Privacy Policy

Wenn Property AS operates https://wennproperty.no, which provides the SERVICE.

This page is used to inform website visitors regarding our policies with the collection, use, and disclosure of Personal Information if anyone decided to use our Service, the Wenn Property AS website.

If you choose to use our Service, then you agree to the collection and use of information in relation to this policy. The Personal Information that we collect is used for providing and improving the Service. We will not use or share your information with anyone except as described in this Privacy Policy.

The terms used in this Privacy Policy have the same meanings as in our Terms and Conditions, which is accessible at https://wennproperty.no, unless otherwise defined in this Privacy Policy.

Information Collection and Use

For a better experience while using our Service, we may require you to provide us with certain personally identifiable information, including but not limited to your name, phone number, and postal address. The information that we collect will be used to contact or identify you.

If you subscribe to our Service, we also process billing and payment information, such as invoicing address, organisation number, chosen subscription plan, payment interval and payment history. If you pay by card, your card details are provided directly to our payment provider Stripe and are never stored in or accessible to Wenn Property's systems (see "Service Providers" and "Data storage and international transfers" below).

Log Data

We want to inform you that whenever you visit our Service, we collect information that your browser sends to us that is called Log Data. This Log Data may include information such as your computer's Internet Protocol ("IP") address, browser version, pages of our Service that you visit, the time and date of your visit, the time spent on those pages, and other statistics.

Cookies

Cookies are files with small amounts of data that are commonly used as an anonymous unique identifier. These are sent to your browser from the website that you visit and are stored on your computer's hard drive.

We use three categories of cookies and similar technologies:

• Necessary — required for the site to function. Always set and do not require consent. When you pay by card, our payment provider Stripe sets strictly necessary cookies to complete the payment and prevent fraud.
• Analytics — we use Plausible Analytics to understand how the site is used. Plausible is a privacy-focused service that does not use cookies and does not collect personally identifiable information.
• Marketing — with your consent, we use the Meta Pixel (provided by Meta Platforms Ireland Ltd) to measure the effectiveness of ads on Facebook and Instagram and for retargeting. The Meta Pixel sets cookies (including _fbp and _fbc) and shares data with Meta Platforms Inc. in the US. The transfer takes place under the EU-US Data Privacy Framework. You may withdraw consent at any time by clearing your browser's cookies for this site or choosing "necessary only" the next time the consent banner is shown.

You have the option to either accept or refuse these cookies. If you choose to refuse non-essential cookies, you may not be able to use some portions of our Service.

Service Providers

We may employ third-party companies and individuals due to the following reasons: To facilitate our Service; To provide the Service on our behalf; To perform Service-related services; or To assist us in analyzing how our Service is used.

We want to inform our Service users that these third parties have access to your Personal Information. The reason is to perform the tasks assigned to them on our behalf. However, they are obligated not to disclose or use the information for any other purpose.

Our main service providers are:

• Microsoft Azure — cloud hosting and storage of the Service and customer data. Processing takes place primarily in Norway, secondarily in Sweden, and always within the EU/EEA.
• Stripe (Stripe Payments Europe, Ltd., Ireland) — payment processing and subscription billing, including card payments. See "Data storage and international transfers" below regarding transfers to third countries.
• Tripletex AS (Norway) — accounting and invoicing, including EHF invoicing. Processing takes place within the EU/EEA.
• Attio Ltd. (United Kingdom) — customer relationship management (CRM). Data is hosted with Google Cloud in the EU. The United Kingdom is covered by an EU adequacy decision.
• Plausible Analytics — privacy-friendly, cookie-free website analytics.

Data storage and international transfers

Personal data is stored and processed primarily in Norway, secondarily in Sweden, and always within the EU/EEA, with approved providers.

Exception for card payments: Card payments are processed by Stripe. Our contracting entity is Stripe Payments Europe, Ltd. in Ireland, but Stripe operates global infrastructure, and data relating to the payment transaction may therefore be transferred to Stripe, LLC and Stripe's sub-processors in the United States and other third countries. Such transfers are subject to valid transfer mechanisms under Chapter V of the GDPR — the EU-U.S. Data Privacy Framework, under which Stripe is certified, and the EU Standard Contractual Clauses (SCCs). Card details (card number, expiry date, CVC) are provided directly to Stripe and are never stored in our systems. Stripe is certified under the payment card industry security standard PCI DSS (Level 1).

Security

We value your trust in providing us your Personal Information, thus we are striving to use commercially acceptable means of protecting it. But remember that no method of transmission over the internet, or method of electronic storage is 100 % secure and reliable, and we cannot guarantee its absolute security.

Links to Other Sites

Our Service may contain links to other sites. If you click on a third-party link, you will be directed to that site. Note that these external sites are not operated by us. Therefore, we advise you to review the Privacy Policy of these websites. We have no control over, and assume no responsibility for the content, privacy policies, or practices of any third-party sites or services.

Children's Privacy

Our Services do not address anyone under the age of 15. We do not knowingly collect personal identifiable information from children under 15. In the case we discover that a child under 15 has provided us with personal information, we immediately delete this from our servers.

Changes to This Privacy Policy

We may update our Privacy Policy from time to time. Thus, we advise you to review this page periodically for any changes. We will notify you of any changes by posting the new Privacy Policy on this page. These changes are effective immediately, after they are posted on this page.

Overview

Wenn Property AS provides a SaaS solution for property inspection and documentation, used to document the condition of residential properties (including damages and deviations) and to document renovation, conversion and extension (ROT) projects. Our customers are businesses such as contractors, craftsmen and property managers. We process personal data in accordance with the General Data Protection Regulation (GDPR), primarily in our role as a data processor on behalf of our business customers. This privacy policy outlines how we collect, use, and protect personal data. By using our services, you agree to the data practices described in this policy.

Personal data

We collect various types of personal data to provide and improve our services. This includes, but is not limited to:

• Contact information: Such as name, email address, and phone number.
• Billing and payment information: Such as invoicing address, organisation number, subscription plan, payment interval and payment history. Card details are processed solely by Stripe and never stored by Wenn Property.
• Property-related information: Including addresses and documentation of damages for insurance purposes.
• Usage data: Such as your IP address, browser type, and log data when interacting with our website.
• Anonymized data: For analytics and machine learning purposes. This data is fully anonymized and cannot be linked back to individuals.

Purpose

The personal data we collect is used for the following purposes:

• To provide and improve our services.
• To manage and assess reports on behalf of our clients.
• To administer customer relationships, subscriptions, payment and invoicing.
• To maintain communication with our clients and service users.
• To analyze website usage and improve the functionality of our services.
• To ensure compliance with legal obligations, such as data retention rules and bookkeeping requirements.

Legal basis for processing

The legal basis for processing your personal data depends on the specific context in which we collect it. The following legal grounds apply:

• Contractual necessity: We process personal data to fulfill our contractual obligations with clients, including to carry out payment and invoicing.
• Legitimate interests: In some cases, we process data to pursue our legitimate business interests, such as improving our services.
• Consent: We may process personal data based on your consent, especially for marketing and non-essential services.
• Legal obligation: We process data when required by law, such as for tax or regulatory compliance, including retention of accounting records under the Norwegian Bookkeeping Act.

Retention and deletion

We retain personal data for as long as necessary to fulfill the purposes outlined in this privacy policy, unless a longer retention period is required by law. Specifically:

• Personal data related to reports will be kept until the case is resolved and the legal basis for retention ceases.
• Invoicing and payment records are retained for as long as required by the Norwegian Bookkeeping Act.
• Anonymized data may be retained for analytical purposes.

Once the retention period expires, personal data will be securely deleted or anonymized.

Your rights

When we process personal data relating to you, you have the following rights:

• Access. You have the right to request Wenn Property to confirm whether Wenn Property is processing your personal data or not. You also have the right to ask for a copy of your personal data that Wenn Property processes.
• Correcting personal data (rectification). You may ask us to rectify any errors in your personal data.
• Erasure (the right to be forgotten). You may ask us to erase your personal data, which request we will respect and comply with.
• Restriction. You may ask us to restrict the processing of your personal data.
• Object. You may object to the processing of your personal data.
• Data portability. You may ask us to provide you or others with your personal data in a structured, commonly used and machine-readable format.

Please note that the above rights may be subject to exceptions and limitations. We cannot, for example, comply with an erasure request if we have a legal obligation to retain such data.

You may send us an e-mail if you wish to exercise any of the above rights. Please note that we may ask you to provide proof of identity or to use a different channel of communication in order for us to verify that you are who you purport to be.

Questions and complaints

If you have additional questions on how we process personal data, or are dissatisfied with our processing, you are welcome to contact us. Please find our contact information in the Contact Us section below.

You may also lodge a complaint with the Norwegian Data Protection Authority (Datatilsynet), which is responsible for supervising compliance with data protection regulations in Norway.

Further details on your rights are available in the Data Protection Act and the General Data Protection Regulation (GDPR).

Contact us

The data controller for the processing of your personal data is Wenn Property AS. If you have any questions or suggestions about our Privacy Policy, do not hesitate to contact us at hello@wennproperty.no.

Wenn Property AS
Address: Prof. Olav Hanssens vei 7A, 4021 Stavanger
Email: hello@wennproperty.no