Privacy Policy Back

---

Last updated 09.03.2023

General

At Luups we are committed to protecting and respecting your privacy. This privacy policy provides general information concerning how we process personal data about our customers, visitors to our website and natural persons that send us inquiries using the contact information available on our website. You will find information about which personal data we may process and the purpose of such processing in this privacy policy.

Upon processing of your personal data as described within this privacy policy, Luups acts as the data controller, meaning we are responsible for processing your personal data in a responsible manner and ensuring that you are able to invoke your rights under chapter III of the General Data Protection Regulation - GDPR - Regulation (EU) 2016/679.

Personal data means any information concerning a natural person - hereinafter referred to as the data subject - e.g. name, e-mail address, telephone number or evaluations that may be linked to a natural person.

If you have any questions or concerns about how we process your personal data, your rights or how to invoke those rights, you may contact us for assistance at chb@luups.no or by using the contact information provided below.

Categories of personal data we may process

Luups may process the following personal data about you:

• Name
• E-mail address
• IP address
• Geolocation
• Any other personal data you actively disclose to us

How personal data is collected

Personal data may be freely provided by you upon visitation to our website or by contacting Luups directly, either by using the contact information provided on our website or within this privacy policy.

Luups also uses analytic tools to analyse the traffic to our website and generate statistics. These processes do not include any processing of personal data or other information that may be linked to an IP-address or an identifiable person. We use this intel to better understand the use of our website and improve our services.

Legal basis and the purpose of our processing of personal data

All processing of personal data - as described in this privacy policy - serves one or more dedicated purposes and is conducted in accordance with the GDPR article 6 as described below. Luups will not further process your personal data in a manner that is incompatible with those purposes.

Direct inquiries

Inquiries addressed to the provided contact information on our website or within this privacy policy will result in Luups processing your contact information and any other information you provide to us. The legal basis for such processing is your freely given consent pursuant to GDPR article 6 no. 1 letter a). We sincerely ask that you confine the provided information to what is necessary for us to address your inquiry and undertake appropriate actions. You may at any time revoke your consent by using the contact information provided below. Provided that we are not legally obliged to further process your personal data, we will make sure to delete them.

Registration and use of user accounts

Upon registration to use Luups’ services, the customer will provide personal data relating to a designated contact person, i.e. name, country code and phone number, which is used to verify his or her identity by text message and to generate a unique user ID within our systems. The administration of your customer account includes processing of personal data you have provided relating to the account and transactions conducted to pay for our services. The legal basis for this processing is GDPR article 6 no. 1 letter b) as it is necessary for Luups to honour our obligations according to the general terms and conditions. If you choose to terminate your account, we will make sure to delete your personal data, provided that we are not legally obliged to further process your personal data.

Retention time

Luups will not process your personal data beyond what is necessary to fullfil the purpose of collecting your personal data in the first place and will respect the limitations of all legal bases allowing us to process your personal data. All processing of personal data shall cease upon the withdrawal of your consent to such processing, provided that we are not legally obliged to further process your personal data.

Once the retention period expires, personal data will be deleted. Therefore, you may not be able to invoke the right to access, erasure, rectification and data portability after the retention period has expired. If you have any questions or concerns regarding the retention of your personal data, please contact us by using the contact information provided below.

Luups as a Data Processor

Luups acts as a data processor with regards to all creations of, participations in and contributions to video projects made available on our platforms, unless Luups is the project owner of the video project. Luups will only process your personal data relating to video projects in accordance with the instructions provided by the relevant project owner. All such processing is conducted under the project owner’s responsibility acting as a data controller.

If you have any concerns or questions in this regard, please contact the project owner directly. If you are not able to reach the project owner, please let us know and we may be able to assist you.

Disclosure of personal data and data processors

Luups takes appropriate security measures to prevent unauthorised access to your personal data as well as to avoid unwarranted disclosure, modification and/or unauthorised destruction of your personal data.

Luups will not disclose personal data to third parties, unless the third party is engaged as a data processor governed by a data processor agreement ensuring that appropriate technical and organisational measures have been implemented. If you wish to receive a list of these parties, please let us know by using the contact information provided below.

Rights of the data subject

You have the following rights in accordance with the General Data Protection Regulation (GDPR):

• You are entitled to a confirmation as to whether or not Luups processes your personal data and to access any personal data Luups processes about you, as well as the purpose of said processing.
• You have the right to verify and where applicable rectify any inaccurate personal data concerning you and to have incomplete personal data completed.
• You have the right to obtain restrictions on processing of personal data concerning you.
• You have the right to object to the processing of personal data and to withdraw any previously given consent. Please note that the withdrawal of a consent does not affect the lawfulness of any processing performed previous to the withdrawal.
• You have the right to erasure of personal data concerning you. Upon request of erasure Luups will be obliged to delete your personal data unless Luups otherwise has legal grounds to further process the data.
• You have the right to lodge a complaint and to bring a claim before the competent data protection authority. Information regarding when and how to lodge a complaint may be found here.

If you wish to exercise any of the above mentioned rights or have questions about them, please let us know by using the contact information provided below.

Location of processing and transfers to third countries outside the EU/EEA

Luups processes personal data at our operating offices and in any other locations where the parties involved in the processing are located. Depending on your location, data disclosure between you and Luups may involve transferring your personal data to a country other than the country you are currently located in. If you want to know more about how this may affect the processing of your personal data, do not hesitate to contact us using the contact information provided below.

Luups will not transfer your personal data to third countries outside the EU/EEA. Luups takes pride in providing a secure and user friendly service that is locally provided and safe to use. If you wish to receive a list of the involved parties, please let us know by using the contact information provided below.

Security

Luups has implemented the necessary organisational and technical measures to ensure that your personal data is processed in a secure manner emphasising the importance of integrity, confidentiality and availability of personal data. Luups strives for compliance with the principle of data minimization by reducing the amount of personal data we process to what is absolutely necessary.

Luups process your personal data under strict confidentiality on servers with limited access located in secured facilities. Access rights are protected with two-step verification systems and solely granted to personnel who need such access to conduct their job. We also monitor and evaluate our security measures on an ongoing basis to identify necessary adjustments.

Legal action

Your personal data may be used for legal purposes by Luups in court or in the stages leading up to potential legal actions arising from improper use of this website or the related services.

Disclaimer

Luups gives no warranty and accepts no responsibility or liability for the content generated by the use of our services. Luups has no control over, gives no warranty and accepts no responsibility regarding the use of any contribution to e.g. video projects on our sites. Under no circumstances will Luups be held responsible or liable in any way for any claims, damages, losses, expenses, costs or liabilities whatsoever resulting or arising directly or indirectly from your use of or inability to use this website or our services.

Changes to this privacy policy

Luups reserves the right to make changes to this privacy policy at any time. Changes will be updated and published on this website and Luups may also send you a notice by using contact information available to us.

We recommend that you check this page regularly and verify the date of last modification at the bottom to ensure that you are acquainted with the latest and applicable terms and conditions as set forth in this privacy policy.

DProvided that we change any of our processing activities performed on the legal basis of a consent, we will collect new consents to secure legal bases for the continuation of the processing activity.

Contact

If you have any questions regarding this privacy policy or the General Data Protection Regulation (GDPR), do not hesitate to contact:

Chris-Håvard Berge, +47 473 24 204, chb@luups.no

You also have the right to contact the competent data protection authority. Information regarding when and how to lodge a complaint may be found here.