Personvernerklæring

BI Student Organization (BISO) is concerned with handling your personal data in a secure and safe manner. This privacy policy applies to students, applicants, employees, contractors, as well as stakeholders and visitors to BISO's website, services and applications.

This statement applies to the following services:

• https://biso.no
• BISO applications on Google Play and App Store

BISO is responsible for handling your personal data. If you have questions about the treatment or want to get in touch with us to exercise your rights, you will find our contact information below:

BISO – BI Student Organization Address: Nydalsveien 37 Postcode/location: 0484, Oslo Organization number: 987713380 E-mail address: contact@biso.no

Personal data is defined as information that alone or together with other information can be used to identify, locate or contact a person. Information which alone cannot be linked to an individual may in cases where the information occurs together with other data still constitute personal information.

Examples of personal data include:

• Name
• Telephone number
• E-mail address
• Student ID (S-number)
• IP address

Processing of personal data involves all forms of handling personal data, such as data collection, analysis, registration, and storage. Who determines the purpose of processing personal data and which information is requested is the data controller.

BI Student Organization – BISO – is responsible for processing personal data that is collected and processed by BISO, cf. the EU's Personal Data Protection Regulation (GDPR) article 4 no. 7. The general manager is the overall controller for the processing of personal data at BISO.

BISO, as the controller, determines the purpose of the processing of personal data. All processing of personal data must have a specific, expressly stated purpose which is factually justified in BISO's operations. This follows from GDPR article 5 no. 1b.

Personal data that is obtained and collected is consequently limited to what is absolutely necessary to fulfill the purpose of the processing. The personal data collected for one specific purpose cannot later be used for another purpose without a new assessment.

BISO wants to be a welcoming, inclusive and diverse arena for the students at BI. We work to offer our members an opportunity to maximize their student life through our main pillars:

• Safety and Benefits - Ensuring a secure environment with exclusive perks
• Career Advantage - Building professional networks and enhancing CVs
• Social Network - Connecting students and building lasting friendships

For students who choose to get involved in BISO, we offer a good working environment with varied, sometimes demanding, but always fun and educational tasks.

Cookies are small text files that are placed on your computer when you download a website.

Storage of information and processing of this information is not permitted unless the user has both been informed about and has given consent to the collection. The information on how BISO collects the user's data must be easily accessible.

We only use cookies to give you a better user experience on our services, so you don't have to fill in fields again every time you are on our pages and forms.

When you apply for a position, order a service or product, become a member, or visit our website, you may be asked to provide information. Depending on the situation, we may request:

• Name
• E-mail address
• Telephone number
• S-number (Student ID)
• Resume
• Position or area of responsibility
• Other information such as in-depth questions or answers to forms/surveys
• Technical information: web address, IP address, user behaviour, browser type, language and operating system

When you visit our website, information about you is recorded. We use Google Analytics to understand user behavior.

When purchasing a product through the online store, we register:

• First name and last name
• Telephone number
• Email
• Address
• Postal code and post office

When filling in the recruitment portal form, we register:

• First name and last name
• Email
• Telephone number
• Application
• Resume

BISO will NEVER collect any information about our users without their knowledge or approval. By registering a user account in our application, you consent to BISO collecting personal data.

Reimbursements module:

• Full name, Phone number, Email, Address, Postcode and city, Bank account number

Elections module:

• Full name, Email address

Membership module:

• Full name, Email address, Student ID (s-number)

In order to process personal data, in addition to the purpose, there must be a legal basis. The general requirement follows from GDPR Article 6. For sensitive personal data, an additional legal basis regulated in GDPR Article 9 is required.

When you accept our Terms & Conditions, an agreement has been entered between you and BISO, providing consent. You can withdraw your consent at any time. If you withdraw your consent, we will remove the information we have about you. However, this will mean that any memberships will be cancelled.

BISO.no has strict routines and measures to secure your personal data. Information will only be disclosed/transferred to others in a secure manner.

BISO.no uses HTTPS communication (HTTP over TLS / HTTP over SSL / HTTP Secure) for encrypted and secure transmission of data between you and us.

If the data subject submits the request electronically, and unless the data subject requests otherwise, the information must be provided in a normal electronic form.

The information you provide is used for the following purposes:

• Sales and marketing activities in the form of direct e-mail contact
• Customer care and information about our products
• Obtaining statistics and information on user behavior to improve our services
• Delivering a more personal experience and content that interests you
• Responding to inquiries and requests
• Creating and maintaining dialogue
• Sending information that may be of interest to you

Information provided will be available to a limited number of people in the organisation who hold positions within IT, Marketing, Consulting or customer support. The general manager, student assistants and permanent staff will also be granted access.

We do not sell your personal data to third parties.

If there is an ongoing sale or customer dialogue between you, us and any of our partners, we may share: Name, Email, and Type of membership.

BISO stores information about the user according to the regulations stated in this policy.

Data storage locations:

• biso.no: Our database where we store user information from our websites
• Google Analytics: Statistical data about the websites, application, and its users
• Google Firebase: Our database for mobile applications, such as the BISO application

You have the right to receive information about what information we have about you. You can also demand that we correct incorrect information or delete your information.

Right to information - All information about BISO's processing must be included in this privacy policy Right to access - You can know which personal data BISO processes about you Right to correction - You can have incorrect, out-of-date or incomplete information corrected Right to deletion - You can demand that we delete personal data about you Right to object - You can object to processing under certain conditions Right to limitation - You may demand that processing is restricted in some cases Right to complain - You can complain about the processing if you believe it's incorrect

BISO.no If you wish to have your personal data deleted, please contact contact@biso.no. When making an inquiry, please justify why you want the personal data deleted and state which personal data you wish to have deleted.

BISO App If you wish to have your personal data removed from our application, please select the "Delete my user" option in your profile page. Deleting your user account will permanently delete all personal data. NB! Your user account is non-recoverable. Please back up your personal documents before deleting your account.

We only process the personal data for as long as it takes to fulfill the purpose of their collection, after which we delete the information.

If you have an active membership or position with us, we will keep your information for 6 months from the last contact, then we remove the information.

An active dialogue is defined as interaction with BISO via e-mail, downloading material, buying products, registering via the portal, having an active membership, or holding an active position in the last 6 months.

We use e-mail, ID/s number and telephone as part of daily work. Relevant information from telephone conversations and e-mail exchanges is registered in the customer system.

Employees are responsible for deleting messages that are no longer relevant, and at least every year reviewing and deleting unnecessary content.

Important: Sensitive personal data must not be sent by e-mail. Regular e-mail is unencrypted. We do not encourage you to send confidential, sensitive or other confidential information via e-mail.

BISO may revise this privacy policy as a result of our processing of personal data changing or as a result of new personal data legislation.

When the privacy policy changes, an updated version will be published on our website.