Privacy Policy and Cookies

At Shellock (“Shellock” or “we” or “our”), we want you to feel secure when visiting our website and are committed to maintaining your trust and privacy with a secured experience.

Shellock's processing of personal data

This privacy policy provides information on how Shellock AS (“Shellock”) processes personal data. Data controller for the processing is Shellock AS, a company established and registered in Norway with organization number 926 503 642, having its principal offices at Smedasundet 66, 5528 Haugesund, Norway and e-mail address contact@shellock.co. Internally responsible for following up personal data protection is customer relationship management responsible at Shellock. Shellock adheres to Norwegian personal data protection legislation. Shellock processes personal data relating to customers and other persons who have contacted Shellock. The different types of personal data processed, as well as the purpose of the processing, legal basis and source are further described below.

Shellock's customers and users

Shellock processes the following personal data necessary for the purpose of providing our customers with the products and services the customer ordered, including entering into an agreement, effectuating a purchase, processing payment and delivering the product and the cloud service to the customer: • Name, e-mail address, phone number, order details, credit card information or other payment information, uploaded pictures and documents, IP-address and Shellock ID. • Data, information and documents the customer uploads, enters into or generated in Shellock’s cloud service. The legal basis for the processing is the Personal Data Act («PDA») § 8 litra a (fulfilling an agreement to which the customer is party). The data is provided to Shellock by the customer or user when purchasing a product or service from Shellock, or subsequently provided or generated by the customer when using Shellock cloud service. A Shellock ID is generated by Shellock upon registration to the cloud service.

Marketing

Shellock processes the given e-mail address for the purpose of sending marketing to the customer as well as finding potential new customers based on similarities between the customer and the potential customer, using social media tools.

The legal basis for the processing is consent from the registered persons (PDaA § 8(1)), which is voluntary to submit. The data is provided to Shellock by the customer.

Profiling for marketing purposes

Shellock wishes to provide our customers with relevant marketing and communication. In order to be able to do this, we use information about our customers to target and adjust the communication. This includes profiling the customer, which means that we make assumptions regarding our customers’ needs or preferences based on analyses of data. Shellock processes the following personal data for the purpose of profiling and analysing our customers for marketing purposes, including targeting marketing and communication to the customer: • Name, e-mail address, phone number, order details, Shellock ID. • Data, information and documents the customer uploads, enters into or generates in Shellock’s cloud platform. • Usage history and pattern of Shellock’s products and services (including how, when and how frequent the user uses our cloud service and product), data usage and metadata (such as file formats and size). The legal basis for the processing is consent from the registered persons (PDA § 8(1)), which is voluntary to submit. The data is provided to Shellock by the customer or user when purchasing a product or service from Shellock, or subsequently provided or generated by the customer when using Shellock’s cloud service. Profiles are generated by Shellock.

Subscribers to Shellock's newsletters

Shellock processes the given e-mail address for the purpose of providing subscribers with the newsletters the subscriptions comprise the legal basis for the processing is the PDA § 8 litra a (fulfilling an agreement to which the customer is party). The data is provided to Shellock by the subscriber.

Customers and others contacting Shellock's support service

Shellock has a support e-mail, support@shellock.co, which is open for everyone to use if they have questions about Shellock’s products and services. Shellock processes the given e-mail address and any other information the person provides to Shellock in the enquiry, for the purpose of answering any question or enquiry received by Shellock’s support service. The legal basis for the processing is the PDA § 8 litra a (fulfilling an agreement to which the customer is party). The data is provided to Shellock by the customer, potential customer and/or sender. Customer data relating to Shellock’s cloud service is anonymized, and thereafter used in anonymized and aggregated form for statistical purposes, as well as for improvement and development of Shellock’s products and services. Anonymized data may also be used for other purposes and by third parties. It is voluntary for customers to provide personal data about themselves and others that use the Shellock service. The data required for registration and use of the service is requested according to an agreement with the customer, and is necessary to be provided in order to be able to use Shellock’s services and to purchase a product from Shellock. If a customer does not wish to provide such information, the customer will be unable to purchase Shellock’s products and services. Processing based on consent is voluntary, and a consent can always be withdrawn by contacting Shellock via contact@shellock.co.

Disclosure to third parties

Shellock does not disclose the personal data to third parties, except any third party operating the servers of Shellock. However, Shellock will disclose personal data as requested by official or governmental authorities according to mandatory law. This Privacy Policy does not cover links within this site linking to other websites. If you follow a link to another page, please note that these websites have their own privacy policies and we do not accept responsibility or liability for information supplied to these websites.

How long is the data stored?

Shellock deletes or anonymizes data as soon as the purpose of the processing is fulfilled:

Shellock customers and users

• Data uploaded or generated by the customer when using Shellock’s cloud service is deleted 6 months after the customer has deleted their account. The customer may delete data at any time through requesting so at support@shellock.co.

• Name, contact information and order details are deleted when they are no longer necessary to process considered the purpose of the processing, and when they are no longer necessary to process in order to fulfil legal obligations or for Shellock to be able to handle claims and complaints.

Subscribers to Shellock’s newsletter

• The data is deleted when the subscriber unsubscribes Shellock’s newsletter or when the newsletter is discontinued.

Instead of deletion, Shellock may permanently and irreversibly anonymize the data.

The individual’s rights and Shellock’s general obligation regarding information to the public is fulfilled by this privacy policy. Registered persons also have individual rights relating to:

• Information about the processing of personal data and access to the data

• Rectification and deletion of inaccurate or incorrect data

Customers having a purchased service may at any time rectify and/or delete personal data by logging into their user account. Persons who are registered or believe they are registered by Shellock can contact Shellock by mail to the address stated above or e-mail at support@shellock.co for any use of their rights.

As of the 25th of May 2018, individuals will also have the rights as required by mandatory Norwegian law according to the EU General Data Protection Regulation.

Complaints

If you are dissatisfied with Shellock’s processing of personal data or have questions or enquiries concerning Shellock’s processing of personal data, please contact Shellock and we are happy to assist. Registered individuals may also file a complaint by contacting the data protection authority in Norway or if the customer is resident elsewhere in Europe their local data protection authority.

Cookies policy

When you visit www.shellock.co we use a third party service, Google Analytics, to keep track of the pages you and other visitors have viewed so that we can improve the quality of our website and its content. By continuing to browse the site, you are agreeing to Shellock’s use of cookies. Cookies are small pieces of information stored on your computer, tablet or smart phone when you visit certain websites. Cookies are designed to hold a modest amount of data specific to a particular client and website, which allows the server to deliver a page tailored to a particular user.

We use cookies (Performance and Functional) to collect anonymous information about how visitors use the Shellock website. By using our website, you agree to have cookies placed on your personal computer or device. These cookies do not collect information that identifies a visitor and are only used to improve how the website works. Shellock uses cookies to speed navigation, improve functionality and keep track of how visitors use the site, for example, which pages visitors go to most often or how many users are connected to the Shellock site at any one time. We cannot track your browsing activity on other websites. We use cookies to enhance your experience, but you can disable or delete cookies in your internet browser settings.