Techstep processes your personal information in accordance with applicable privacy laws and in accordance with instructions from your employer. More detailed information on how we handle your personal information can be found below.

1 Introduction

The mobile, subscription and other related services are provided by the Techstep group. You can find more information about the Techstep group here. Deliveries take place in accordance with an agreement entered into between Techstep and your employer.

Techstep processes personal information as part of the delivery of the Services. We process your personal data in accordance with current Norwegian privacy legislation and the EU's General Data Protection Regulation (GDPR), and in accordance with instructions from your employer. More detailed information on how we handle your personal information can be found below.

2. Purpose and types of information

Below we have stated the purposes for which personal data is processed. In principle, it is your employer who decides what purposes we are to process the information for:

Creating a user account: When you create a user with us, you must enter your telephone number and the organization number of the company you are employed in. We use this information to be able to administer the Services on behalf of your employer.

Management of your subscription: We perform a number of different tasks related to the management of your subscription provided by Telenor. This could be, for example, replacing a SIM card if you lose or damage it, handle barriers, bindings or operator locks. In connection with such tasks, we may need to identify you using the information we have registered in your user account.

Support and error correction: In connection with the need for service or support in connection with your phone or other mobile device, we have access to technical information about the device.

Return or replacement of unit: In connection with the return or replacement of a unit, we perform deletion of all content on the unit before it is handed over to the depot for recycling (environmental return). We strongly encourage you as a user of the device to delete all information before the device is returned to us. Remember to back up any content you want to keep before deleting content from your device.

Reports to your employer: At the request of your employer, we carry out analyzes of your and other employees' use of the Services. Such analyzes are performed exclusively at an aggregate level. We do not collect specified call data (information about who you call or send SMS / MMS), and your employer only receives an overview from us that shows the use of mobile telephony in the business at an aggregate level. In other words, the report does not contain any information that can identify your contacts or other personal information about you.

Further develop the services: Techstep uses two different analytic tools, Google Analytics and HotJar, in order to better understand our users’ needs and to optimize our services and our customers experience. The data is only used for Techstep internal purposes and we will not share it with other third parties.

These technology services helps us better understand our users’ experience (e.g. how much time our users spend on which pages, which links they choose to click, what users do and don’t like, etc.) and this enables us to build and maintain our services with user feedback. The analytic software uses cookies and other technologies to collect data on our users’ behaviour and their devices. This includes a device's IP address (processed during your session and stored in a de-identified form), device screen size, device type (unique device identifiers), browser information, geographic location (country only), and the preferred language used to display our website. The analytic software stores this information on Techsteps behalf in a pseudonymized user profile. Data collected are stored in databases situated in EEA. The analytics software companies that Techstep have an agreement with, is contractually forbidden to sell any of the data collected on our behalf.

Prevent misuse of the Services: For security reasons, we routinely check the use of the Services. If a specific misuse or attempted misuse is discovered, we will be able to process personal information about you, for example by attempting to misuse your account with us or other breach of the Terms of Use.

Information and notifications related to the service: In accordance with the agreement with your company, we will be able to send out relevant information and notifications related to the use of the service by SMS and / or information in the Techstep portal, for example about the remaining lock-in period, new telephone models, relevant accessories mv.

3. Legal basis

Our right to process personal data about you for the purposes mentioned in Chapter 2 above follows from the agreement we have entered into with your employer. The agreement requires us to process personal data in accordance with the instructions given by your employer.

4. Security

Our services are developed in accordance with the principles of built-in privacy. This means, among other things, that we de-identify or anonymise personal data when identification is not necessary, and that we make sure to process as little personal data as possible.

We maintain routines and measures to ensure that unauthorized persons do not gain access to your personal data, and that the processing of personal data takes place in accordance with the requirements of current legislation. Examples of such measures are risk assessments, good data processor agreements with subcontractors, routines for handling security breaches and regular security audits.

All Techstep employees and employees of other suppliers involved in the processing of personal data have undertaken to sign a non-disclosure agreement.

5. Storage time

We normally delete or anonymise the personal information within 6 months after the agreement with your employer expires, unless we are required or have the authority to store the information for a longer period of time. Extended storage is primarily relevant for compliance with accounting obligations, as well as for investigation / clarification of serious misuse or specific security threats.

6. Your rights

You can contact your employer and request access, correction and possible deletion of certain information we process about you in connection with the Services. Remember that you can at any time check what contact information we have stored about you in the service. Your employer will forward the inquiry to us, and we will take a position on the request as soon as possible.

If you should disagree with any of the provisions of these terms or otherwise have objections to how we handle your personal information, you can submit a complaint to the Data Inspectorate. However, we encourage you to contact your employer or us first. Constructive feedback will always be taken seriously, and we will do our utmost to meet the wishes of you who use the Services.

7. Contact us

You can contact us by email: info@techstep.no if you have any questions. However, we recommend that you go through your employer, as it is your employer who is our contracting party.

8. Changes

Techstep reserves the right to make changes to the Privacy Statement. The current Privacy Statement will be available in the App. Significant changes will be notified by e-mail and / or SMS.