Privacy Policy

Active date: January 14, 2024

This is our Privacy Policy that describes our practices with respect to personal information we collect on our centoba.com, centoba.no, centoba.cloud websites (“Websites”) and their sub-sites, associated domains, products and services (collectively, “Services”).

This Privacy Policy applies when we act as the controller of the personal data of individuals using our services (“you” or “your” – in other words, where we determine the purposes and means of processing the personal information.

This Privacy Policy does not apply to content collected and processed from our services by our customers and users (for example, “customer websites”), nor to products, services, websites or content offered by third parties.

Personal information we collect

Personal data means any information relating to an identified or identifiable physical person. We collect personal information by providing services to you. Depending on how you use our services, you may provide us with information such as:

• Your name, email address, phone number, date of birth and other optional information (“account information”)
• Information about your location, organization and contacts, such as colleagues or people within the organization
• Usernames, aliases, roles and other information related to authentication, security or credentials
• Content of feedback, testimonials, requests, inquiries and any phone calls, chats and emails with or to us
• Your image (still, video and in some cases 3D), voice and other identifiers that are personal to you when you meet us in person or use certain services
• Information about your identity, including government-issued identification or credentials
• Finance-related details such as VAT number, organization number or other tax-related details

Collection of information

We collect any information you provide to us in connection with our services.

You provide us with information when you:

• Searching for, subscribing to or purchasing our services
• Creating or managing your user account
• Configuring settings, access and permissions through our services
• Meet us in person or register to attend our events
• Buying or using content or services we provide from third party providers
• Offer content, products or similar through our services
• Communicating with us by phone, email or similar
• Filling out questionnaires, support requests or information requests
• Publish something on our websites or participate in community and notification features

We automatically collect information when you:

• Visit or use our services
• Download content from us, open emails or clicking on links from us
• Interacting or communicating with us, for example when you request support

Examples of information we collect automatically include:

• Network and connection information, e.g. IP address to connect to the internet, and internet service provider information
• Computer and device information, such as which device, application or browser type, version, operating system or time zone
• Link flow to and from our services (including date and time), content you have read or searched for, response times, errors and actions (such as scrolling, clicking and mouse-over)
• Information such as downloads, streams and playback details, including duration and number of simultaneous actions
• Location or location of device, authentication and security information
• Email addresses and phone numbers used to contact us, similar identity information

We may collect information about you from other sources, including service providers, partners and publicly available sources.

Examples of information we receive from other sources include:

• Marketing, sales and recruitment information, including name, email address, address, phone number and other contact information
• Subscription, purchase, support or other information related to interaction with our services or affiliates
• Search results, links, affiliate listings and information from credit checks and/or agencies

Use of personal information

We use personal information for various purposes in our services such as:

• To be able to offer and deliver services and process transactions related to these, including account creation, registrations, subscriptions, purchases and payments
• To measure usage, analyze, fix errors, provide support for, improve and further develop services
• To recommend services that may be of interest to you, identify your preferences and customize your user experience with our services
• To be able to advertise or otherwise market our services
• To prevent and detect fraud and abuse to protect our security, our customers and/or others
• To comply with legal obligations such as those related to payment and credit ratings

We may also ask for consent to use personal information for specific purposes we communicate to you. When you consent to our use of personal information for a specified purpose, you may withdraw your consent at any time and we will stop any further use of your information for that purpose.

We never sell your personal information, or share it with third parties for marketing purposes, unless you specifically consent to it. The list of third parties that we work with is available upon request.

Please note that without personal information, we may not be able to provide some or all of our services.

Marketing campaigns and opt-out

We will only send emails, messages and other marketing-related communications where we are authorized to do so. In most cases, we rely on your consent to do so, particularly where we use electronic communications for such marketing. If you no longer wish to receive direct marketing from us, you can click the “unsubscribe” or “opt-out” link, contact us or update your marketing preferences in your account or in our Services at any time.

Even if you withdraw any consent you may have given us, or object to receiving marketing from us, we will still need to send you messages or communications relating to your user account, administration of services and similar transactional messages.

Sharing of personal information

We share personal information as described in this privacy policy. This includes other companies and individuals we hire to perform task or functions on our behalf. For example, this includes providing hardware, processing payments, assessing credit and compliance risks, analyzing data, providing marketing and sales assistance, customer management and training or support.

These third-party service providers have access to personal information necessary to perform their tasks, but may not use this information for purposes other than those provided by us or on our behalf. Furthermore, they must also process this information in accordance with this privacy policy and the rules of the law.

As we continue to develop our business, we may sell or buy businesses or services. In such transactions, personal information is typically one of the transferred business assets, but remains subject to the promises made in any existing privacy policy (unless the individual consents otherwise). Moreover, in the unlikely event that we or all of our assets are acquired by others, the information will be part of the transferred assets.

We disclose account and other personal information when we believe it is necessary to comply with the law, enforce our terms, or protect the rights, property, or safety of us, our customers, or others. This includes exchanging information with other companies and organizations in order to prevent and detect fraud or similar abuse.

Other than as provided above, you will always receive notice when personal information about you may be shared with third parties, and you will be able to choose whether or not to share the information.

Storage of personal information

We are located in Norway, and our partners are located around the world. Depending on the extent of your use of our services, your personal information may be stored in or accessed in other countries.

Payment information

We use Stripe, PayPal, Klarna and Vipps to process your payment. These are trusted and well-established payment processors that all have their own privacy policies and terms of use. Any information you share with these payment services will be governed by their policies.

We do not store any detailed payment information, such as signatures, credit card details (or similar) that you provide to any of these payment services while completing a purchase. We only know that the payment is completed or not.

As we do not store this type of information, either physically or virtually, we cannot process, handle or share such information.

Safety measures

Security is our top priority. We build and manage our systems with your security and privacy in mind. We have several security measures and policies in place in connection with the collection, storage and any leaks of personal information.

Among other things, we restrict access to personal information we have collected about you to our immediate employees, contractors and some third-party service providers (as noted above). Our security procedures mean that we may require valid identification from individuals before personal information is shared with them.

We maintain administrative and technical safeguards designed to protect against the loss, misuse or unauthorized access, disclosure, alteration or destruction of personal information we collect. We protect the security of all information during transmission to or from our Services by using encryption algorithms and appropriate software.

Please note, however, that no website or storage method, including those we use, can be guaranteed to be 100% secure.

Retention of personal information

In order to facilitate the continued use of our services, we will retain your personal information for as long as necessary to fulfill all purposes described in this privacy policy, comply with legal requirements, or as otherwise communicated to you. The length of time that we retain specific personal data varies, but as a general rule, we delete personal data within 90 days or when it is no longer useful to us and in accordance with applicable laws.

When you terminate your account or services you purchase from us, terminate collaboration or general use of our services, we take the necessary steps to delete your personal information within a reasonable time. Sometimes we may retain information for a period of time afterwards, in case you wish to restore access to services or collaboration.

We may also retain certain personal data after you have terminated all services, to the extent necessary to comply with our legal and regulatory obligations, for the purposes of fraud detection or prevention, or for tax, accounting and financial reporting obligations.

Cookie Policy

To enable us to recognize your browser or device and to provide, market and improve our services, we use cookies for various purposes. For more information, please read our cookie policy.

Your rights

According to applicable laws, the following rights are attached to your personal information:

You have the right to be informed if and when we collect and process personal information. You also have the right to request copies of this information and, where applicable, to know the purpose, recipients, how long we keep it and how we process it.

It is your right to request that inaccurate or erroneous information we hold about you be corrected, or completed (if there are deficiencies) – except where it is information limited to particularly important purposes that are in the public interest or protected by law or other legal obligation.

You have the right to request that we delete personal data where there is no basis for storing it any longer, or to comply with a legal obligation. You can also withdraw your consent where there is no longer a basis for us to process personal data that was previously necessary for us.

Personal information we have stored about you can be exported to a format that makes it easy for you to see what information it concerns. This right only applies to the information we are able to automatically retrieve from our systems, without major influence from us or our partners.

You have the right to object to the processing of your personal data where there are no overriding legitimate grounds for the processing, where it is processed for direct marketing purposes, where it is processed unlawfully or where it is processed for research or analysis purposes. You also have the right to object where the processing of data is carried out in the public interest, by the authorities or the legitimate interests of others.

You have the right to ask us to restrict the processing of your personal data where you have contested the accuracy of your data, where processing is unlawful, or where you need it for a legal claim. Where processing of your personal data is restricted, it may be stored by us, but most other actions, such as deletion of data, will require your permission.

If you wish to exercise any of your rights, please contact us. In addition, you may have the right to complain about the denial of any of these rights by submitting a form that will be provided to you if we deny such request. We will not discriminate against anyone for exercising their rights.

Third party service

Our services may be provided alone or as an integrated solution by other third parties, or include links to other websites and applications. These companies may collect information about you when you use our websites or services.

Please note that we do not control and are not responsible for the information collection practices of others, how information is used or for any data breaches. Please read and understand the third party’s privacy statement and/or policies before providing any information or using their services.

We are not responsible for content or information provided by third party services.

Minors’ personal information

We do not collect any personal information about children or minors. If we learn that this has happened, we will promptly take the necessary steps to delete this information. Parents or guardians who believe that their child has submitted information or shared information with us that they wish to have deleted should contact us immediately.

Additional conditions for EU citizens

In some rare cases, it may be necessary for us to transfer personal data to countries outside the EU, EEA or other countries that are not considered by the European Commission to offer an adequate level of protection. In such cases, we have introduced additional security measures.

If you decide to terminate our services and close your account, we will retain information we have collected for a maximum of 90 days. During this period, you can also decide to reopen your account. When the period is over, all content that has been associated with the account will be deleted.

When you choose to close your account or terminate services, there may be instances where we need to retain certain information for a limited period of time for lawful and legitimate business purposes. For example, we may retain personal information such as how to contact you and any invoices that we have sent to you for tax purposes.

At our discretion, we may also retain information about any inquiries and communications we have had, as well as relevant logs to resolve any disputes. We may also keep notes or records for internal purposes, for example to detect or prevent fraud and abuse.

Inquiries and complaints

If you are using our services on behalf of or through a company or organization, your personal information may also be subject to that organization’s privacy policy. The responsibility for researching and maintaining these falls solely on you and is not a situation we can control.

We would like you to contact us if you have any complaints in relation to our privacy policy or practices. We will endeavor to respond to all legitimate requests within 6 weeks of receiving them, but in some special cases (if the matter is particularly complex or if you send us multiple requests at the same time), it may take longer than that. In such cases, we will notify you of this and keep you updated.

If you are not satisfied with the outcome of a complaint, or if you are concerned about a potential breach, you also have the option of reporting the issue or filing a complaint with the Data Protection Authority, which is responsible for monitoring and ensuring compliance with data protection regulations and the GDPR.

Changes and revisions

Our services are constantly changing and therefore our policy may also change from time to time. We reserve the right, at our sole discretion, to add and/or remove portions of this policy at any time. To stay up to date with the latest changes, we recommend that you read our legal pages regularly.