is necessary to perform services for Brav Norway AS. In such cases, data processing agreements are entered into to safeguard the information security, in addition, Brav Norway AS will decide how the processing of the information shall take place.
Changes in the statement
If we make changes to this privacy statement, we will post the revised version here with an updated audit date (see bottom of page). We encourage you to review the statement on a regular basis. If major changes are made that significantly alter our privacy practices, we may also notify you in other ways such as: by e-mail.
If you have any questions about personal information, you can contact Brav Norway AS's privacy representative at e-mail [email protected]
If you want us to delete your information or you want to have your personal information stored by Brav Norway AS, please contact us at e-mail [email protected]
Brav Norway AS, Blåswixvegen 5, NO-2624 Lillehammer, Norway
Note the correspondence with "GDPR".
The privacy statement was last modified: 10.08.2018