Privacy Policy

Processing of personal data in OSO Energy AS

This privacy statement describes how OSO Energy AS collects and uses your personal data when you are a customer, visiting our website or using the OSO inCharge app.

The responsible party for processing the personal data is OSO Energy AS (business reg.no. 925156663 (Norway)). If you have any questions about the processing of your personal information, you can contact us at:

Business address:	Industriveien 1, Loesmoen. 3200 Hokksund.
Postal address:	postboks 112. 3301 Hokksund
Email:	privacy_no@osoenergy.no
Phone:	+47 32 25 00 00

1. WHY DO WE COLLECT PERSONAL DATA AND WHAT KIND OF INFORMATION DO WE COLLECT

We collect and use your personal data for different purposes depending on who you are and how we get in touch with you. The data we collect is described below:

As customer

If you are a customer of ours, our processing of your personal data may be summarized as follows, depending on the type of customer relationship we have with you:

Processing/purpose	Type of data and source:	Legal basis: REGULATION (EU) 2016/679
Establishment of customer relationships.	Contact information; name, address, email, password, serial number of water heater. This is information we collect directly from you or through the installer.	Necessary to enter into a contract with the registered user, GDPR Article 6(1)(b).
Use of the OSO inCharge App	Establishment of user profile in the App: Name, address of the equipment associated with the app, phone number, mail address målepunkt-ID Operasjonelle data fra varmtvannsbereder: Temperature Heating element status Water heater mode.	Necessary to enter into a contract with the registered user, GDPR Article 6(1)(b). Electricity meter ID is required for the interface between the smart-grid system and the water heater
Optimization of services / system development	To optimize and further develop our services, we may use aggregated and / or anonymised information about you, including your use of the services and the App.	GDPR Article 6(1)(f). We have a legitimate interest in offering our customers the best possible service, including the App.
Customer contact	When you contact us via email, phone, etc. we will process the contact information necessary to reply to the inquiry, including name, telephone number, email address, address and any personal information that may result from the inquiry.	GDPR Article 6, (1), a og f. If you contact us, this directly or indirectly implies that you consent to us processing the personal data necessary to carry out your request. To the extent that we contact you unsolicited, we have a legitimate interest in processing personal data in order to provide customer service to our existing customers. We have a legitimate interest in communicating with you if you request this and to handle any matters arising as a result of this contact.
Marketing	Name, address, phone number, email address.	GDPR Article 6(1)(f). If we collect personal information about you as a result of you being a customer with us, we may contact you with information about similar products and services (including special offers, discounts, etc.) as long as you have not reserved yourself against such inquiries.

If we collect personal information about you as a result of you being a customer with us, we may contact you with information about similar products and services (including special offers, discounts, etc.) as long as you have not opted out of such inquiries.

Visitors to our website::

Processing:	Type of data:	Legal basis:
Customer contact	When you contact us via the contact form on our website, we will process the contact information necessary to answer the inquiry, including name, telephone number, email address, address and any personal information that may result from the inquiry.	GDPR Article 6, (1) f Our processing is based on a balancing of interests pursuant to Article 6(1)(f) of the General Data Protection Regulation, where our legitimate interest is to be able to respond to the inquiry.

Cookies Policy

To obtain information about the use of spring websites, we use cookies.

You can find more information about how we use cookies here. We also recommend that you read about Google Analytics here.

2. DISCLOSURE OF PERSONAL INFORMATION TO OTHERS

We do not pass on your personal information to others unless there is a legal basis for such disclosure. Examples of such a basis will typically be an agreement with you to hand over data to network companies or a legal basis that requires us to publish the information.

OSO uses data processors to collect, store or otherwise process personal data on our behalf. In such cases, we have entered into data processor agreements to ensure information security in all stages of the processing. All processing of personal data that we carry out takes place within the EU / EEA area, unless otherwise explicitly mentioned above.

3. DATA RETENTION

We store your personal information with us for as long as is necessary for the purpose for which the personal information was collected.

We store information related to your account as long as you have an agreement to use the OSO app. If you decide to terminate the agreement, we will also delete the associated data. However, we may store personal information for longer, should it be necessary to pursue any legal claims or to comply with legal obligations.

Payment and invoice-related information can be stored for up to 5 years after the end of the customer relationship, in accordance with the Norwegian Bookkeeping Legislation.

4. YOUR RIGHTS WHEN WE PROCESS YOUR PERSONAL INFORMATION

You have the right to request access, correction or deletion of the personal data we process about you. You also have the right to request limited processing, object to processing and request the right to data portability. You can read more about the content of these rights in the regulation (EU) 2016/679 of the European Parliament.

To exercise your rights, you must contact us at privacy_no@osoenergy.no

We will respond to your inquiry as soon as possible, and no later than within 30 days.

We will ask you to confirm your identity or provide additional information before we allow you to exercise your rights with us. We do this to be sure that we only give access to your personal data to you – and not to someone pretending to be you.

For those of our processing that is based on consent, you can withdraw your consent for the processing of personal data by us at any time. The easiest way to do this is to contact us at privacy_no@osoenergy.no

5. COMPLAINTS

If you believe that our processing of personal data does not comply with what we have described here or that we otherwise violate privacy laws, we hope you will contact us. However, you also have the right to complain to the National Data Protection Authority.

6. CHANGES

Should there be changes to our services or in the regulations for processing personal data, it may lead to a change in the information you have provided. If we have your contact information, we will notify you of these changes. Otherwise, updated information will always be easily available on our website and in the app.