Privacy Policy APCOA Norway AS

Last modified: 16.10.2024

This privacy policy applies to all services provided by APCOA Norway AS, Organization number: 929 292 065 (the Company). The company's address is Innspurten 15, 0663 OSLO.
The company processes personal data in order to deliver and manage parking services to our customers through our various platforms. In this policy, we explain why we collect information about you, how we use this information, how we take into account your privacy and your rights regarding this.

Data processor

It is the Company (by Managing Director) who is responsible for, the Company's processing of personal data in all channels associated with the Company.
The contact information for APCOA Norway AS is:
Address: Innspurten 15, 0663 Oslo
E-mail: kundesenter[at]apcoa.no
Telephone: 22 05 75 00
Organization no.: 929 292 065

If you have questions about your personal data or other inquiries regarding the processing of your data, you can contact us by e-mail at any time.

Why is the information collected?

We collect and process personal data to fulfill the obligation in the agreement you have with us either by registering or by parking in an area with camera recognition. The information we process is also necessary to comply with laws and regulations for accounting and bookkeeping. Information collected from Google Analytics about the use of our websites is collected to analyze how our websites are used. The company collects and uses your personal data for various purposes depending on who you are and how we come into contact with you. Processing of personal data takes place in line with the purposes stated here:

• To be able to deliver our parking services (subscription or rental of a parking space). The processing takes place on the basis of an agreement with you, or by you using our services without a separate agreement.
• To be able to create and edit a digital user profile in our digital services.
• When issuing a control fee. We then process your personal data only as the law allows us, and so that we can demand recovery. The processing takes place on the basis of our fulfillment of the agreement with you and our legitimate interest.
• We use video surveillance in certain parking areas to ensure security in the area and to prevent theft and vandalism. The processing takes place on the basis of our fulfillment of the agreement with you and our legitimate interest.
• For customer service purposes, we process the information in inquiries that come to us, or should the need arise for us to contact you.
• In order to obtain information about the use of our websites and to be able to carry out targeted marketing, we use cookies. The processing takes place on the basis of our legitimate interest, necessity and/or consent from you.

What personal data is processed?

The personal information that is processed for the stated purposes is in each case limited to what is necessary to be able to fulfill the purpose for which it was collected. Which information is processed will depend on the content of your customer relationship with us, and any agreements you have entered into with the Company.

• Information you provide to us yourself

When you register as a user in our services, we store the personal information you voluntarily provide to us. Information that is stored is your name, address, telephone number, e-mail address as well as information about your vehicle and credit card. In addition, we can process passwords, location, order and purchase history, photographs of vehicles, inquiries to the Company and recordings from video surveillance.

• Information we receive through your use of our services

Our services collect and store personal data using areas with camera recognition. By parking in an area with camera recognition, we can, for example, register the number plate on your vehicle and, in some cases, information about the owner of the vehicle. Our websites, www.apcoa.no, www.profectum.no, www.leie.apcoa.no, www.leieparkering.no, and FLOW application, use analytics tools that collect IP addresses to provide customized experiences based on location, and anonymized information about the usage, for example, which type of device you use to visit the pages with or which pages you use.

What is the information used for?

The personal information is used to be able to offer and adapt our services to you. For example, we need personal data so that you can log in to our services, send you an invoice or receipt or check whether you have a valid agreement. We also use anonymized data for statistical purposes and to ensure that our services function as they should, including that our digital services function optimally.

How is the personal data protected?

We take security seriously and have strict requirements for our systems to protect the personal data under our control. No further information is provided here for reasons of security in our systems.

Who has access to the personal data?

APCOA Norway AS is responsible for processing the personal data and does not share personal data with other companies, unless we have a legal basis for this. The legal basis will typically be an agreement with you, your consent or another basis that requires us to release the information. In our services where you have a permit or rent a parking space from a landlord, your name and information about your vehicles will be available to the landlord. We use the following data processors who process the personal data on our behalf:

• Microsoft Azure is given access to personal data to store and operate our services.
• Arvato Finance AS is given access to personal data in order to take care of customer service and invoicing.
• Kredinor SA is given access to information on whether vehicles have a valid permit.
• Sendgrid Inc. is given access to email addresses to send out receipts per e-mail.
• Twilio Inc. is given access to phone numbers to send SMS.
• Firebase: Used to support app development, including tracking app usage, managing notifications, and user authentication.
• Clevertap: Tracks interactions in the app to identify areas for improvement and enables targeted communication with users.
• Greenflux, Zaptec, Easee, Defa: Handles and monitors data on electricity consumption for electric cars.
• Mixpanel: Tracks user interactions to detect errors and identify improvements.
• Mapbox: Offers map display and location-based services.
• Google Maps: Offers map display and location-based services.
• NETS: Processes secure online payments.
• VIPPS: Handles secure online payments and login.

APCOA Group GmbH acts as a data processor and has access to data for purposes related to service improvement. They may also access personal information on a case-by-case basis to provide customer support.

We may also share your information in the following cases:

• With third-party suppliers who carry out tasks or work on behalf of or according to instructions from us, such as e.g. system providers and providers of payment services. In such cases, we have entered into agreements to safeguard information security at all stages of the processing.

• With third parties, when this is necessary to be able to deliver our services in accordance with the agreement with you or to pursue our legitimate interest, such as e.g. where a payment claim is sent for collection.

• With public authority when required by law or a legally binding decision from an authority.

In some cases, your information may be transferred to business partners or other parties located outside the EU/EEA area. We then take the necessary precautions to ensure that the information is protected in line with the applicable privacy regulations.

How long is the information stored?

The company stores your personal data for as long as is necessary to fulfill the purpose for which the personal data was collected. The personal data we process is stored as long as you have an active customer relationship with us or we have contractual or statutory obligations that require us to store this. Personal data we process in order to fulfill an agreement with you is deleted when the agreement has been fulfilled and all obligations arising from the contractual relationship have been fulfilled, so that information will be deleted after the parking has been paid and the appeal period has expired. Information we process on the basis of your consent is deleted if you withdraw your consent. In some cases, we may retain information beyond the above where it is necessary to our interest in a complaint or we are legally required to do so according to the Accounting or Bookkeeping Act.
In order to limit the storage of personal data, we anonymize or delete personal data continuously when it is no longer necessary for our services to have access to the personal data. For example, we anonymize personal data if you have parked in an area with camera recognition and the parking was free, you paid at a payment machine on site or if you paid online within 48 hours. If you cancel your customer relationship, all personal data that we are not legally required to keep will be deleted. You can contact us regarding this and cancel your customer relationship via e-mail to kundesenter@apcoa.no.

What rights do you have?

You have the right to demand access, correction or deletion of the personal data we process about you. You also have the right to demand limited processing, object to the processing and demand the right to data portability.

To access your rights, you must contact our customer centre. We will respond to your inquiry as soon as possible, and at the latest within 30 days. We will ask you to confirm your identity or provide additional information before we allow you to exercise your rights with us. We do this to be sure that we only give access to your personal data to you - and not to someone pretending to be you.

You can withdraw your consent to the processing of personal data by us at any time. The easiest way to do this is to change your marketing settings in our application, or by contacting our customer service.
We use cookies and similar technologies when you visit our websites.

You also have the right to complain about our data processing to the Norwegian Data Protection Authority. Information about this can be found on the Norwegian Data Protection Authority's website: www.datatilsynet.no.

Cookies

We use cookies for user statistics, to adapt the website to our visitors and to remember visitors' user preferences. The information is used to make the websites work more efficiently, as well as to provide us with business and marketing information.

We also use cookies for marketing purposes to be able to show you advertisements that may be relevant on other websites you visit. Such cookies are placed on our website by a third-party advertising network, including Facebook and Google, on our behalf and with our permission.

The cookies can share information about navigation on the website, what you have purchased, the time of purchase and IP address and browser to the advertising network.

The advertising networks can then connect the activity on our website to your user account when you are logged in to their platforms.

The purpose of the activity is to be able to offer our customers customized and relevant advertising.

You can easily disable cookies on our websites (apart from necessary cookies) by going to our settings for the use of cookies or by opting out by changing the settings in your browsers.

You can also delete cookies that have been stored on your device. You do this via the menu in your browser. How this is done depends on your browser.

If you choose to turn off cookies in your browser, your online activity will not be recorded. You should be aware that when you switch off cookies, you will also automatically opt out of part of the website's functionality, and the page may not function optimally.

Changes to the privacy policy

We will periodically be able to update or change the privacy policy. Updated information about our processing of personal data must always be easily accessible on our websites.