Privacy Policy for Purpose IT
1. Introduction
This privacy policy applies to Purpose IT's processing of personal data when you are in contact with us and in connection with the use of the platform. Purpose IT offers a benefits and purchasing platform for organizations and companies customized to their brand, where part of the revenue goes to voluntary and humanitarian purposes. Personal data means any information about an identified or identifiable natural person. This declaration provides information about your rights and how we handle your information. You can find more information about requirements for handling personal data and your rights on the Data Protection Authority's website – www.datatilsynet.no.
2. Who is responsible for processing your personal data?
Purpose IT is the data controller for personal data collected through the Platform. We take privacy seriously and are committed to protecting your personal data. This privacy policy explains how we collect, use, store and share your personal data when you use our service. If you have questions about this declaration, wish to exercise your rights or have objections to the processing, we would like to hear from you. Contact information: • Company: Purpose IT • Organization number: 934 916 042 • Address: Munkedamsveien 35 • Email: personvern@purposeit.no
3. What personal data we process
We process the following categories of personal data:
3.1 Information you provide to us
• Basic information: Name, email address, phone number • Affiliation information: Organization/company you are affiliated with • Contact information: Delivery address, billing address • Card information: information about registered debit and credit cards (processed only by our payment provider www.2izii.no)
3.2 Information we collect automatically
• Device information: IP address, device type, browser type • User behavior: Purchase history, earned discounts and contributions to voluntary organizations, preferred categories and visit patterns • Login data: Time of login, use of the platform
4. Purpose of processing
We process your personal data for the following purposes: • Deliver the service: To give you access to benefits and services through the platform, as well as customize content • Customer service: To be able to assist you with inquiries and questions • Transactions: To be able to provide discounts for purchasing purposes and to collect data on received discounts and calculate and invoice revenue-based commission to voluntary organizations and financing of the platform • Improve the service: To analyze use and improve user experience • Security: To protect the platform against fraud and abuse • Marketing: To inform about offers and news (with your consent) • Reporting: To calculate and report contributions to voluntary/humanitarian purposes • Technology and security issues: we collect information to ensure that services function as they should and secure data and services in a good way
5. Legal basis for processing
We process your personal data on the following legal grounds: • Contract: Processing necessary to fulfill our agreement with you • Consent: For processing for marketing purposes and other purposes where we specifically ask for consent • Legitimate interest: To improve the service and ensure the platform's functionality and security • Legal obligation: To comply with accounting law and other relevant legislation
6. Who we share information with
Your personal data may be shared with the following categories of recipients: • 2izii.no: Our payment provider that handles card and transaction data • AWS Stockholm: Our cloud platform provider that stores and processes data • Fireclover: Our partner for operation and security of cloud services • itjet.io: Our development partner that maintains and develops the platform • Your organization/employer: Information about benefits use at an aggregate level may be shared with the organization you are affiliated with. This organization is the data controller for information about its members/employees and for administration and communication with them. • Collaboration partners: trading partners/advertisers will receive personal data to the extent necessary to facilitate the use of discounts and calculation of commission. • Authorities: When we are required to disclose information in accordance with law We enter into data processing agreements with all third parties that process personal data on our behalf and ensure that they follow the same strict privacy standards as us.
7. Transfer to Third Countries
Your personal data is primarily stored in the EU/EEA through AWS's data centers in Stockholm, Sweden. We do not transfer personal data to countries outside the EU/EEA unless we have ensured that the transfer takes place in accordance with applicable privacy legislation and with sufficient guarantees.
8. How long do we store information
We store your personal data only as long as necessary to fulfill the purposes described in this privacy policy. Upon request from you, we will immediately delete all information about you, as long as the information is not subject to any legal obligations that require us to retain it. Where our legal basis for processing is consent, we will delete the information if you withdraw your consent. Consent can be managed through settings under your profile.
9. Your rights
In accordance with privacy legislation, you have the following rights: • Access: Right to know what personal data we have about you • Rectification: Right to have incorrect personal data corrected • Erasure: Right to have personal data deleted under certain circumstances • Restriction: Right to demand that processing be restricted • Data portability: Right to receive your personal data in a structured, common format • Objection: Right to object to certain types of processing, including direct marketing • Withdraw consent: Right to withdraw consent at any time for processing based on consent To exercise your rights, contact us at personvern@purposeit.no.
10. Automated decisions and profiling
The platform may use automated processing, including profiling, to provide you with personalized recommendations and offers based on your user behavior and preferences. This does not affect your legal rights or have other significant consequences for you.
11. Cookies
We use cookies and similar technologies on our platform. For more information about this, see our separate [Cookie Policy].
12. Security
We have implemented technical and organizational security measures to protect your personal data: • Encryption of sensitive data • Access control and authentication • Regular security testing • Staff training • Access management based on business need We collaborate with Fireclover for operation and security of our cloud services to ensure high standards of information security.
13. Changes to the privacy policy
We may update this privacy policy from time to time. All changes will be published on this page with an updated date. For significant changes, we will inform you directly via email or through the platform.
14. Complaints
If you believe that our processing of personal data is in violation of privacy legislation, you have the right to complain to the Data Protection Authority (www.datatilsynet.no). However, we encourage you to contact us directly first, so that we can try to resolve the matter.
15. Contact information
If you have questions about this privacy policy or the processing of your personal data, please contact: • Email: personvern@purposeit.no • Mail: Munkedamsveien 35, 0250 Oslo © 2025 Purpose IT AS. All rights reserved.
Org. Nº934916042kontakt@purposeit.no