Personvernerklæring

Integrity policy

1. GENERAL
Iskyene.no protects your personal privacy and takes measures to ensure that your personal data is protected when using our services. Below is our policy regarding integrity ("Integrity Policy") that determines how Iskyene AS, ORG Number 920972659 Postboks 55, Holmenkollen, 0712 Oslo, Norway, info@iskyene.com ("iskyene/we") is using, processing and protects your personal data. The Integrity Policy is applicable when iskyene is providing services and products related to purchase, service matters and other contact with iskyene.

Parts of the Integrity Policy also applies to the processing of personal data for persons who consents to customized marketing services ("Subscriber").

In order for us to offer you Klarnas payment method, we need to share some of your personal information to Klarna, such as contact and order information, in order for Klarna to evaluate if you can offer their payment methods and to customize payment options for you. More information about Klarna can be found https://www.klarna.com/no/personvern/

2. WHO IS RESPONSIBLE FOR YOUR PERSONAL DATA?
Iskyene is the data controller and has the following contact information:
Via mail: Iskyene AS, Postboks 55, Holmenkollen, 0712 Oslo, Norway
Phone: +46 40587258
Email: info@iskyene.no
Iskyene intends to process all personal data in a legal, open and fair manner in accordance with applicable law (including the European Union General Data Protection Regulation 2016/679 of 27 April 2016).
3. WHEN DO WE PROCESS YOUR PERSONAL DATA?
As a customer at iskyene, we process your personal data when you make a purchase on iskyene’s website, use iskyene’s support, visit iskyene’s website or otherwise contact iskyene. The purposes of Iskyene’s processing of personal data are specified in section 5.
As a Subscriber at Iskyene we process personal data about you. All personal data is specified in section 4.


4. WHAT PERSONAL DATA DO WE COLLECT AND PROCESS?
Purpose Legal basis Types of personal data Type of processing Automated decision-making Storage period
Obligations in connection to order/purchase Performance of contract
Processing of personal data is required for Iskyene’s fulfilment of obligations in connection with order/purchase. The absence of personal data means that Iskyene cannot fulfil its obligations and may be forced to refuse the purchase. Name
Social security number or national ID
Address
Email
Phone number
Payment history
Payment details
Credit data
Information regarding purchase Delivery (including contact in connection to the delivery)
Identification
Handling of payments (including any obtaining of credit data and analysis of payment solutions)
Handling of complaints and warranty matters. No Performance of purchase agreement (including delivery and payment) and 36 months thereafter for the purpose of handling any complaints and warranty matters
Fulfil Iskyene's legal obligations Statutory requirement
Processing of personal data is required by law. The absence of personal data means that Iskyene cannot fulfil its obligations and may be forced to refuse the purchase. Name
Social security number or national ID
Address
Email
Phone number
Payment history
Payment details
Credit data
Information regarding any defects/complaints Handling necessary to fulfil Iskyene's legal obligations by law, judgment or public authority decision (such as the Accounting Act and Product Liability Rules and Product Safety) No In accordance with the statutory requirement
Segmented marketing of Iskyene’s goods via email, phone or SMS / MMS Legitimate interest
The processing is necessary to satisfy Iskyene's legitimate interest in certain marketing. Name
Age
Sex
Address
Email
Phone number
Payment history
Payment details
Purchase history
Purchase and user generated data Sending newsletters with information and offers
Simplify the use of Iskyene`s services (e.g. by saving favourites and thus facilitating future purchases or reminding you of items forgotten in the digital shopping cart)
Personal communication based on your behaviour through Babyshop media No Performance of purchase agreement (including delivery and payment) and 36 months thereafter for the purpose of giving more offers from Iskyene.
Customised offers as well as targeted communication via mail, email, phone or SMS / MMS Consent
Processing takes place after obtaining consent for certain customised marketing. Name
Age
Sex
Address
Email
Phone number
Payment history
Payment details
Purchase history
Purchase and user generated data
Specified customer choices regarding communication channels. Personalised marketing (e.g. relevant product recommendations, presentation of specific benefits and offers, and other similar actions)
Analysis of your personal data is done at the individual level. The analysis is the basis for Iskyene's communication with you and the offers, benefits and information sent to you Yes Until the consent is revoked
Manage customer service issues Legitimate interest
The processing is necessary to meet your and Iskyene's legitimate interest in customer service. Name
Address
Email
Phone number
Payment history
Payment details
Purchase history
Correspondence
Any defects / complaints Communication and response of any questions to our customer service
Identification and investigation of possible complaints and support cases No Until the matter is closed
Implementation and handling of competitions and / or events Consent
Processing takes place after obtaining consent for processing personal data for handling competitions and / or events. Name
Social security number or national ID
Address
Email
Phone
Information regarding competition entries
Information regarding event evaluations Contact before and after competitions or events where you participated (e.g. notifications, questions or evaluations)
Identification
Selection of winners
Provision of possible winnings No Meanwhile the competition / event and stages in connection thereto are in progress
Evaluation, development and improvement of Iskyene’s services, products and systems Legitimate interest
The processing is necessary to satisfy your and Iskyene's legitimate interest in the evaluation, development and improvement of Iskyene’s services, products and systems. Age
Sex
City
Correspondence / feedback about Iskyene’s products
Purchase and user generated data
Technical data (e.g. language setting, IP address, browser settings, operating system, screen resolution and platform)
Information about your integration with Iskyene. Adaptation of services
Development of information for improving commodity and logistics flows (e.g. forecasting of purchases, inventories and deliveries)
Development of information regarding development and improvement of Iskyene's product range
Development of information for the development and improvement of Iskyene’s resource efficiency
Development of information for planning of establishments
Offer the opportunity to influence product range
Development of information for the improvement and development of IT systems
Personal data analyses are made through segmentation of customers and made on an aggregated level using unidentified or pseudonymised data No 36 months from collection
Prevent, avoid and investigate crimes against Iskyene as well as prevent abuse of Iskyene services Statutory requirements and legitimate interest
1) The processing of personal data subject to statutory requirements.
2) The processing is necessary to satisfy your and Iskyene's legitimate interest in preventing, avoiding and investigating crimes as well as preventing abuse of Iskyene services. Social security number or national ID
Video recordings from camera surveillance
Purchase and user generated data
Technical data (e.g. language setting, IP address, browser settings, operating system, screen resolution and platform)
Information about your integration with Iskyene. Prevent and investigate possible fraud / legal offense
Prevent harassment, junk mail, phishing, or other actions prohibited by law or Iskyene’s terms
Protection and improvement of IT environment No 36 months from collection
Administration of customer profile Legitimate interest
The processing is necessary to satisfy your and Iskyene's legitimate interest in managing your customer profile and facilitating you to use your rights to modify, delete, limit your stored personal data and data portability. Name
Social security number or national ID
Address
Email
Phone
Payment history
Payment details
Purchase history
Purchase information
Username and password
Settings regarding your profile and your personal choices Enable login
Ensure identity
Allow you to change, delete and restrict the storage of personal data
Ensure correct and updated personal data
Offer access to purchase and payment history
Managing your customer choices No 36 months from collection
When Iskyene processes personal data based on a balance of interest, we have assessed that our interest in processing personal data outweighs the privacy violation that the processing may imply, partly because the processing is limited and that the data subject can contact Iskyene and at any time have its data deleted. Iskyene never processes sensitive personal data based on a balance of interest and does not perform automated decision making without your consent.
When Iskyene processes personal information with the consent of you, your consent must be voluntary, specific, informed and imply unambiguous consent to be considered as legal basis. If you have given your consent to iskyene, you are entitled to withdraw it at any time.
5. PROFILING
For Subscribers, Iskyene may process personal data through profiling. Such profiling is done with your consent. You can revoke your consent at any time.
Profiling means that we analyse information about how you use our website, what products, services and offers you have shown interest in, information about your purchases, which of our newsletters you have interacted with, if you have signed up for any of our events and information about your account. We do this to provide you with offers we think is suitable for you and to invite you to events we think you are interested in.
You are entitled to object to such profiling at any time. Any objection may be emailed to mydata@babyshop.com. Upon receiving your notification, Iskyene will stop processing your personal data for this purpose.
6. ACCESS TO STORED PERSONAL DATA
Iskyene may disclose personal data to other companies that are part of the same group as iskyene, as well as to partners to fulfil our commitments and the purposes mentioned above. Our partners are: Shopify, Bring and Postnord

Data forwarded to third parties is only used to provide the abovementioned services to you, such as freight forwarders in the field of delivery of goods, media agencies for distribution of marketing and credit reporting or debt collection agencies for credit reporting, identity checks and debt collection.
We never transfer your personal data for marketing purposes conducted by third parties outside the Iskyene and our partners. We will neither sell your personal data to third parties without your permission. Iskyene may disclose your personal data if it is necessary to comply with applicable laws or government requirements, to safeguard Iskyene's legal interests or to detect, prevent or notice fraud and other security or technical issues.
Iskyene always strives to store personal data within the EU/EEA. The data may be transferred and processed in a non-EU/EEA country (third country). Transfers made are made to the United States, for Google Analytics (analysis) and Zendesk (customer service). Any transfer is made in accordance with applicable legislation and persons subject to the transfer will be notified.
7. HOW DO WE PROTECT YOUR PERSONAL DATA?
We have taken technical and organizational measures to protect your data from loss, manipulation and unauthorized access. We are continuously adjusting our security measures in accordance with the progress and developments in the technical field. To make card purchases as secure as possible, all data is sent in an encrypted form. This means that the information is transmitted via a secure connection and that your personal data cannot be read by third parties. For card purchases, we collaborate with an authorized payment agent that helps us to instantly check with the bank that the card is valid for purchase. Our payment agent processes your card details in accordance with the international security standard PCI DSS developed by VISA, MasterCard, Diners, American Express and JCB card companies. This means that the security is very high when processing your card details. When you pay by card, we reserve the right to carry out an identity check.

Iskyene may allow third parties to use your personal data for marketing purposes upon request by us to promote our products and services, but we will never allow a third party to use your personal information to conduct their own marketing towards you.
8. WHAT ARE YOUR RIGHTS?
Iskyene will, at your request or on its own initiative, rectify, delete, disassociate or supplement your personal data if the data is found to be incorrect, incomplete or misleading.
As a data subject, you have the right to request:
1. Access to your personal data. You have the right to have a filing extract or a copy of all personal data Iskyene is processing about you. This right can be used at any time through a written and signed request.
2. Rectification of your personal data. You have the right to request that Iskyene will correct incorrect or incomplete processed personal data without unnecessary delay.
3. Deletion of your personal data. You are entitled to request that your personal data is deleted if the storage of data no longer is necessary for the purpose for which it was collected. If there is a statutory requirement to store your personal data or if there are other legitimate reasons why Iskyene must store your data, such as unpaid debts, your personal data cannot be erased. We will end all processing of personal data for other purposes than complying with the legislation.
4. Restriction of processing. You are entitled to request that your personal data be processed for certain restricted purposes. For example, you may request a restriction when you believe your information is incorrect and you have requested a correction according to the above. While the accuracy of the data is being investigated, its processing will be restricted.
If your personal data is stored at Iskyene, you have the right to data portability. That means the right to, under certain conditions, extract and transfer some of your personal data in a structured, widely used and machine-readable format to another personal data controller.
If Iskyene is processing personal data based on a balance of interest, you have the right to object to such processing. In the case of opposition, Iskyene will continue the processing only if there are more compelling interests to do so.
You may at any time object to your personal data being processed for direct marketing. Iskyene does not process your personal data for direct marketing purposes if you oppose to such processing. Once we have received your objection, we will cease to process your personal data for such marketing purposes. Any objection is sent to mydata@babyshop.com. If you have consented to Iskyene storing and using your personal data for marketing purposes, you may revoke such consent at any time. Such recall may be limited to only part of the processing, such as direct marketing. Any recall is sent to mydata@babyshop.com.
As a data subject, you own the right to file any complaints regarding the processing of your personal data to the Swedish Data Protection Authority.
9. USE OF COOKIES AND OTHER TRACKING TECHNIQUES
Our website uses cookies and other tracking techniques to enhance your online experience. You will find more information about this in cookie policy. Iskyene uses, among other things, Google's advertising services. You can read more about Google's collection, sharing, and use of data here.
10. POSSIBLE CHANGES OF ISKYENE’S INTEGRITY POLICY
Iskyene reserves the right to make changes to this Integrity Policy at any time. If the Integrity Policy materially changes, then Iskyene will, with reasonable notice, communicate this on its website and/or through email to you.
11. CONTACT INFORMATION TO THE DATA CONTROLLER
We are protecting our customers' personal data! Do not hesitate to contact us if you have any questions about how we process your personal data, this privacy policy or if you wish to request a filing extract.
Our contact information:
Iskyene AS
Postboks 55
Holmenkollen
0712 Oslo
Norway

Besøksadresse:
Tordenskioldsgate 3
0160 Oslo
Norway

Phone: +47 40587258
Email: info@iskyene.no
Business register: Brønnøysundregisteret
ORG: 920 972 659