Last updated 11 Nov 2021 - v08
- Subject matter of data protection
Subject matter of data protection are personal data. According to Article 4 (1) GDPR, “personal data” means any information relating to an identified or identifiable natural person; this includes, for example, names or identification numbers
- Responsible controller/contact information
The data controller responsible for data processing via this website is:
- Powerzeek AS
- Lars Hillesgate 30, 5008 Bergen, Norway
- Email: mail (at) powerzeek.com
If you have any questions or suggestions regarding data protection or if you want to exercise your rights, please do not hesitate to contact us.
- Collection of data by automated means
When accessing our website, your device automatically transmits data for technical reasons. The following data is stored separately from other data that you may transmit to us: date and time of accessing our website, IP-address, browser type and version, operating system, URL of the previously visited website (Referrer), duration of the data transfer and amount of data sent.
We only store these data for the technical administration and the security of the website. The data are deleted after a certain period of time, provided that there is no legitimate reason to suspect illegal use based on concrete indications. Apart from that, the data are not matched to a specific person. The respective processing is necessary for the purposes of our legitimate interests in a secure website, 6(1) (f) GDPR.
- Contact form
You can send us a message using the contact form. All data fields marked with * are necessary to process your inquiry. If you do not provide these data, we may not be able to process you inquiry. You are free to provide further data on a voluntary basis. The processing of your personal data is necessary to deal with your inquiry, Article 6(1)(b) GDPR.
We offer a free newsletter. With our newsletter we provide you with updates and marketing information about Powerzeek.
To subscribe to the newsletter, you can enter your email address in the respective field on the website. You can unsubscribe from the newsletter at any time. Each newsletter contains a link to unsubscription.
In this case, your personal data will be collected and processed in order to be able to offer you the newsletter as you subscribed to it, Article 6(1)(b) GDPR. In addition, we will store information about your newsletter registration and confirmation in order to comply with our legal obligation to demonstrate that you have subscribed to our newsletter, Article 6(1)(c) GDPR.
- Powerzeek Platform
Via our Powerzeek Platform third party sellers and buyers of goods can initiate requests for offers or bids, negotiate and complete transactions, purchase access to our market and price analysis. When you use our platform we process your personal data in order to provide platform services according to the Powerzeek Platform’s general terms and conditions.
- 1 Registration and Log-in
You can only use the platform upon registration. In this regard the provision of certain data as indicated by the * in the registration form are necessary. If you do not provide the required data, you cannot register for Powerzeek Platform. The provision of further data is voluntary. The processing of your personal data is necessary to fulfil the registration contract, Article 6(1)(b) GDPR. Once your registration is confirmed you will be subject to the Powerzeek Platform’s general terms and conditions. After registration you may update your data or delete your data by cancelling your registration at any time via sending an email to mail@Powerzeek.com
Upon log-in we store a token in the local storage of your browser which is technically necessary and insofar the respective processing is to offer the respective functions, Article 6(1)(b) GDPR.
Please note that we will also process your personal data to verify this information, including any updated information and to obtain additional information which we require in order to provide the platform services, especially in order to verify your authority to act (Article 6 (1)(f) GDPR) and to obtain sanction reports as set out in our general terms and conditions (Article6(1)(c) GDPR).
- 2 Buying and Selling
You can create a listing for the sale and purchase of goods. According to the preferences you chose for your listing, personal data may be published within the platform. Any processing of personal data carried out by us in this regard serves the purpose of processing your listing and related services, such as matching, as requested, Article 6(1)(b) GDPR.
Please note that seller and buyer are solely responsible for any processing of the other party’s personal data in connection with their transactions.
- Google Analytics
You can disable Google Analytics using a browser add-on if you do not want the website analysis to take place. You can download the add-on here:https://tools.google.com/dlpage/gaoptout
The use of Google Analytics is justified on the basis of our legitimate interest in a demand-based design as well as in the statistical evaluation of and efficient advertising on our website, Article 6(1)(f) GDPR.
You can opt-out to the creation of a user profile, Hotjar’s storing of data about your usage of our site and Hotjar’s use of tracking cookies on other websites by following this opt-out link.
- Transfer of data to third parties
The transfer of this data is justified by our legitimate interest in combating abuse, prosecuting criminal offences and securing, asserting and enforcing le-gal claims, Article 6(1)(f) GDPR.
In order to provide our newsletter we use the service Hubspot (www.hubspot.com). Data is transmitted to processors on the basis of Article 28(1) GDPR, alternatively on the basis of our legitimate interest in the economic and technical advantages associated with the use of specialised contract processors, Article 6(1)(f) GDPR.
Invoice processing is handled by the service provider Fiken (www.fiken.no) and/or Stripe (www.stripe.com). Name, address and any other personal data will be passed on to Fiken and Stripe exclusively for processing the online order and handling the the invoices. Data is transmitted to processors on the basis of Article 28(1) GDPR, alternatively on the basis of our legitimate interest in the economic and technical advantages associated with the use of specialised contract processors, Article 6(1)(f) GDPR.
- Content Delivery Networks
Any relevant data processing is necessary for the purposes of the legitimate interests in optimizing and operating our website in an efficient way, Article 6(1)(f) GDPR.
- Our social media pages
In addition to this website, we operate several social media pages. If you interact with our social media pages, we process certain personal data, e.g. if you leave comment, like or retweet a post. Please take into account that – according to your settings – any content provided by you may be published on the respective social media page and may be accessible worldwide. We will also process your personal data in order to deal with any inquire and/or message you send us via the respective network. We process these data to deal with your inquiry, Article 6(1)(b) GDPR, as well as to pursue our legitimate interest in operating social media pages, Article 6(1)(f) GDPR. Furthermore, we may process information you made public on these social media networks, if this is necessary for legitimate interests pursued by us (e.g. economic interests), Article 6(1)(f) GDPR.
In addition, the operators of the respective social media networks will process your personal data when you visit and/or interact with our social media pages according to their respective privacy policies. You will find further information in the privacy policies provided by the operators of the social media networks (please see below).
We operate the following social media pages:
Our Facebook page can be accessed via https://www.facebook.com/Powerzeeking/.
The data controller for processing in connection with the Facebook platform is Facebook Ireland Ltd., 4 Grand Canal Square, Grand Canal Harbour, Dublin 2, Ireland. Your personal data may also be transferred to other Facebook entities outside the European Economic Area. The US company Facebook, Inc. is certified under the EU-U.S. Privacy Shield (https://www.privacyshield. gov/participant?id=a2zt0000000GnywAAC&status=Active).
We and Facebook Ireland Ltd. are joint controllers with respect to Insights Data, which is collected when you visit our Facebook page. With Insights Data Facebook analysis the behaviour on our Facebook page and provides this data anonymized to us. For these purposes we have concluded a joint controller agreement with Facebook Ireland Ltd., which can be accessed here:https://www.facebook.com/legal/terms/page_controller_addendum. With this agreement Facebook Ireland Ltd. agrees to take agrees to take primary responsibility under the GDPR with respect to Insights Data. This processing is necessary for pursuing our legitimate interest in optimizing and improving our Facebook according to our users’ demands, Article 6(1)(f) GDPR.
Our Twitter channel can be accessed via https://twitter.com/powerzeek
Our LinkedIn page can be accessed via https://www.linkedin.com/company/powerzeeking
Our Instagram page can be accessed via https://www.instagram.com/powerzeeking/
Our YouTube channel can be accessed via: https://www.youtube.com/channel/UCVbEz-bHVPetAH4z2_QUkrQ
- Erasure of your data
We delete or anonymize your personal data as soon as they are no longer required for the purposes for which we have collected or processed the respective personal data in accordance with this policy.
If we are obliged to further retain personal for legal reasons (e.g. applicable tax law retention periods), it will be restricted in its processing. The data is then no longer available for other use.
- Changes of purpose
Your personal data will only be processed for purposes other than those described if permitted by law or if you have consented to the changed purpose. In the event of further processing for purposes other than those for which the data was originally collected, we will inform you of these other purposes before further processing and provide you with all other relevant information.
- Automated individual case decisions and measures for profiling
We do not use any means of automated individual decision-making or profiling.
- Your rights as data subject
As a data subject, you have the following rights, which you can exercise by contacting us via one of the channels indicated above:
- Right of access: You have the right to request information from us at any time about the personal data we have processed concerning you within the scope of Article 15 GDPR.
- Right to rectification of inaccurate data: According to Article 16 GDRP you have the right to have us correct any personal data concerning you immediately if it is inaccurate.
- Right to erasure: You have the right to have us delete personal data concerning you under the conditions described in Article 17 GDPR.
- Right to restriction of processing: You have the right to have us restrict processing of your personal data in accordance with Article 18 GDPR.
- Right to data portability: You have the right to receive the personal data you have provided to us in a structured, commonly used and machine-readable format in accordance with Article 20 GDPR.
- Right to object: You have the right to object on grounds relating to your particular situation at any time to processing of your personal data which is based, inter alia, on Article 6(1)(e) or (f), according to Article 21 GDPR. We will no longer process the personal data unless we can demonstrate compelling legitimate grounds for the processing which override your interests, rights and freedoms or for the establishment, exercise or defence of legal claims.
- Data processing when exercising your rights: When you exercise your rights, we only use the personal data provided by you in order to process your request and for accountability purposes. These processing activities rely on the legal basis of Article 6(1)(c) GDPR.
- Right to lodge a complaint with a supervisory authority
You also have the right to lodge a complaint with a supervisory authority in the event of complaints. You can find an overview over data protection authorities in the EU here: http://ec.europa.eu/justice/article-29/structure/data-protection-authorities/index_en.htm.