Menu Close

OSLO HELSE PRIVACY POLICY

This Privacy Policy tells you about how Oslo Helse collects and uses personal data.

Oslo Helse, by the CEO, is the data controller for the processing of personal data. This Privacy Policy contains information you have requirements under the Personal Data Processing Act (Act of 15 June 2018no. 15. 38), which includes the EU Regulation 2016/697 (GDPR), together with the Personal Data Act.

This Privacy Policy applies to the collection of personal data that we do on our customers in connection with the administration of our services and about visitors to our websites. The Privacy Policy also applies to others we have a legal basis for processing personal data about, for example, you who have consented to the processing Oslo Helse makes. We use the term "you" and “your” and the about you, regardless of what treatments we make about you.

Personal data of www.oslohelse.no

Personal data is voluntarily provided on the website in connection with your ordering services from Oslo Helse, such as orders, newsletters, and other services. The legal basis for collecting personal data in connection with the provision of our services is the Service Agreement we have entered into with you. This basis also applies to the information we need to manage the customer relationship. We also use consent as a basis for processing, for example, to send out newsletters, and collect this when necessary and as described below.

Oslo Helse is the data controller and is responsible for the development and maintenance of the website. The website is operated by Endeavour Consulting with AWS (www. aws.com) as a service provider for www.oslohelse.no.

Information collected about our customers and visitors to the websites is stored on our servers operated by AWS in a secure cloud solution. Only Oslo Helse, Endeavour Consulting, and AWS have access to the data, and the processing is regulated through a separate data processing agreement between the parties.

Personal profile of those who order or register to take a test – purpose of processing

When you order goods or when you register a user profile to take a test, the information of each individual who has registered will be kept for up to 6 months after the test has been analyzed and then all personal information will be deleted from our database.

When purchasing or registering to take a test, we collect personal data as listed below, and the data recorded is necessary for managing and delivering the service, preparing invoice information, passing on information to public authorities, and providing a certificate to those who have ordered it. Data collected is transmitted to central health authorities in the required way to be added to each individual's patient record at FHI and by them shared to Helsenorge for providing the digital vaccine passport.

You can read the data processing conditions at FHI

Oslo Helse uses a proprietary solution for ordering and registration for testing. In this solution, you can enroll in courses and we collect the following data:

PERSON:

  • First name
  • Last name
  • Social security number or birthdate
  • Email address
  • Mobile number

Oslo Helse is responsible for processing personal data in connection with finance, bookkeeping, and payment from or to participants and companies, including storage under accounting legislation.

Web statistics

Oslo Helse collects de-identified traffic data and statistics about visitors to www.oslohelse.no. We use this information to improve and further develop the offer on the website. Examples of what the statistics provide answers to are how many people visit different pages, how long the visit lasts, which websites the users come from, and which browsers are used.

The data is processed in de-identified and aggregated form and contains no private data about the user or that we know who it is. We collect the entire IP address, but the IP address is de-identified so that only the first three groups in the address are used to generate statistics. Besides, the aggregated IP addresses are processed, that is, all data is merged into a group and not processed individually.

We use the Google Analytics analytics tool on our website. Information from this tool is not disclosed from Oslo Helse to other actors.

Cookies

When you visit the website www.oslohelse.no we record some information about your visit with a so-called cookie. This is a small file that is stored in the browser of the device you are using. If you do not want cookies to be stored on your computer, you must turn off the feature in your browser. Please note that this causes you to lose functionality on our website and that the services may not work as intended.

The cookie is used to store information from our website, such as about when you last visited us or data you entered into one of our registration or general inquiries form.

Information collected on oslohelse.no will never be shared or sold. It also may not identify you as a person, but will only be used to analyse user behaviour to improve our website through the use of Google Analytics. This is important for the website to provide the type of information that users want.

Google Analytics collects information about which pages are most read, what visitors search for on osloHelse.no etc. The information cannot be traced back to you. We use the information to improve and further develop our website.

Newsletters and communication with existing customers

Oslo Helse sends out newsletters with news and special offers periodically via email. For us to send an email, you must register an email address and give your consent to receive newsletters. Oslo Helse uses MailChimp for the sending of newsletters. The email address is stored in a separate database, is not shared with others, and is deleted when you cancel your subscription. The email address will also be deleted if we get feedback that it's not active. You can choose to specify whether you represent a business or are a private person. This is done for us to only send relevant information.

If you would like to see your data or change them, please contact us or click on the link in the next data update newsletter. By clicking on the same link, you can opt-out of receiving newsletters at any time.

In addition to section 15 of the Marketing Act, we communicate to our existing customers via email about services we have previously provided. You can opt-out of marketing inquiries by contacting us.

Right to view and to delete

Everyone has the right to access basic information about the treatment of personal data in a business according to GDPR Articles 12 - 14. We have provided this information in this Statement and will refer to it for any requests.

Those registered in our systems are entitled to access to information. The person concerned also has the right to request that incorrect and incomplete information, or information Oslo Helse is not permitted to process, be corrected, deleted, or supplemented. You can contact our data protection officer at post@oslohelse.no if you would like to access your data, or have other questions related to Oslo Health's processing of your data. Claims from the data subject shall be answered free of charge and no later than within 30 days.