privacy policy

1 who we are

we are hmshost-umoe f&b company as and respect your privacy. this policy describes how we use your personal information hmshost-umoe f&b company as, flyporten, henrik ibsensvei, 2060 gardermoen, organization number 916 041 802 respects your privacy and values the trust you place in us when you share your personal information with us. this policy sets out how we, as data controller, collect and use your personal information, why we use it, with whom we share it, the rights to which you may be entitled and your choices about our use of your personal information.

this policy covers our use of your personal information arising from use of this website as well as [registering / subscribing / buying / using our products and services.

if you have any questions or need any further clarity please get in touch. contact details are set out below.

this privacy policy also covers our group of companies. each group company is a data controller and we've listed them below: hmshost-umoe f&b company as, flyporten, henrik ibsensvei, 2060 gardermoen, organization number 916 041 802

2 your information

data collection and usage

we will collect and use your personal information [to allow access to this website, register / subscribe / buy / use our products and services] and purposes set out in more detail in this section. your information may be shared with members of our group and some third parties.

please click here for further details on how we use your information and with whom we may share it.

what we collect and how we use it 1 information that you give us to make a purchase, whether online or over the phone including: • your contact details including: your name, address, email address; • your bank account details; • the details you provide to make a reservation or booking; • the details you provide to open an account with us; • the product purchased.

we use this information, including to :

• provide our products and services; • manage and administer our services; • process your order; • take payment from or give you a refund; • help us ensure that our customers are genuine and to prevent fraud; • provide a reservation or booking service; • send personalised offers.

2 information about the way you use our services including: • the things that we've provided or you've purchased; • when and where you've made the purchases; • what you paid and how; • whether you've opened electronic communications from us; • whether you've clicked on links in electronic communications from us. we use this information, including to: • develop new services; • improve our services; • identify products and marketing that may be of interest to you; • personalise our service of things you're interested in and how you use our services; • statistical analysis and research.

3 information when you communicate with us whether in person, through our website or via email, over the phone, through social media or via any other medium, including: • your contact details (this may include your social media account if that's the way you communicate with us); • the details of your communications with us; • the details you provide to us when you complete a survey; • the details of our messages to you.

we use this information, including to: • answer any issues or concerns; • monitor customer communications for quality and training purposes. • develop new services; • improve our services; • personalise our service.

4 information provided as part of your account including : • your username; • your password; • your account settings; • your account preferences; • your email address. we use this information, including to: • provide our services; • manage and administer our systems; • identify how you'd like to use your account.

5 information that we collect through your use of our website including: • device information such as operating system, unique device identifiers, the mobile network system; • hardware and browser settings; • date and time of requests; • the requests you make; • the pages you visit and search engine terms you use; • ip address. we use this information, including to: • provide our services; • develop new services; • improve our services; • identify issues with the website and user's experience of it; • monitor the way our website is used.

6 information that we collect from third party partners and corporate customers which could include: • payment processing companies; • your bank; • other entities in our group; • other members of a loyalty scheme; • administrators of prize draws and competitions. we use this information, including to: • provide our services; • manage and administer our systems; • take payment from or give you a refund; • help us ensure that our customers are genuine and to prevent fraud; • personalise our service; • statistical analysis and research into our clients; • combine this information with other types of information mentioned above.

7 information that we collect incidentally from other sources or public sources, including: • information available in the media; • information presented on our social media timelines; • information collected by security systems. we use this information, including to: • maintain market awareness; • build and maintain social media branding; • provide security to our sites.

8 information that we collect from individuals representing organisations, including: • contact details of individuals working for organisations; • other personal information regarding such individuals. we use this information, including to: • build relationships with other organisations.

why we collect and how long we keep your information

we collect and use your information for a variety of reasons. we need some information to enter into and perform our contract – for example your contact and payment details.

some information processing is required by law due to our anti-fraud screening obligations or in the public interest such as making sure we verify our customers' identities. some information is processed because you've given your consent to that, which can be withdrawn.

other information we collect because we have legitimate business interests, for example, in: • understanding how our customers use our products, services and websites; • understanding and responding to customer feedback; • researching and analysing the services our customers want; • improving our services; • receiving information from other entities in our group/[other members of our loyalty scheme] about shared customers; • understanding the type of products and services our customers buy and how they use them; • personalise our offers so we're better able to provide offers and ideas that are relevant to you; • maintaining a public profile on both traditional and social media; • providing security over our business and who we trade with; or • developing and maintaining relationships with vendors, partners and other companies and dealing with individuals who work for them in our sector.

we will keep your information for as long as it is reasonably necessary. it will depend on factors such as whether you have any outstanding purchases or an account with us or have interacted with recent offers. we will also routinely refresh our information to ensure we keep it up-to-date.

other uses

automated decision making

we may make automated decisions on certain matters. for example, we may do this to decide whether [we can provide our services to you based on a credit check. this will be informed by credit scoring where we share your information with credit reference agencies, screening on [databases] and confirmation of your information (including by third parties). depending on the outcome of the credit check, a decision will be reached automatically as to whether we are able to provide products or services to you based on your credit worthiness. submitting to a credit reference check is necessary for us to offer you a product or service / necessary under applicable law. if this information is not provided we cannot agree to provide a product or service for you .

if you disagree with the decision you are entitled to contest this by contacting us.

legal requirements

your personal information may also be processed if it is necessary on reasonable request by a law enforcement or regulatory authority, body or agency or in the defence of a legal claims. we will not delete personal information if relevant to an investigation or a dispute. it will continue to be stored until those issues are fully resolved.

why we collect and how long we keep your information this information may be collected and used when it has been made publicly available. when you provide us with this information you are consenting that we may collect and use it in the way we've set out. we will keep your information for as long as it is reasonably necessary. it will depend on factors such as whether you've any outstanding purchases or an account with us or have interacted with recent offers. we will also routinely refresh our information to ensure we keep it up-to-date

information we share

there are certain circumstances where we may transfer your personal data to employees, contractors and to other parties. • we may share information about you with other members of our group of companies so we can provide the best service across our group. they are bound to keep your information in accordance with this privacy policy. • we may also share your information with certain contractors or service providers. they may process your personal data for us, for example, if we use a marketing agency. [other recipients/service providers include advertising agencies, it specialists, database providers, backup and disaster recovery specialists, email providers or outsourced call centres.] our suppliers and service providers will be required to meet our standards on processing information and security. the information we provide them, including your information, will only be provided in connection with the performance of their function. • we may also share your information with certain third parties. we will do this either when we receive your consent or because we need them to see your information to provide products or services to you. these include credit reference agencies, anti-fraud databases, screening agencies and other partners we do business with [such as other loyalty scheme members]. if we are not able to share information with certain third party partners who are also in our loyalty scheme, we will not be able to offer that service]. your personal information may be transferred to other third party organisations in certain scenarios: • if we're discussing selling or transferring part or all of our business – the information may be transferred to prospective purchasers under suitable terms as to confidentiality; • if we are reorganised or sold, information may be transferred to a buyer who can continue to provide services to you; • if we're required to by law, or under any regulatory code or practice we follow, or if we are asked by any public or regulatory authority – for example the police; • if we are defending a legal claim your information may be transferred as required in connection with defending such claim. your personal data may be shared if it is made anonymous and aggregated, as in such circumstances the information will cease to be personal data.

3 your rights

you may have certain rights in relation to your information including a right to access or to correct the information we hold on you. other rights may be available in certain circumstances. please click here to see more detail about the rights that may available and how you can get in touch with us.

data subject rights

we've listed the rights you have over your information and how you can use them below.

these rights will only apply in certain circumstances. they will generally not be available if there are outstanding contracts between us, if we required by law to keep the information or if the information is relevant to a legal dispute. • you can remove consent, where you have provided it, at any time. • you can ask us to confirm if we are processing your information. • you can ask for access to your information. • you can ask to correct your information if it's wrong.

you have a right to be forgotten and you can ask that our systems stop using your information. • you can ask us to restrict how we use your information. • you can ask us to help you move your information to other companies.

to help with that, you have a right to ask that we provide your information in an easily readable format to another company. • you can ask us to stop using your personal information, but only in certain cases. • you have the right to complain to the relevant supervisory authority.

how to contact us

if you have any questions about this policy please contact us on support@umoerestaurants.no

changes to the policy

this policy will be changed from time to time. if we change anything important about this policy (the information we collect, how we use it or why) we will highlight those changes at the top of the policy and provide a prominent link to it for a reasonable length of time following the change. you can email the data protection officer for previous versions, you can get in touch at the following email address: support@umoerestaurants.no.

other policies

cookies

we use cookies that identify your browser or device. they collect and store information when you visit our website [or app] about how you use it.

security

we are committed to keeping your personal information safe. we've got physical, technical and administrative measures in place to prevent unauthorised access or use of your information.