Privacy policy

This Privacy Statement explains how your personal data is collected, used, and protected when you participate in a B2B Evaluation kit trial or Pilot of the Onics Platform. “The Provider” means the company that invited you to participate - either your Pilot Partner or Onics AS for B2B evaluation kits. Please read this alongside your Pilot/Evaluation Kit Agreement.

The Provider is the Data Controller for personal data collected in connection with the Pilot Program. We determine the purposes and means of processing and bear primary responsibility for lawful, fair, and transparent processing.

Onics Norway AS (“Onics”), a Norwegian company, is the Data Processor.

For pilot programs the Pilot Partner is the Data Controller and Onics operates the Platform on its behalf under a Data Processing Agreement (“DPA”) that includes Standard Contractual Clauses (where applicable), sub-processing restrictions, audit rights, and breach notification procedures.

For B2B evaluation kits, Onics acts as both the Data Controller and the Data Processor.

‍

This Statement applies to all End Users who have received an Evaluation kit or have been enrolled in a Pilot Program. It covers data collected directly from you (e.g. registration) and automatically by the Platform’s sensors and monitoring systems. It is designed to comply with the GDPR, UK GDPR, the Norwegian Personal Data Act, and other applicable European data protection legislation.

We collect the following data: Account and Identity, Data from sensors and other devices, Usage and Interaction, technical and diagnostics data, communication related to the service and Alert and Event history.

‍

We process your personal data for the following purposes: (a) performing the Pilot Agreement -creating your account, enabling Platform features, delivering alerts, providing technical support, and generating evaluation reports; (b) complying with legal obligations -data retention requirements, lawful authority requests, and regulatory record-keeping; (c) legitimate interests -assessing Platform performance, identifying bugs, and generating anonymised evaluation insights; (d) consent -where we request it separately for optional activities such as experience surveys or non-essential analytics. You may withdraw consent at any time without affecting the lawfulness of prior processing.

‍

‍

Personal data is only shared as strictly necessary for the purpose of conducting the Evaluation/Pilot: our internal pilot evaluation teams (under confidentiality obligations); Onics’s approved sub-processors (cloud infrastructure and monitoring tools, subject to our prior written authorisation).

We do not sell your personal data or share it with advertisers or other third parties except as part of the Pilot.

‍

Onics Norway AS is established in Norway (EEA). Onics does not use cloud service providers that process data outside the EU/EEA.

‍

We retain personal data only as long as necessary for the purposes above, or as required by law. Indicative periods: Retention Period

Account & identity data: Deleted/anonymised within 90 days after Pilot ends

Sensor & alert event data: Up to 12 months, then anonymised or deleted

Usage & diagnostic logs: Up to 6 months, then deleted

Communications & support records: Up to 24 months

Anonymised/aggregated data: Indefinite (no longer personal data)

Upon termination of the Pilot Program, Onics must securely delete or return all personal data per the DPA.

‍

‍

We implement appropriate technical and organisational measures to protect your personal data. In the event of a personal data breach, We must notify you within 72 hours. Where a breach poses a high risk to your rights, we will notify you directly in accordance with Article 34 GDPR.

‍

Under applicable data protection law, you have the right to: access your personal data (Art. 15); rectify inaccurate data (Art. 16); request erasure (Art. 17); restrict processing (Art. 18); receive your data in a portable format (Art. 20); object to processing based on legitimate interests (Art. 21); and withdraw consent at any time (Art. 7(3)). Contact us at the details in Section 11 to exercise any right. We will respond within 30 days (extendable by 60 days for complex requests).

You also have the right to lodge a complaint with your national supervisory authority see Datatilsynet (datatilsynet.no), your EEA national DPA (edpb.europa.eu), or the ICO (ico.org.uk).

‍

We may update this Statement to reflect changes in the Pilot Programme, processing activities, or applicable law. Material changes will be notified at least 14 days in advance.

See your Pilot / Evaluation Kit Agreement

Onics AS -Data Processor (for technical Platform issues)

info@onics.com | www.onics.com

‍