Privacy Policy

1. GENERAL
At Careless AS, we take care of your privacy. In this privacy statement, we inform you about how we handle your personal information when you visit our websites, register an account through any of our websites, purchase our products or services, or when you are otherwise in contact with us. In this statement, you will also find information about your rights regarding the handling of your personal information in accordance with the General Data Protection Regulation (GDPR).

We may make changes to our privacy statement to reflect changes in our business, on our websites or services, or applicable law. The latest version of the privacy statement is always available on this website.

Feel free to contact us if you have any questions or concerns.

2. WHAT IS PERSONAL INFORMATION, AND WHAT IS PROCESSING OF PERSONAL INFORMATION?
Personal information is any information that can be directly or indirectly linked to you, with or without other information, such as name, social security number, IP address, or purchase history.

All forms of handling personal information are considered processing of personal information, including collection, recording, organization, storage, processing, alteration, reading, use, disclosure, distribution, or other provision of information, compilation or consolidation, blocking, deletion, or destruction.

3. WHO IS RESPONSIBLE FOR THE PERSONAL INFORMATION WE COLLECT?
Snowroller AS is responsible for ensuring that such processing is carried out in accordance with applicable law.

4. HOW DO WE COLLECT PERSONAL INFORMATION?
In collaboration with Stripe, Klarna, Paypal, Apple Pay, and Vipps, we offer sales from our online store. Snowroller does not store more information from the customer than is necessary to fulfill the customer’s order (i.e., name, address, phone, and email). All other information collected to complete the payment is stored by Stripe, Klarna, Paypal, Apple Pay, and Vipps in their systems.

If you wish to create a customer account with Snowroller, we collect personal information such as full name, address, email address, phone number, payment information, purchase, order, and usage history, IP address, and other relevant information that you provide when contacting our customer service.

5. WHAT PERSONAL INFORMATION DO WE COLLECT AND WHY?
a) To manage orders and purchases

Personal information is processed to enable the following:

• Delivery of a purchased product or service
• Payment processing (including analysis of possible payment solutions, which may involve a check against payment history and obtaining credit information from credit reporting agencies)
• Address verification from external sources, such as Klarna or similar
• Handling of warranty and guarantee issues
  The categories of personal information processed include:
• Name
• Social security number (if you choose an invoice from Klarna)
• Contact information (e.g., address, email, phone number)
• Payment information (e.g., card number, transaction time, cardholder)
• Credit information from credit reporting agencies
• Order information
• User information for My Account (members only)
• Your correspondence
  Legal basis: Fulfillment of the purchase agreement. This collection of personal information is required for us to fulfill our obligations under the purchase agreement.

Storage period: Until the purchase is completed (including delivery and payment) and for a period of 36 months thereafter for the purpose of handling any warranty and guarantee issues.

b) To manage membership and “My Account”

Personal information is processed to enable the following:

• Permission to log in
• Maintaining correct and updated information
• Ability for you to track your purchases and payment history
• Ability for you to save favorites and similar facilitating actions
• Managing your customer choices (e.g., your profile and settings)
  The categories of personal information processed include:
• Name and contact information (e.g., name, address, email, phone number)
• Username and password
• Order history
• Payment information
• Settings regarding your profile and personal choices
  Legal basis: Contract fulfillment. Processing is necessary to create and manage your membership pages in accordance with the membership terms and thereby to fulfill our agreement with you.

Storage period: Until you close your account. If your membership has been inactive for 36 months, we will delete your account and related information, provided that you have no outstanding debts to us. Inactivity means that you have not made a purchase.

c) To handle customer service matters

Personal information is processed to enable the following:

• Communication and response to customer service questions via phone, email, or digital channels (including social media)
• Processing of complaints and support cases (including technical support)
  The categories of personal information processed include:
• Name and contact information (e.g., name, address, email, phone number)
• Your correspondence
• Information about the time of purchase, place of purchase, and any errors or complaints
• Technical information about your equipment
  Legal basis: Legitimate interest. Processing is necessary to satisfy our and your legitimate interest in handling customer service matters.

Storage period: The information is processed until the customer service matter is concluded and for a period of 12 months thereafter for the purpose of providing better customer service in case of any renewed issues.

d) To prevent misuse of a service or to prevent, detect, and investigate company breaches

Personal information is processed to enable the following:

• Investigating or preventing fraud or other legal violations through incident reporting in the store, for example
• Preventing spam, phishing, harassment, unauthorized login attempts to user accounts, or other actions prohibited by a company’s terms of use
• Protecting and improving the company’s IT environment against attacks and intrusions
  The categories of personal information processed include:
• Purchase and user-generated data (e.g., click and visit history)
• Social security number
• Video recordings from camera surveillance
• Information about the devices the customer uses, including settings such as language setting, IP address, browser settings, time zone, operating system, screen resolution, and platform.
• Information about how our digital services are used.
  Legal basis: Fulfillment of a legal obligation (if applicable) or legitimate interest. If there is no legal obligation, processing is necessary to satisfy our legitimate interest in preventing misuse of a service or to prevent, detect, and investigate company breaches.

Storage period: From the collection and for a period of 36 months thereafter.

e) To carry out and manage participation in competitions and events

Personal information is processed to enable the following:

• Communicating with participants in a competition organized by the company
• Communicating with participants before and after an event (e.g., confirmation of applications, questions, or evaluations)
• Identifying the participant and verifying the participant’s age
• Announcing winners and delivering prizes
  The categories of personal information processed include:
• Name
• Contact information (e.g., address, email, phone number)
• Information provided in competition entries
• Information provided in event evaluations
  Legal basis: Legitimate interest. Processing is necessary to satisfy our and your legitimate interest in managing your participation in competitions and/or events.

Storage period: From the collection and for a period of 36 months thereafter.

f) To market products and services

Personal information is

processed to enable the following:

• Display relevant product recommendations, suggest shopping lists, remind of abandoned digital shopping carts, save shopping lists to simplify future purchases, or similar actions that enhance your shopping experience.
• Send direct marketing via email, SMS, social media, or other similar electronic communication channels, as well as via mail, including offers from partners to existing customers.
• Conduct campaigns or send offers and event invitations.
  The categories of personal information processed include:
• Name
• Contact information (e.g., address, email, phone number)
• Residence
• Information about completed purchases
• Purchase and user-generated data (e.g., click and visit history)
  Legal basis: Contract fulfillment for customers with My Account. Balancing of interests for newsletter recipients and website visitors.

Storage period:

• For contract fulfillment: Until you close your account.
• For balancing of interests: From the collection and for a period of 36 months thereafter.

6. HOW LONG DO WE STORE INFORMATION ABOUT YOU?
Your personal information is only stored for as long as necessary to fulfill the purposes of the processing or as required by law. Please see the specific storage times under the respective purposes in section 5 of this privacy statement.

7. DO WE SHARE PERSONAL INFORMATION?
We only share your personal information when required by law or otherwise allowed by law. In certain cases, we may use data processors who assist us with marketing or processing agreements and orders, such as freight and logistics companies, bank and credit card companies, or marketing providers. In such cases, we have entered into agreements with the data processor to ensure that security measures are in place to protect your information. When we share your information, it will be used for the same purposes for which it was initially collected.

We minimize the transfer of personal information to countries outside the EU/EEA. In cases where such transfers occur, such as for system support and maintenance, it is done according to strict requirements and agreements.

We also share your personal information with certain independent data controllers, such as authorities or companies that offer independent payment solutions or general freight transport. These companies independently determine how the information is processed in accordance with their privacy statements.

8. CAN CHILDREN USE OUR SERVICES?
Our websites and services are not directed at children under the legal age of majority. We do not knowingly collect information, including personal information, from children or other individuals who do not have the legal right to use our websites and services. If we become aware that we have collected information about a child under the legal age of majority by mistake, we will delete it unless the law requires us to keep it. Please contact us at kundeservice@snowroller.no if you believe that we have collected information about a child under the legal age of majority by mistake.

9. HOW ARE YOUR PERSONAL INFORMATION PROTECTED?
We implement necessary legal, technical, and organizational security measures to protect your personal information from being manipulated, lost, or destroyed, or from unauthorized access. Our security procedures are updated as technology develops and improves.

10. SOCIAL MEDIA
Currently, you can follow us on various social media platforms, including Facebook and Instagram. On these accounts, we are only responsible for any personal information that we publish ourselves or can influence the publication of.

11. HOW DO WE USE COOKIES?
We use cookies on Snowroller’s website, which are small text files stored on the visitor’s computer and can be used to track the visitor’s activity on the site. Snowroller uses cookies to improve the user experience and customize the site according to preferences, choices, and interests. Cookies ensure that the visitor is logged in on the site and does not have to log in on each new page opened on the website.

There are two main types of cookies:

• A permanent cookie remains on the visitor’s computer for a specified time.
• A session cookie is temporarily stored in the computer’s memory during the time a visitor is on a website. Session cookies disappear when you close your browser.

Permanent cookies are used to store any personal preferences at Snowroller so that you do not have to repeat certain choices each time you visit the site. Session cookies are used, among other things, to record statistics on site usage.

How to remove cookies:

If you no longer want to use cookies, you can disable cookies in your browser settings. You can also set your browser to ask for permission every time Snowroller’s website tries to place a cookie on your computer, or delete previously stored cookies that you no longer wish to display.

How to remove cookies may vary depending on the web browser you use. If you use a PC, you can remove cookies using the shortcut command [CTRL]+[SHIFT]+[Delete].

If you use a Mac, click on the link for the web browser you use:

• Internet Explorer
• Mozilla Firefox
• Google Chrome
• Opera
• Safari
• Flash cookies

Please note that if you choose not to use cookies, the functionality of certain parts of the website may be limited. For example, you may not be able to complete a purchase.

12. WHAT RIGHTS DO YOU HAVE?
In accordance with the GDPR, you have certain rights regarding the processing of your personal information. Access to your personal information (a so-called record extract): You have the right to request access to your information through a record extract. Since it is important that we do not provide your personal information to anyone else, a request for a record extract must be made in writing and signed by you.

Correction of personal information: You always have the right to request that your personal information be corrected. You can log in to “My Account” and correct incorrect information yourself or contact our customer service.

Deletion of your personal information: You can request the deletion of your personal information, provided that we have no obligation to store the information in accordance with applicable laws and regulations.

Restriction of processing: You have the right to object to the processing of your personal information based on a balance of interests at any time. You also have the right to object to your personal information being processed for marketing purposes. This means that you have the right to decline newsletters and other marketing communications from us. If you object to marketing, your personal information will no longer be processed for such purposes.

Data portability: You have the right to request that personal information be transferred from us to another company, authority, or organization. This right is limited to information that you have provided to us yourself.

13. HOW DO YOU CONTACT US MOST EASILY WITH QUESTIONS ABOUT PRIVACY?
If you have questions about data and privacy or believe that we have handled your personal information incorrectly, you can always contact us through our customer service at kundeservice@snowroller.no.

14. COMPLAINT TO SUPERVISORY AUTHORITY
Anyone who believes that there is incorrect handling of personal information can file a complaint with the Data Protection Authority, which is responsible for supervision in accordance with applicable data protection laws.