Privacy statement
Draft – this text must be reviewed before it is used.
This statement explains which personal data we process when you visit felly.no and use Felly, why we do it, and what your rights are. The Norwegian version applies if the two versions differ.
Who is responsible?
IT Norge Consult AS (org. no. 994 066 919) is the controller for personal data we collect on felly.no, for example when you use the contact form.
When a kindergarten, school or association uses Felly, that organisation is the controller for the data entered into the service. IT Norge Consult AS is then the processor and processes the data on the organisation’s behalf, under the data processing agreement.
Questions about privacy can be sent to kontakt@felly.no.
What we collect on the website
- The “Call me” form: name, phone number and the name of your kindergarten or organisation – whatever you fill in.
- Technical logs: the server records IP address, time, the page requested and the browser used. This is only used for operations and security.
- Visitor statistics: we use Webtrack to understand how the website is used – for example the number of visits, which pages are read, approximate location (country and city), type of device, browser and operating system, and how the visit unfolds (clicks and scrolling). The statistics are only used to improve the website.
The website does not use cookies, and we do not use advertising tracking. Fonts are served from our own server.
Why, and on what basis?
- We use the details from the contact form to call you and answer your enquiry. The legal basis is our legitimate interest in answering enquiries, and that you have asked to be contacted before a possible agreement (GDPR Article 6(1)(b) and (f)).
- Technical logs are processed to keep the website secure and stable, based on our legitimate interest (Article 6(1)(f)).
- Visitor statistics are processed to improve the website, based on our legitimate interest (Article 6(1)(f)).
How long we keep data
Enquiries from the contact form are deleted when the matter is closed, and no later than 12 months if no customer relationship follows. Technical logs are deleted automatically after a short time, normally within 30 days. Visitor statistics are stored in Norway and deleted when no longer needed.
Who we share data with
We never sell personal data. We use these suppliers, who process data on our behalf:
- Brevo (Sendinblue SAS, France) – sends email, including contact form enquiries and login codes.
- Webtrack (IT Norge Consult AS) – visitor statistics, stored in Norway.
- Server provider – runs servers in Norway.
Data is stored and processed within the EU/EEA.
The Felly service
Felly stores data entered by the organisation, such as the name, email, phone number and role of board members, staff and parents, as well as meeting papers, minutes, signing logs, volunteer sign-ups and financial documents.
The organisation decides what is stored and who has access. If you want to know what is stored about you, or have something corrected or deleted, contact your organisation. We are happy to help them.
Your rights
You have the right to access, correct or delete data about you, and to ask for processing to be restricted. You can also object to processing based on legitimate interest, and ask to receive your data (data portability).
Send an email to kontakt@felly.no. We reply as soon as we can, and within 30 days.
If you believe we process personal data unlawfully, you can complain to the Norwegian Data Protection Authority (datatilsynet.no).
Security
All traffic to felly.no and Felly is encrypted (HTTPS). Access to data is controlled by role, login uses one-time codes, and changes are logged.
Changes
We update this statement when needed. The date at the top shows when it was last changed.