GDPR

The General Data Protection Regulation (GDPR) applies in Norway through the Personal Data Act (personopplysningsloven). It gives you a set of rights when an organization processes your personal data. Below is a summary of those rights as they apply when Loyco AS is the data controller. What we process and why is described in our privacy policy.

1. Right to be informed (Articles 13 and 14)

You have the right to know who processes your personal data, what we process, why, on what legal basis, who we share it with, and for how long we keep it. Our privacy policy explains this.

2. Right of access (Article 15)

You have the right to know whether we process personal data about you, and to receive a copy of it.

3. Right to rectification (Article 16)

You have the right to have incorrect or incomplete personal data about you corrected.

4. Right to erasure (Article 17)

Also known as the right to be forgotten. You can ask us to delete your personal data, for example when it is no longer needed or you withdraw your consent. We may keep data we are required to keep by law, such as accounting records.

5. Right to restriction of processing (Article 18)

You can ask us to stop using your personal data, while still storing it, for example while we check a request for correction or an objection.

6. Right to data portability (Article 20)

You can ask to receive the personal data you have given us in a structured, commonly used and machine-readable format, or to have it sent to another company. This applies to data we process based on your consent or a contract.

7. Right to object (Article 21)

You can object to processing we base on our legitimate interests. You can always object to direct marketing, including the newsletter and ad targeting, and we will then stop.

8. Automated decisions (Article 22)

You have the right not to be subject to decisions based solely on automated processing that have legal or similarly significant effects for you. Loyco does not make such decisions about visitors or leads.

9. Right to withdraw consent (Article 7)

Where we process your data based on your consent, such as the newsletter or analytics and advertising cookies, you can withdraw it at any time. This does not affect processing that took place before.

10. Right to complain (Article 77)

If you think we process your personal data unlawfully, you can complain to the Norwegian Data Protection Authority (Datatilsynet). We would appreciate the chance to sort it out with you first.

How to use your rights

• Email us at personvern@loyco.no and tell us which right you want to use.
• We may ask you to confirm your identity before we act, so we do not give your data to someone else.
• We answer within one month. If a request is complex, we may extend this by up to two more months, and we will tell you why.
• It is free of charge.
• You can contact Datatilsynet at any time.

Members of loyalty programs

If you are a member of a hotel's or retailer's loyalty program that runs on Loyco, that hotel or retailer is the data controller for your member data, and Loyco processes it on their behalf. Send your request to them. If you contact us instead, we will pass your request on and help them answer it.

Inquiries