Privacy policy
AMOK takes privacy seriously. We want you to feel confident that we handle personal data responsibly and in accordance with applicable regulations. In this privacy policy, we explain why we collect information, what types of data we process, and how we protect your privacy.
Amok Equipment AS (hereafter AMOK) org. no. 911 823 705 is the data controller for the personal data described in this policy.
If you have questions about how we process your information, or if you want to exercise your rights under data protection legislation, please contact customer service by email: support@amokequipment.com. You can also contact us at any time, or update your information, through your personal page: amokequipment.com/account/login.
In some cases, we may process personal data in ways other than those described below. If that happens, we will inform the individuals concerned in an appropriate way outside of this policy.
Why and what types of personal data we collect and process
As an online store for hammocks and outdoor equipment, we process personal data in order to deliver the products and experience you expect. The information we collect about you depends on who you are and how you interact with us. Below we describe the types of data we process, the purpose of the processing, the legal basis, and how long we store the information.
By “personal data” we mean any information that can be linked to you as an individual.
By “processing” we mean any operation performed on personal data, such as collection, registration, organization, storage, adaptation, modification, retrieval, use, disclosure, distribution, making available, alignment, restriction, deletion, or destruction.
What information do we process and how do we collect it?
The information we hold about you depends, among other things, on how you use our services, your settings on “My pages”, and whether you subscribe to our newsletter.
We mainly collect the following information:
1. Information you provide to us:
When you visit the online store, make purchases, create and manage an account, subscribe to newsletters, contact customer service, or participate in surveys or competitions, you provide personal data. This may include:
- Contact information (name, address, phone number, email address).
- Login information (email, username, and password).
- Account information (customer ID, “tags” related to discount programs and purchase history).
- Purchase history (previous purchases and use of discounts).
- Information you provide when contacting customer service (contact details, possible verification information, and the content of your inquiry). If you contact us via social media (for example Facebook or Instagram), we may also have access to information you have made visible there, such as your username and profile picture.
- Information related to participation in competitions.
- If you apply for a job with us, we process the documentation you submit (CV, application, certificates, diplomas, references, and contact information).
2. Information we collect through use of our services:
Some information is collected automatically when you use our website. Depending on the services you use, this may include:
- Purchase history and behavior – which pages and products you view or show interest in. We use this for marketing purposes, including segmentation, analysis, and behavioral marketing on websites and social media (more on this below).
- Location data, IP address, and usage information – when and how you use the website, as well as delivery metrics for email and other communication.
- Analytics – the use of third-party analytics services that use cookies and similar technologies to measure usage and report trends.
- Information from social media – when you like/share posts, follow us, or comment on our pages.
Who do we process personal data about?
This policy covers our processing of personal data for:
- Customers in the online store
- Visitors to the website
- Newsletter subscribers
- Job applicants
What the information is used for and the legal basis for processing
Below you will find the purposes of our processing of personal data and the legal basis that applies:
| Purpose of processing | Legal basis |
|---|---|
| Deliver services: Processing purchases. | Performance of a contract or legal obligations (GDPR Art. 6(1)(b)(c)). |
| Provide access to website features: When registering as a user/member. | Your consent (GDPR Art. 6(1)(a)). |
| Communicate with you: Regarding purchases, your account, or customer service inquiries. | Performance of a contract (GDPR Art. 6(1)(b)) or our legitimate interest in communicating with you (GDPR Art. 6(1)(f)). |
| Send recommendations and relevant marketing: Tailored offers/advertising via SMS, email, websites, and social media. | Your consent (GDPR Art. 6(1)(a)). For newsletters, legitimate interest in an existing customer relationship may also apply (GDPR Art. 6(1)(f)). |
| Register participation in competitions and surveys. | Your consent (GDPR Art. 6(1)(a)). |
| Carry out recruitment processes: Assess potential employment. | Necessary to enter into a potential employment contract (GDPR Art. 6(1)(b)). |
| Support and improve services: Improve the website, tailor recommendations and functionality. | Your consent (GDPR Art. 6(1)(a)) and our legitimate interest in insights and quality improvement (GDPR Art. 6(1)(f)). |
| Ensure website security: Prevent misuse, protect rights, and ensure compliance with terms. | Our legitimate interest in protecting services and users (GDPR Art. 6(1)(f)). |
| Comply with legal obligations: Respond to authority requests, legal orders, accounting and tax obligations. | Legal obligation (GDPR Art. 6(1)(c)). |
Use of cookies
We use cookies on our website. You can see which cookies we use, what you have consented to, and manage your choices through the link in the website footer.
Disclosure of personal data
We share personal data with third parties only when necessary and appropriate:
- Service providers – for example shipping companies, payment providers, and IT suppliers. We enter into data processing agreements that prevent other use of the information.
- Public authorities – when we are legally required to do so, for example under accounting and tax legislation.
To fulfill the purposes above, information may in some cases be transferred to countries outside the EEA. In such cases we ensure adequate protection and follow the requirements of GDPR Chapter V before any transfer takes place.
Storage of personal data
We store personal data only as long as necessary for the purposes for which it was collected, and delete it when it is no longer needed. Retention periods vary depending on how the data was collected and the purpose of processing. We particularly consider:
- Whether we have a legal or contractual need to retain the information
- Whether the information is necessary to deliver goods or services
- Whether you can access or delete information through your user account
- Where the basis is consent: when consent is withdrawn or an account is deleted/closed
When we no longer have a legitimate need to process personal data, it will be deleted or anonymized as soon as possible in accordance with applicable law.
Rights
When we process your personal data, you have rights under data protection legislation that you may exercise toward us:
- Access: You may request access to the personal data we hold about you.
- Deletion: You may request deletion of your data unless we are legally required to retain it or other considerations require continued storage.
- Correction: If information is incorrect, you can correct it on “My pages” or contact us for updates.
- Restriction: You may request that processing be restricted when the legal conditions are met.
- Objection: When processing is based on legitimate interest, you may object. We will stop the processing unless compelling legitimate grounds apply.
- Data portability: If we process data based on consent or a contract and the processing is automated, you may request to receive the data in a structured, commonly used, machine-readable format.
If you have given consent, you may withdraw it at any time by contacting us. If it relates to membership or newsletters, you can unsubscribe through the link in each email. You can also view and update your information — and withdraw consent — on “My pages”.
Before granting access or making changes, we may ask you to verify your identity or provide additional information to ensure that only the correct person receives access.
The Norwegian Data Protection Authority and complaints
The Norwegian Data Protection Authority supervises compliance with data protection regulations and oversees Norwegian organizations’ processing of personal data. If you have a complaint about our processing, you may contact us at any time.
We use the Norwegian Data Protection Authority as the lead supervisory authority for cross-border processing under GDPR Article 56. You may therefore submit a complaint to the Authority.
Contact information for the Norwegian Data Protection Authority can be found on their website: www.datatilsynet.no.
Changes
We may update this privacy policy when necessary, for example when we change how we process personal data or when regulations change. When updates are made, a revised version will be published on our website. If the changes are significant, we will notify you and obtain new consent where required.