Privacy statement for Nørs App
We are committed to safeguarding your privacy. It’s your data, and you’re in charge! You should feel confident that we process your personal data securely. All processing of personal data is carried out in accordance with Norwegian law.
Personal data is information that can be linked to you as a person, for example your name, place of residence, phone number, email address, or IP address, while sensitive personal data may relate to your health status.
CONTROLLER
Nors Care AS is the entity with overall responsibility for the processing of personal data. Nors Care AS is located at Nors Care AS, C. J. Hambros plass 2D, 0164 Oslo, Norge, with organization number 918 158 073.
ABOUT THE SERVICE
Nors Care AS (“NC”) provides its services through the mobile application (the app) Nørs (“Nørs”).
Nørs is designed to present professionally credible and quality-assured information for pregnant individuals and parents of young children.
Using Nørs is voluntary. You can also use Nørs for a period and then choose to stop using it later. See the rules on consent below.
1. ABOUT THE PERSONAL DATA ACT
NC follows the rules established in the Personal Data Act and the General Data Protection Regulation (GDPR). All personal data that the User provides to NC is processed by us in our capacity as controller.
2. ABOUT DIFFERENT USER TYPES
Registered user of Nørs
If you choose to register, an account is created and you become a user of Nørs. Your information will then be stored by NC. As a User you have the following benefits:
Access to all services
A personalized “My Week” tailored to you and your needs
Access to your account from other devices
Below we describe how NC handles your data if you are a registered user. This Privacy Policy explains in more detail how your personal data is processed by NC. If you want more information about principles and regulations for processing personal data, you can, among other places, find this on the Norwegian Data Protection Authority’s (Datatilsynet) website.
User of Nørs+ (subscription service)
The Nørs app is generally free to use for everyone. App users can purchase the Nørs+ subscription service, which provides access to additional services and functionality. You do not have to provide any additional personal data to become a Nørs+ user. This Privacy Policy also applies to users who choose to subscribe to Nørs+. You can find the Terms of Use for Nørs+ here.
3. PURPOSES FOR PROCESSING PERSONAL DATA
The purpose of collecting personal data at NC is to provide you, as a user, with a service offering professionally credible and quality-assured information for pregnant individuals and parents of young children, and to fulfill your user agreement with us. We also process your personal data to ensure security in the app, for example through logs and access control. This is done on the basis of our legitimate interest in protecting your user data and our app product. We also have a legitimate interest in improving our service and showing you relevant content that we believe may be useful to you based on your usage history.
If you are a Nørs+ user, we also process your payment information to comply with our accounting and tax reporting obligations.
Health data is processed only after you have given your consent. You may withdraw your consent at any time.
4. USE OF PERSONAL DATA
NC uses personal data only within the limits set by law and for the purposes we have informed you about in advance and to which you may have consented.
Everyone who has access to personal data is bound by a duty of confidentiality, even after they have left NC. NC collects and stores health data only to the extent that you have consented to it. NC stores personal data on servers in the EU (Germany).
5. DATA WE PROCESS AND WHY WE PROCESS IT
ACCOUNT INFORMATION – REQUIRED INFORMATION
To register an Account, you must provide the following information:
Mobile phone number
Used to provide two-factor authentication for logging into your Account. We take your security seriously; therefore, we have chosen to use this type of authentication.Municipality
Used to provide you with relevant content about your municipality’s health services.Your age
Used to provide you with relevant content and functionality.
If you/your household is pregnant:
Due date
Used to show you the remaining time of the pregnancy and provide relevant health advice for your current week of pregnancy.Role in the pregnancy (whether you are the partner or the pregnant woman)
Used to provide you with relevant content and functionality.Whether this is your first pregnancy or a subsequent one
Used to provide you with relevant content and functionality.Whether you are expecting one child or multiples (twins, triplets, etc.)
Used to provide you with relevant content and functionality.
If you are a parent of a young child:
Your gender
Used to provide you with relevant content and functionality.Child’s date of birth
Used to provide relevant health advice depending on the child’s ageChild’s first name
Used to help you easily navigate to the correct child (if you add more than one).Child’s gender
Used to provide you with relevant content and functionality.
Any personal data about you that is included in purchase or other documentation subject to bookkeeping requirements will be processed on the basis of our obligations under accounting legislation, as mentioned above.
OTHER INFORMATION
We also process data about the customer relationship and customer activities for statistical and analytical purposes and to improve our services, optimize customer satisfaction, and offer you relevant content. Our legal basis for processing personal data for these purposes is our legitimate interest in innovation and customer satisfaction, in accordance with Article 6(1)(f) of the GDPR. If health data is used for this purpose, the legal basis is consent, cf. Article 9(2)(a) of the GDPR.
If you allow it (give consent), NC may collect the following information to improve your user experience:
Location information from the device you use Nørs on, when you use the app.
You may withdraw your consent at any time by emailing post@norscare.com.
As an NC user, you may also choose to add other types of information to increase the usefulness of the service. Examples include the child’s weight, height, and head circumference. It is voluntary for you to enter this information when using the service. Any data you choose to enter will be handled in the same way as the required information you provide to register an Account.
LOG DATA
Logs from the use of our platforms, for example your activities in the app, including logins, mobile number and device ID, app ID, app version, browser (type and version), operating system and phone/device model, as well as information about the network you use. Use of our digital services, including our app, is subject to a separate user agreement.
DATA AND THIRD PARTIES
NC does not share any personal data with third parties.
NC uses analytics tools to gain insight into user needs so we can create better solutions. In our web analytics tool, we collect anonymized and aggregated usage data, not health data or personal data. When using the Nausea in Pregnancy tool in the pregnancy module, we ask for your consent before you use the tool. If you consent, NC will share anonymized data from this tool with the University of Oslo. These data are used by the University of Oslo for research purposes. More information about the purpose is available in the app in connection with this tool.
6. Disclosure of Personal Data
Your personal data will not be disclosed to others. We will not sell, exchange, or otherwise transfer any information about you.
7. Retention Period
Your personal data is stored for as long as you consent to it. Accounting information, for example regarding payments in Nørs+, is retained for 5 fiscal years from the date of payment. Ongoing logs of app usage are deleted after [100 days].
8. Right of Access
You always have the right to access the information we have registered about you in connection with NC. By sending a request to post@norscare.com, you will receive access to the information in a safe and secure manner.
9. How Can I Manage My Consents?
In the first version, you manage your consents by emailing post@norscare.com. We are working on a solution that will allow you to easily manage your consents on My Page.
10. Right to Rectification
You have the right to have personal data about you corrected or completed in accordance with the GDPR. You can request corrections to the personal data we process about you by emailing post@norscare.com.
11. Right to Erasure
You have the right to have personal data about you deleted. If you wish to delete your user profile or opt out of parts of the processing you previously consented to, you can do so by sending an email to post@norscare.com.
The information you have provided to NC will be deleted if you wish to delete your profile, or if you have been inactive for more than 10 years. If, after 10 years of inactivity, you wish to use Nørs again, you must create a new profile. In the event of death, your profile and stored information will be immediately locked when NC is informed of the death and then deleted after three months.
12. Right to Restriction of Processing
If you do not want us to delete your personal data at NC, but have a reason to ask us to stop processing it in ways other than storage, you may—under certain conditions—request this. For example, if you dispute the accuracy of the personal data, believe the processing is unlawful, or the personal data is no longer needed for the original purpose. For such requests related to personal data, you can contact us by emailing post@norscare.com.
13. Right to Data Portability
You have the right to:
Obtain your personal data and store it on a private device for further, personal use
Move, copy, or transfer your personal data to another business
To exercise this right with NC, you can contact us by emailing post@norscare.com.
14. Right to Object
Under the GDPR, you have the right to object to the processing of your personal data under certain conditions. You can read more about the right to object on the Norwegian Data Protection Authority’s website. You can contact us for more information by emailing post@norscare.com.
15. Right to Lodge a Complaint with a Supervisory Authority
If you believe our processing of your personal data is in violation of the GDPR or other privacy regulations, you have the right to lodge a complaint with a supervisory authority. In Norway, this is the Norwegian Data Protection Authority (Datatilsynet), and complaints can be submitted on their website.
16. Changes to the Privacy Terms
NC reserves the right to change this Privacy Policy. We will inform you of any changes, unless the changes benefit users or are of minor significance.
If NC discontinues one or more of its services, you will be notified at least one month in advance in Nørs, where you will receive information about the discontinuation process and what it means for you as a user.
17. How Is the Information Secured?
We take your privacy seriously and therefore require two-factor authentication when registering a user with NC.
The solution complies with the requirements of the Norwegian “Norm for Information Security in the Health and Care Services.” This means that information security at NC is maintained in accordance with the Personal Data Act.
Examples of other measures we have implemented to provide satisfactory security with respect to the confidentiality, integrity, and availability of your personal data include: encryption of the data stored in your profile; automatic monitoring of services to detect viruses, error conditions, misuse, and intrusion attempts; and more.
These and other measures implemented by NC help achieve a level of security appropriate to the risk associated with processing personal data.
CONTACT INFORMATION
If you have questions related to the processing of your personal data by Nors Care, or general questions about privacy and security with us, you can contact us at post@norscare.com.