SMOC.AI Privacy Statement

This is the privacy statement (policy) of SMOC.AI AS, business registration number 923 403 418. 

Our aim is to provide you with a privacy friendly solution where you can have more control over your digital marketing exposure and receive rewards for interacting with our partners (providers). This is possible due to the structure of our service, which is based on only first party data, server site functionality, and not third party functionality or added networks.  This privacy-friendly set up is managed from Norway and delivered from within the European Economic Area (EEA), where the EU General Data Protection Regulation (GDPR) applies.

If you have any questions about the privacy policy or any other questions regarding our privacy practices, please contact us at legal@smoc.ai.

1. Why we process your personal data

We process your personal data for the purposes of 


-  providing you with rewards for your interactions

-  to understand what products and services you prefer

-  marketing of goods and services

-  to provide support and improve our service

-  to process your application for employment in SMOC.AI

-  for our business clients - performing sales and marketing activities such as, sending direct emails and newsletters and other b2b marketing activities

2. How we collect your personal data

We collect data during your dialogue with our platform. Choices you make, such as preferences, interests, as well as contact details and other details will be shared with us to ensure that we provide you with relevant content. We ask for your consent to access your personal data from third parties, and to share your personal data. You can always change your consents and stored details on your profile.

When you use our platform in relation to another provider (for example, your electricity provider), the new provider can also share your personal data with us. This is to identify you so that you can use the platform, make choices and receive your earned rewards from these providers.

You may choose to share data from other providers with us. If you do, we will process your personal data to offer you even better offers and rewards.

3. What personal data we collect and on what legal basis

When you visit our website, we collect the following information from your device:


-  IP address,

-  date and time of the access, 

-  name and URL of the accessed file, 

-  browser type and version, and

-  further information sent by the browser (such as your computer’s operating system, the name of your access provider, geographical origin, etc.).

We only process this data to ensure trouble-free connection to the website, comfortable use of our website, for evaluating system security and stability and for administrative purposes, unless otherwise stated in section 4 (cookies).

We process your personal data based on 

  • - your consent 

- because processing is necessary to complete requests from you or fulfil our agreement with you, and/or 

- legitimate interests 

If you have specifically consented, we process personal data about your

  • - location
  • - gender
  • - age
  • - how often you want to and do interact
  • - data you shared with us from other providers
  • - contacts who have accepted your invitations 

The above processing is based on your consent (GDPR art. 6 (1) a).

Regardless of whether you have given us your consent we process personal data about

  • - your contact information
  • - rewards, to make it possible to give you rewards
  • - your interactions and preferences, such as your interests and answers to surveys 
  • - which provider shared your data 
  • - information about your device, such as screen size, performance and operating system
  • - your IP-address and session ID
  • - language
  • - reward history
  • - data on complaints and claims
  • - users you have sent a referral to, after they have logged in, to ensure that you receive your earned bonus if your referred friend completed the intended action (for example redeemed a coupon)

Processing of information about your interactions and preferences (profiling) is a core way we create value for you and provide the service. Being able to understand your preferences is necessary to improve our services and tailor our message to you.

The following processing is done at your request and/or is necessary in order to fulfil our agreement with you (GDPR art. 6 (1) b):

  • - provide you with an account and with rewards  
  • - manage reward credit, collection and redemptions towards third parties providing the rewards
  • - managing the necessary profile information to handle the above  

The following processing is done based on legal obligation (GDPR art. 6 (1) c):

  • - financial transactions required for our bookkeeping
  • - recording of safety logs  
  • - related regulatory requirements

As our processing constitutes profiling, you are entitled to protest against the processing. If you do so, SMOC.AI must stop the profiling, and you will receive fewer and/or less suitable offers.

Our processing is also of legitimate interest to us. Our interests are not outweighed by your privacy interests, as you provide us with information and because this information is likely to be only of moderate sensitivity, such as what brands or brand categories you prefer.

4. Marketing and use of cookies

4.1 What do we use cookies for and why?

When used in conjunction with our partners, we use «cookies» and similar technologies on our digital channels only in order to sign in and hold a customer session. Such use is required to communicate over the network and provide the service, upon your explicit request.

Hereunder, information about your browsing device, software and your visit may automatically be collected by us. This information can include your IP address, browser type, domain name, internet provider, operating system, timestamp and the referring web page.

For business clients visiting our homepage or associated pages we use cookies to track their engagement with our pages and interest in our products in order to give the best possible sales and marketing experience. Business customers can opt out of this processing.

4.2 Pixels

Pixels are not stored on your computer, but invisibly incorporated into our web pages. They enable us to measure the performance of our services.

If you visit our social media pages or profiles, they will use cookies and process your personal information. More information about this processing and how they’re using cookies can be found in the respective social media’s pages about privacy and use of cookies.

For information about how to disable cookies on commonly used browsers, please refer to http://www.allaboutcookies.org/manage-cookies/index.html.

4.3 Trackers and cookies

For end users in interacting with our technology for one of our providing clients: 

Name
Purpose
Optional?
Storage time
Recipients of data
  • * Our Google Analytics data is anonymized. No personal email address or username need be collected. IP addresses are generalised to prevent indirect identification of persons. No personal data is therefore stored.
  • For company users entering our website, the following trackers are used: 

4.4 Hubspot statement

Name
Purpose
Optional?
Storage time
Recipients of data
CRM tracking and analytics
Yes
Hubspot
Lonked in ad tracking
Yes
Linkedin
  • Data collected through cookies are only handled within EEA in infrastructure in in Ireland. 

5. How we share your data

We do not share your personal data unless strictly necessary. It is strictly necessary to share your contact data with the operator providing the reward in order to credit you with the rewards. This is the only way the operators can know you are entitled to the reward. We also anonymise your personal data and share the anonymous data with brand-owners, to give them insights about their markets.

6. Our storage of your personal data

The purpose of our processing determines for how long we store your personal data. We store your personal data as stipulated below: 

Data and purpose
Storage time
Data on visit at web pages, such as operating system, browser type and IP address. Purpose: To conduct the session and security reasons.
Duration of visit, and for [30] days
Data on financial transactions, such as storage of reward credits, payment of rewards. Purpose: To enable keeping of books and financial audits.
Five years after end of relevant financial year.
Data on complaints and claims, such as if you disagree with our payment of rewards. Purpose: To enable us to shed light on the case and defend us against claims.
Six months after the expiry of the limitation period for the relevant claim.
Data on your preferences and friends referrals, such as what drink and food you like, if you like to travel, gender (optional), where you travel (geographically). Purpose: To enable us to provide you with the best and most relevant offers and rewards.
For the period you use our service and for 30 days. We deem you to have stopped using our service if you delete your account, or has not used it in six months.
Data from our chat, message and setting history, such as when you consent to our request, withdraw a consent, tell us what you like. Purpose: To be able to document our agreements, your actions (for example consent) and understand your preferences better.
For the period you use our service and for six months. We deem you to have stopped using our service if you delete your account, or has not used it in six months.

We protect the data with encryption and other security measures.


7. Joint Controllership

Some personal data is processed jointly with our partners. As there will then be two data controllers, we have divided the responsibility as follows:

SMOC’s is acting processor for the following processing:


  • - Gathering and processing insights through interaction, including data from visits on web pages
  • - Assessing if end user is entitled to reward
  • - Securing that that data is handled in according to Operator settings. 
  • - Data storage, management, governance, security and privacy of the customers data and derived insights and models.   
  • - Reporting on the performance on the platform. 
  • - Processing of data on financial transactions, such as storage of reward credits, payment of rewards.


Our partner is acting processor for the following processing:  

  • -Initial transfer of Personal Data from Operator to SMOC.AI
  • -Setting data sharing settings with other Operators acting on the  SMOC.AI platform. 
  • -Processing of complaints and claims.

See below in sec. 8 about the rights you may exercise towards anyone of us. 

8. Your rights

According to the GDPR you can request

  • - information about our processing of your personal data
  • - rectification of your personal data
  • - right to erasure of your personal data
  • - restriction of processing
  • - your data in a portable format

You may also object to the processing. To the extent our processing is based on your consent, you may withdraw your consent.

9. Contact information

SMOC.AI AS
Email: legal@SMOC.AI
Fritzners gate 19
0264 OSLO