Db Equipment – Privacy Policy
{Last updated: Aug 26, 2024}
We, Db Equipment AS, business registration no 997 484 85, Mølleparken 2, 0459 Oslo, Norway (“Db Equipment,” “we,” or “us”) strive for transparency of the way we process personal data when you interact with us. The purpose of this privacy policy is to show how Db Journey processes information about you and to tell you how we safeguard your privacy.
This Privacy Policy applies when you visit our website www.dbjourney.com (the “Site”), make a purchase with us, join our loyalty program “Db Black”, contact our customer service team, engage with us on social media, apply for a position or to become a Db Ambassador, or otherwise interact with us.
CONTENTS
1 Roles
2 What information we collect and how we use it
3 Disclosure of personal information
4 Transfer of Information to the United States and Other Countries
5 Data retention
6 Data subject requests
7 Questions or complaints
8 Changes
9 Contact us
1 ROLES
DB Journey is the data controller of the personal data we process about our customers, the visitors to our Site and physical locations, as well as job applicants. This means that we are responsible to ensure that your personal data is processed in a lawful manner and protected in accordance with the Norwegian Data Protection Act and the EU General Data Protection Regulation (“GDPR”). The responsibility includes ensuring that the processing is necessary to fulfil explicitly stated and relevant purposes.
2 WHAT INFORMATION WE COLLECT AND HOW WE USE IT
2.1 Visits to our site
We (and our service providers) use tracking technologies, such as cookies and web beacons, to collect the following information about you:
- IP address (which is an identification on your machine),
- Hardware model, brand and name
- Unique device identifiers,
- Browser type and version,
- Mobile network,
- Operating system and version
- Screen resolution
- Approximate location (city)
- Activity on the Site, such as access times, pages viewed, links clicked, site search, video engagement and file downloads
- Which website you visited before navigating to our Site.
This information is stored for a maximum of two years, but most of the information is stored shorter than this.
You can revoke your consent for functional, analytics and marketing cookies either per category or per service at any time via the “Fingerprint button” which you can find on this page. If you prohibit the use of Cookies, functional impairments are possible.
Please note that removing or rejecting cookies could affect the availability and functionality of our Site.
You can also read more about our use of cookies and how to disable cookies in your browser in our Cookie Policy.
2.2 Purchase, returns and follow-up of our deliveries
When you make a purchase on our Site, we need some personal information to be able to complete your purchase and provide your rights. We process personal data for these purchase purposes:
- To fulfill the purchase, like providing you with the goods you have bought and handle the financial transaction.
- Send you information related to your purchase, including confirmations, receipts, invoices, customer experience surveys, and recall notices;
- To be able to provide you with the best possible assistance when contacting us through customer service and to enable you to use your consumer rights.
For these purposes, the following data is processed:
- Name
- Mobile phone number
- Email address
- Postal address
- Transactional Information, such as product details, purchase price, and the date of the transaction.
- Other Information You Provide
The processing is necessary for the performance of a contract with you or to take steps at your request prior to entering into a contract (GDPR art. 6 (1) b).
2.3 Account
When you make a purchase with us, you get the option to register with an account. The account allows you to easily track your orders, accessing order history and your registered personal data. To provide these services to you, we need to process your personal data. To register and manage the account, we use Shopify and Ometria.
You may update and correct certain account information at any time by logging into your account. If you wish to delete your account, please email us at privacy@dbjourney.com, but note that we may retain certain information as required by law or for our legitimate business purposes.
2.4 Loyalty Program “Db Black”
In order to provide you with the membership benefits and manage our customer relationship with you, we use personal data for the following purposes:
- To create and manage your personal user account and membership in Db Black.
- To be able to provide you with discounts, information regarding events, apply lifetime warranty, offer free shipping (Norway and Sweden only), send communication related to Db Black and to contact you in relation to your membership.
- To provide you with relevant content, communication and offers, through automated profiling and assessment.
For these purposes, the following data is processed:
- Personal information you register when you become a member and when you create and update your profile, such as name, mobile number, e-mail address, date of birth, etc. The information you provide may also be enriched via bulletin services, or information via social media you give us access to.
- Information about the purchase and earning of bonus when you use your membership.
- Information about visit and products viewed on the site.
The processing of personal data is necessary for the fulfilment of the loyalty program agreement with you (GDPR. art. 6(1) b).
To register and manage the membership, we use Shopify, Ometria, Typeform, Yotpo and in some cases Hubspot.
You can change your preferences or delete your account by sending us an email to the following address: privacy@dbjourney.com.
The minimum age for our loyalty program is 13 years.
2.5 Db Pro, Db Ambassador, Db Collabs and Db Student
You may apply for Db Pro, Db Ambassador, Db Collabs or Db Student. In the application process we will collect information about you to see if you are qualified for the program you have applied to. We will need your contact information, and some information about why you think you are eligible for the program. Besides this, what information you leave with us is up to you. If you are accepted to the program, we will use the information to provide you with the benefits and send you marketing information mainly through email marketing. The processing of personal data is necessary to implement measures at the data subject's request prior to entering a contract and for the fulfillment of the program agreement with you (GDPR. art. 6(1) b). You should only leave sensitive data if it is relevant for the application. The processing of sensitive data will then be according to your consent (GDPR art. 9 (2) a).
Our application form provider is Typeform. To manage the membership, we use Shopify, Ometria, Hubspot, and in addition social media platforms like WhatsApp and Instagram are used for communication.
2.6 Social Media
We process your personal data in order to be able to show you more relevant ads in digital channels, also in social media.
We have a Facebook fan page, an account on Instagram, a Linkedin account, a TikTok account, a Snapchat account and a Twitter account.
The social media gives us access to see posts, likes, followers, comments and messages, as well as aggregated information about visits and activity on our pages, boards and customized ads. Our processing is based on our legitimate interest in reaching out to customers and potential customers (GDPR. Art. 6 (1) f).
The social media platforms are the data controllers for the information you leave there. We do not store this information ourselves, but we have access to it as long as we have our social media page. You can delete your information at any time, e.g. by removing content or reactions you have published. Please note that your data will not be deleted simply by unfollowing our site.
Facebook, Instagram, Tik Tok and Snapchat process personal data in the United States and other countries listed in their privacy policies. You can get more information about how Facebook, Instagram, Tik Tok and Snapchat process personal data in their respective privacy statements. We encourage you to read these. The basis for transfer is based on EUs standard contractual clauses.
2.7 Advertising, analytics and statistics
We allow others to provide analytics services and serve advertisements on our behalf across the web and in mobile apps. These entities may, if you consent, use cookies, web beacons, device identifiers, and other technologies to collect information about your use of our Site and other websites and applications, including your IP address, web browser, mobile network information, pages viewed, time spent on pages or in mobile apps, links clicked, and conversion information. This information may be used by Db Equipment and others to, among other things, analyze and track data, determine the popularity of certain content, deliver advertising and content targeted to your interests on our Site and other websites, and better understand your online activity. For more information about interest-based ads please visit www.aboutads.info/choices or http://www.youronlinechoices.eu/.
We also work with third parties to serve ads to you as part of customized campaigns on third-party platforms (such as Facebook, Instagram, Google, YouTube & TikTok). As part of these ad campaigns, we or the third-party platforms may convert information about you, such as your email address and phone number, into a unique value that can be matched with a user account on these platforms to allow us to serve you advertising that is customized to your interests. Note that the third-party platforms may offer you choices about whether you see these types of customized ads.
If you consent to this, we use Google Analytics to obtain information about which pages are most visited, the previous website visited, at what times the pages are visited, etc. to better understand how our users use the website, to maintain your user session on our website, for statistics, to study traffic, usage patterns and trends on the website.
By analyzing the statistics, we can better understand market trends. We do this to improve and further develop the products and services we offer. As far as possible, we try to do this with anonymous data, without being able to link the information specifically to you.
You can disable cookies from Google Analytics here. You will also have the opportunity to manage and give consent when you visit our website (GDPR. art. 6 (1) a).
2.8 Marketing through e-mail and SMS
We send newsletters by e-mail. The newsletters contain different types of information and offers. It is voluntary to sign up to receive newsletters, and you will only receive this if you have consented (GDPR. Art. 6 (1) a). It is easy to unsubscribe from the newsletter, either by contacting us or by clicking on the unsubscribe link at the bottom of all newsletters from us.
We want our newsletters to be relevant and valuable to you. If we have your consent, we will use the information we have about you at any given time to adapt the newsletters so that the offers and content are as interesting and relevant as possible. This may, for example, be names and areas of interest, if you have provided this, as well as order history and site and email engagement behavior.
When sending newsletters, we can measure the opening rate of the newsletter and create aggregated statistics and analyses to improve our newsletters. The legal basis for this is our legitimate interest in having relevant newsletters (GDPR art. 6 (1) f)).
We use Ometria as our newsletter provider. Read Ometria’s privacy policy here.
For those who have consented to receive marketing via SMS, this will be controlled from the service provider Yotpo. Read Yotpo’s privacy policy here. You can opt out of SMS marketing at any time.
2.9 Job applicants
We process personal data we have received from the job applicant to implement measures at the data subject's request prior to entering a contract (GDPR. art. 6 (1) b), or based on the job applicant's consent, cf. GDPR. art. 6 (1) a). Sensitive personal data may be processed in this regard, if it is necessary for us to do so in order to fulfil our obligations as a potential employer (GDPR. art 9 (2) b).
Any aptitude and personality tests, as well as online searches, are based on our legitimate interest in finding the right candidate, GDPR. art. 6 (1) f). We will only contact the applicant's references if we have obtained consent to this (GDPR art. 6 (1) a).
2.10 Other processing activities
We are required by law to fulfil certain obligations that involve the processing of personal data. Such obligations exist in relation to the Accounting Act, requirements for storage and compilation, and orders to submit information to competent authorities pursuant to legislation (GDPR art. 6 (1) c).
2.11 Surveys and reviews
If you have bought one of our products, attended one of our events or follow us on social media, we may ask you to answer a survey or review a product or event. When you leave a review on one of our products, we may publish the review on our Site. When you answer a survey, we collect some personal data, including name, surname, social media username, email address, phone number, country of residence, home address. We use this personal data to sign up customers to Db Black, enter competitions and sweepstakes, and register for events. It is voluntary to answer the surveys and leave reviews, and the processing is only done if we have your consent (GDPR art. 6 (1) a). Our survey provider is Typeform, you can find their privacy policy here.
2.12 Contests, promotions and sweepstakes
Sometimes we arrange contests, promotions and sweepstakes. To carry out the competition, promotions and sweepstakes, we need your contact information. If competitions/sweepstakes/promotions require Db Black membership, your personal data will be processed according to the membership terms. It is voluntary to enter the contests, promotions and sweepstakes, and we only process your information if we have your consent (GDPR art. 6 (1) a).
2.13 Information We Derive
We may derive information or draw inferences about you based on the information we collect. For example, we may make inferences about your location based on your IP address or infer that you are looking to purchase certain products based on your browsing behavior and past purchases. The legal basis for this is our legitimate interest in providing relevant advertising (GDPR art. 6 (1) f).
3 DISCLOSURE OF PERSONAL DATA
We share your personal data in the following circumstances or as otherwise described in this policy:
- We share personal information with vendors, service providers, and consultants that need access to personal information to perform services for us, such as companies that assist us with web hosting, shipping and delivery, payment processing, fraud prevention, customer service, and marketing and advertising.
- If you submit a product review or post content in another public area of our Site, we share this information publicly on our Site.
- In order to offer you Klarna’s payment methods, we might in the checkout pass your personal data in the form of contact and order details to Klarna, in order for Klarna to assess whether you qualify for their payment methods and to tailor those payment methods for you. Your personal data transferred is processed in line with Klarna’s own privacy notice.
- We may disclose personal information if we believe that disclosure is in accordance with, or required by, any applicable law or legal process, including lawful requests by public authorities to meet national security or law enforcement requirements.
- We may share personal information if we believe that your actions are inconsistent with our user agreements or policies, if we believe that you have violated the law, or if we believe it is necessary to protect the rights, property, and safety of Db Equipment, our users, the public, or others.
- We share personal information with our lawyers and other professional advisors where necessary to obtain advice or otherwise protect and manage our business interests.
- We may share personal information in connection with, or during negotiations concerning, any merger, sale of company assets, financing, or acquisition of all or a portion of our business by another company.
- Personal information is shared between and among Db Equipment and our current and future parents, affiliates, and subsidiaries and other companies under common control and ownership.
- We share personal information with your consent or at your direction.
We also share aggregated or de-identified information that cannot reasonably be used to identify you.
4 TRANSFER OF INFORMATION TO THE UNITED STATES AND OTHER COUNTRIES
Db Equipment is headquartered in Norway, and we have operations and service providers in the European Economic Area (“EEA”), United States and other countries. Therefore, we and our service providers may transfer your personal information to, or store or access it in, jurisdictions that may not provide levels of data protection that are equivalent to those of your home jurisdiction. We will take steps to ensure that your personal information receives an adequate level of protection in the jurisdictions in which we process it.
If you are in the EEA, we provide adequate protection for the transfer of personal data to countries outside of the EEA through a series of intercompany agreements based on the Standard Contractual Clauses authorized under EU law. You are entitled to obtain a copy of these agreements by contacting us using the contact information below.
5 DATA RETENTION
We store personal data associated with your account for as long as your account remains active. We store personal data for as long as necessary to carry out the purposes for which we originally collected it and for other legitimate business purposes, including to meet our legal, regulatory, or other compliance obligations.
6 DATA SUBJECT REQUESTS
Subject to certain limitations, you have the right to request access to the personal data we hold about you and to receive your data in a portable format, the right to ask that your personal data be corrected or erased, the right to withdraw a consent, and the right to object to, or request that we restrict, certain processing. You can exercise any of these rights by emailing us at privacy@dbjourney.com.
7 QUESTIONS OR COMPLAINTS
If you have a concern about our processing of personal data that we are not able to resolve, you have the right to lodge a complaint with the Data Protection Authority where you reside. Contact details for your Data Protection Authority can be found using the links below:
For individuals in the EEA: https://edpb.europa.eu/about-edpb/board/members_en
For individuals in the UK: https://ico.org.uk/global/contact-us/
For individuals in Switzerland: https://www.edoeb.admin.ch/edoeb/en/home/the-fdpic/contact.html
8 CHANGES
We may change this Privacy Policy from time to time. If we make changes, we will notify you by revising the date at the top of this policy and, in some cases, we may provide you with additional notice (such as adding a statement to our website or sending you a notification). We encourage you to review this Privacy Policy regularly to stay informed about our information practices and the choices available to you.
9 CONTACT US
If you have any questions about this Privacy Policy, please contact us at privacy@dbjourney.com.
.