PRIVACY POLICY - ONLINE SHOP
This policy was last updated: 3rd of March 2025
1. Introduction
1.1 This Privacy Policy (the “Policy”) describes how Blåkläder AS, org. no. 812806602 (“Blåkläder”, “we”, “us” or “our”), at the address Solgaard skog 110, 1599 Moss in Norway, processes your personal data when you visit our website and come into contact with us because of our business and services.
1.2 We are responsible for the processing of your personal data as described in the Policy in the capacity of data controller. If you would like to know more about our processing of your personal data, you are welcome to contact us, e.g. via the address above or via our email address: gdpr@blaklader.com.
1.3 We respect and safeguard your personal integrity. It is important to us that you feel comfortable with how we process your personal data, and we therefore ask you to read through this Policy, which we may update from time to time. If we make changes to the Policy, the new version will apply from the time it is published on our website www.blaklader.no. At the top of the page, you can see when the Policy was last changed.
2. The scope of this Policy
2.1 In this Policy, we provide information about our processing of personal data in connection with your use of the web form (the “Web form”), and the provision of your company-unique Web shop – Blåkläder Online Shop (the “Online shop”) through our platform services, available at the Blåkläder website https://www.blaklader.no/en/brand/for-companies/b2b-webshop.
2.2 Blåkläder is responsible for the processing of personal data referred to in Clause 4 below. In connection with the use of the Online Shop, there may also be additional data controllers who are responsible for other personal data processing, e.g., the company acting as a reseller of Blåkläder’s products and/or services. The reseller is responsible for the processing of personal data relating to its employees or their own customers. In this case, Blåkläder acts as a data processor and enters into an agreement with the reseller that regulates how Blåkläder shall process such personal data on behalf of the reseller. Processing of personal data where the reseller is the data controller is therefore not covered by this Policy.
2.3 This Policy includes information on, e.g., for what purposes we process your personal data, with which parties we share your personal data as well as information on your rights as a data subject.
3. How we collect your personal data
We process personal data that you or your employer provide to us through the Web Form and/or when you interact with the Online Shop. We also process personal data which are collected via use of cookies and other similar technologies. If you want to read more about how we manage cookies on our website, please read our Cookie Policy.
4. How we process your personal data
4.1 We process your personal data in the way and for the purposes described in the tables below in this Clause 4, and we are accountable in the role as data controller for the processing activities described in each table.
We only process your personal data to the extent permitted in accordance with applicable data protection legislation. This means inter alia that we need to have a legal basis for the purposes for our processing your personal data, which in our context generally means the following legal bases:
- Performance of a contract – the processing is necessary in order for us to provide you with our services or otherwise perform a contract between us (this applies if you conduct your business in a sole proprietorship), or to take steps at your request prior to entering into a contract.
If you are acting on behalf of someone else, e.g. in the capacity of representative of a company (which usually is the case), our processing is carried out with reference to our legitimate interest balanced against your interests or fundamental rights or freedoms, where our legitimate interest is to conclude and perform the contract with the company you represent. - Legitimate interests – the processing is necessary for the purposes of the legitimate interests pursued by us or by a third party, provided that they are not overridden by your interests or fundamental rights or freedoms (in which case the processing would not be allowed).
- Consent – the processing is carried out with your prior consent, where we inter alia are responsible for clearly informing you of what processing you consent to and your right to withdraw your consent in relation to our continued processing.
Below, we explain more about the categories of personal data we process, for what purposes we process them and what legal bases we rely on when processing your personal data, including for how long we store your personal data and with whom we share your personal data.
4.2 When you register for your own company-unique Online Shop
| What we do and why: | The personal data that we process: |
| We will process your personal data in order to register and administer your enquiry to set-up a company-unique Online Shop for your organisation. For this purpose, we will collect and use your personal data when you register through the Web Form in order to streamline the process. We will use your personal data to contact you for further details regarding the registration and set-up of your Online Shop and will collect and use the personal data you provide us with. | Personal data collected through the Web Form: - First- and last name. - Company name/the company you represent upon your enquiry. - Organisation number, if you conduct your business in a sole proprietorship. - Employment information (employment number and position/work role), including corresponding information relating to consultants and other contractors. - E-mail address. - Telephone number. - Industry. - Location. |
| Our legal basis for processing: | |
| Legitimate interest, where our legitimate interest is to properly register and administer your enquiry to set up a company-unique Online Shop. We use legitimate interest as our legal basis for processing if it is your employer who intends to enter into an agreement with us. Performance of contract, where the processing is necessary to take steps to register and administer your registration for a company-unique Online Shop in accordance with your request. This type of processing is necessary to take measures before entering into an agreement with you, if you conduct your business in a sole proprietorship. | |
| How we share and transfer your data: | |
| We will share your personal data with the following parties: Suppliers of IT-services and IT consultants. We use third party suppliers and consultants in order to manage parts of our business. We may share personal data with these suppliers and consultants in connection to them providing services to us. Whenever using suppliers and consultants, we establish data processor agreements as well as take other adequate measures in order to make sure that your personal data is processed in a way that conforms with this Policy. Companies within our corporate group. We may share your personal data with companies within our corporate group. If we share your personal data with companies within our corporate group, we will make sure that your personal data are being processed in a way that conforms to this Policy. We will not transfer your personal data to a country outside the European Union (“EU”)/European Economic Area (“EEA”) within the scope of this processing activity. | |
| How long we keep your data: | |
| We will keep your personal data for as long as we have a business relationship with you or the company or organisation you represent, but no longer than two (2) years after the last time we were in contact in our business relationship, unless we are obliged to do so by Norwegian law. | |
4.3 To provide and maintain our services
| What we do and why: | The personal data that we process: |
| We will process your personal data in order to provide and maintain your company-unique Online Shop that are personalised to your specifications. For this purpose, we will collect and use your personal data to provide you with our services. We will also use your personal data in order to maintain the security of the Online Shop. We will collect and use your personal data and information about how you as a user interact with our services, in order to maintain the user experience and provide your company-unique Online Shop. | - First- and last name. - Company name/the company you represent upon your enquiry. - Organisation number, if you conduct your business in a sole proprietorship. - Employment information (employment number and position/work role), including corresponding information relating to consultants and other contractors. - E-mail address. - Telephone number. - IP-address. - Personal user account information (user name and password). - Clothing size. - Other technical information which is identified upon using the company-unique Online Shop, such as what type of device and web browser is used, history of visited sites including the time entry (information from used web browser, time zone of the place from which you visited the Online Shop and other information on web traffic). |
| Our legal basis for processing: | |
| Legitimate interest, where our legitimate interest is to collect information in order to maintain the functionality and security of our Online Shop. We use legitimate interest as our legal basis for processing if it is your employer who entered into an agreement with us. Performance of contract, where the processing is necessary for us to take steps necessary to provide our services in accordance with our contract and perform our contract with you, if you conduct your business in a sole proprietorship. | |
| How we share and transfer your data: | |
| We will share your personal data with the following parties: Suppliers of IT-services and IT consultants. We use third party suppliers and consultants in order to manage parts of our business. We may share personal data with these suppliers and consultants in connection to them providing services to us. Whenever using suppliers and consultants, we establish data processor agreements as well as take other adequate measures in order to make sure that your personal data is processed in a way that conforms with this Policy. Companies within our corporate group. We may share your personal data with companies within our corporate group. If we share your personal data with companies within our corporate group, we will make sure that your personal data are being processed in a way that conforms to this Policy. Retailers and suppliers of Blåkläder. We may share your personal data with Blåkläder’s retailers and suppliers in connection to them providing us with services regarding maintenance of our Online Shop. For the purpose of this processing activity and if the country or countries to which you or your employer have ordered our products is a country outside the EU/EEA, our delivery solution suppliers will transfer your outside the EU/EEA to such country in order to deliver the products. | |
| How long we keep your data: | |
| We will keep your personal data for as long as we have a business relationship with you or the company or organisation you represent, but no longer than two (2) years after the last time we were in contact in our business relationship. | |
4.4: Marketing and communications
| What we do and why: | The personal data that we process: |
| We will process your personal data in order to provide relevant marketing communications to you that are personalised to your specifications provided in the Web Form and/or based on your previous visits/purchases when you interact with the Online Shop. For this purpose, we will collect and use your personal data to contact you and advertise and market products or features to you. | - E-mail address. - Telephone number. |
| Our legal basis for processing: | |
| Legitimate interest, where our legitimate interest is to create a business relationship with the company you represent and/or is employed at and to personalise marketing content and recommendations in order to effectively market our products and services to you and the company you represent. | |
| How we share and transfer your data: | |
| We will share your personal data with the following parties: Suppliers of IT-services and IT consultants. We use third party suppliers and consultants in order to manage parts of our business. We may share personal data with these suppliers and consultants in connection to them providing services to us. Whenever using suppliers and consultants, we establish data processor agreements as well as take other adequate measures in order to make sure that your personal data is processed in a way that conforms with this Policy. Companies within our corporate group. We may share your personal data with companies within our corporate group. If we share your personal data with companies within our corporate group, we will make sure that your personal data are being processed in a way that conforms to this Policy. Retailers and suppliers of Blåkläder. We may share your personal data with Blåkläder’s retailers and suppliers in connection to them providing us with services regarding marketing content and recommendations to you and the company you represent. We will not transfer your personal data to a country outside the EU/EEA within the scope of this processing activity. | |
| How long we keep your data: | |
| We will keep your personal data for as long as we have a business relationship with you or the company or organisation you represent, but no longer than two (2) years after the last time we were in contact in our business relationship, unless we are obliged by Norwegian law to do so. | |
4.5 Improvement and development of the Online Shop
| What we do and why: | The personal data that we process: |
| We will process your personal data in order to improve and develop the company-unique Online Shop. We collect statistical data as well as other technical information generated when using the Online Shop and to improve the Online Shop’s functionality, the user experience, and in order to discover and handle errors, breaches and incidents. We use third party analytic services to produce statistics and carry out analysis. For this purpose, we will collect and use your personal data and information on how you as a user engage with our service, to improve and develop the functionality and user experience of the company-unique Online Shop. | - IP-address. - Other technical information which is identified upon using the company-unique Online Shop, such as what type of device and web browser is used, history of visited sites including the time entry (information from used web browser, time zone of the place from which you visited the Online Shop and other information on web traffic). |
| Our legal basis for processing: | |
| Legitimate interest, where our legitimate interest is to gather information in order to properly improve and develop the company-unique Online Shop. Consent, we collect and process your personal data through use of cookies or other similar technologies on the basis of your consent, except such use which is strictly necessary to the foundational functions of the Online Shop. You may withdraw your consent anytime. For more information on how we use cookies and other similar technologies, please see our Cookie Policy Cookie Policy - Blåkläder (blaklader.no). | |
| How we share and transfer your data: | |
| We will share your personal data with the following parties: Suppliers of IT-services and IT consultants. We use third party suppliers and consultants in order to manage parts of our business. We may share personal data with these suppliers and consultants in connection to them providing services to us. Whenever using suppliers and consultants, we establish data processor agreements as well as take other adequate measures in order to make sure that your personal data is processed in a way that conforms with this Policy. Companies within our corporate group. We may share your personal data with companies within our corporate group. If we share your personal data with companies within our corporate group, we will make sure that your personal data are being processed in a way that conforms to this Policy. Retailers and suppliers of Blåkläder. We may share your personal data with Blåkläder’s retailers and suppliers in connection to them providing us with services regarding the improvement and development of the company-unique Online Shop. Providers of analytic tools. We will use providers of analytic tools to perform analytics activities concerning the use of the Online Shop. For the purpose of this processing activity, when using providers of analytic tools to perform analytics activities your personal data may be transferred to a country outside the EU/EEA. | |
| How long we keep your data: | |
| We will keep your personal data for as long as we have a business relationship with you or the company or organisation you represent, but no longer than two (2) years after the last time we were in contact in our business relationship, unless we are obliged by Norwegian law to do so. | |
5. Security measures
We have taken measures to ensure that your personal data is handled in a safe way. For example, access to systems where personal data is stored is limited to our employees and service providers who require it in the course of their duties. Such parties are informed of the importance of maintaining security and confidentiality in relation to the personal data we process. We maintain appropriate safeguards and security standards to protect your personal data against unauthorized access, disclosure or misuse. We also monitor our systems to discover vulnerabilities.
6. Where we process your personal data
We strive to always process your personal data within the EU or EEA. However, we may transfer your personal data, in accordance with what is stipulated in the tables above, to service providers who, either themselves or by their sub-contractors, are located or have business activities in a country outside the EU or EEA. In such cases, we are responsible for ensuring that the transfer is made in accordance with applicable data protection legislation before it occurs, e.g. by ensuring that the country in which the recipient is located ensures an adequate level of data protection according to decision by the European Commission, or by ensuring appropriate safeguards based on the use of standard contractual clauses that the European Commission has adopted and other appropriate measures to safeguard your rights and freedoms.
You may access a list of the countries that the European Commission has decided provide an adequate level of data protection at http://ec.europa.eu/justice/data-protection/international-transfers/adequacy/index_en.htm.
You may access the European Commission’s standard contractual clauses at https://eur-lex.europa.eu/legal-content/en/TXT/?uri=CELEX%3A32021D0914.
7. Your rights
You have rights in relation to us and our processing of your personal data. Below, you will find information about your rights and how you can exercise them.
Please note that your rights apply to the extent that follows from applicable data protection legislation and that there may be exceptions to the rights where applicable. We also ask you to note that we may need more information from you in order to e.g. confirm your identity before proceeding with your request to exercise your rights.
To exercise your rights or request information about them we ask that you contact us, which is most easily done via email: gdpr@blaklader.com.
7.1 Right of access
You have the right to obtain a confirmation as to whether or not we process your personal data. If that is the case, you also have the right to receive copies of the personal data concerning you that we process as well as additional information about the processing, such as for what purposes the processing occurs, relevant categories of personal data and the recipients of such personal data.
7.2 Right to rectification
You have the right to, without undue delay, have incorrect personal data about you rectified. You may also have the right to have incomplete personal data completed.
7.3 Right to erasure
You have the right to obtain that we erase your personal data without undue delay in the following circumstances:
- The personal data is no longer necessary in relation to the purposes for which they were collected or otherwise processed;
- Our processing is based on your consent and you withdraw your consent to the relevant processing;
- You object to processing that we carry out based on a legitimate interest, and your objection overrides our or another party’s legitimate interest of the processing;
- The processed personal data is unlawfully processed;
- The processed personal data has to be erased for our compliance with one or more legal obligations.
7.4 Right to restriction
You have the right to request that we restrict the processing of your personal data in the following circumstances:
- You contest the accuracy of the personal data during a period enabling us to verify the accuracy of such data;
- The processing is unlawful and you oppose erasure of the personal data and request restriction instead;
- The personal data is no longer needed for the purposes of the processing, but is necessary for you for the establishment, exercise or defense of legal claims;
- You have objected to the processing of the personal data which we carry out based on a legitimate interest, pending the verification whether your objection overrides our or another party’s legitimate interest to continue with the processing.
7.5 Right to object
You have a right to object to our processing of your personal data when it is based on our or another party’s legitimate interest. If you object, we must demonstrate compelling legitimate grounds for the processing which override your interests, rights and freedoms in order to be allowed to continue with our processing.
7.6 Right to data portability
If our processing of your personal data is based on the performance of a contract with you or your consent, you have the right to receive the personal data you have provided us relating to you in an electronic format. You also have the right to have the personal data transferred from us directly to another data controller, where technically feasible.
We ask you to observe that this right to so called data portability does not cover personal data which we process manually.
7.7 Right to withdraw consent
If our processing of your personal data is based on your consent, you always have the right to withdraw your consent at any time. A withdrawal of your consent does not affect the lawfulness of the processing that took place based on the consent before your withdrawal.
8. Complaints with the supervisory authority
In Norway, the Norwegian Authority for Privacy Protection (“Datatilsynet”) is the authority responsible for supervising the application of current data protection legislation. If you believe that we process your personal data in a wrongful manner, we encourage you to contact us so that we can review your concerns. However, you may file a complaint with Datatilsynet at any time.