Privacy policy

Introduction
This Privacy Statement explains how your personal data is collected, used, and protected when you participate in a B2B Evaluation kit trial and use of the Onics Demo app. Please read this alongside your Evaluation Kit Agreement.
1. Data Controller and Processor
Onics Norway AS (“Onics”), a Norwegian company, is both the Data Controller and the Data Processor for personal data collected in connection with the Evaluation Kit. We determine the purposes and means of processing and bear primary responsibility for lawful, fair, and transparent processing.
2. Scope
This Statement applies to all B2B customers who have received an Evaluation kit. It covers data collected directly from you (e.g. registration) and automatically by the Platform’s sensors and monitoring systems. It is designed to comply with the GDPR, UK GDPR, the Norwegian Personal Data Act, and other applicable European data protection legislation.
3. Personal Data We Collect
We collect the following data: Account and Identity, Data from sensors and other devices, Usage and Interaction, technical and diagnostics data, communication related to the service and Alert and Event history.
4. Purposes of Processing
We process your personal data for the following purposes: (a) performing the Evaluation kit Agreement -creating your account, enabling Platform features, delivering alerts, providing technical support, and generating evaluation reports; (b) complying with legal obligations -data retention requirements, lawful authority requests, and regulatory record-keeping; (c) legitimate interests -assessing Platform performance, identifying bugs, and generating anonymised evaluation insights; (d) consent -where we request it separately for optional activities such as experience surveys or non-essential analytics. You may withdraw consent at any time without affecting the lawfulness of prior processing.
5. Recipients of Personal Data
Personal data is only shared as strictly necessary for the purpose of conducting the Evaluation: our internal evaluation teams (under confidentiality obligations); Onics’s approved sub-processors (cloud infrastructure and monitoring tools, subject to our prior written authorisation).
We do not sell your personal data or share it with advertisers or other third parties except as an agreed part of the Evaluation.
6. International Data Transfers
Onics Norway AS is established in Norway (EEA). Onics does not use cloud service providers that process data outside the EU/EEA.
7. Data Retention
We retain personal data only as long as necessary for the purposes above, or as required by law. Indicative periods: Retention Period
Account & identity data: Deleted/anonymised within 90 days after the Evaluation period ends
Sensor & alert event data: Up to 12 months, then anonymised or deleted
Usage & diagnostic logs: Up to 6 months, then deleted
Communications & support records: Up to 24 months
Anonymised/aggregated data: Indefinite (no longer personal data)
Upon termination of the Evaluation test, Onics must securely delete or return all personal data per the DPA.
8. Security and Breach Notification
We implement appropriate technical and organisational measures to protect your personal data. In the event of a personal data breach, We must notify you within 72 hours. Where a breach poses a high risk to your rights, we will notify you directly in accordance with Article 34 GDPR.
9. Your rights
Under applicable data protection law, you have the right to: access your personal data (Art. 15); rectify inaccurate data (Art. 16); request erasure (Art. 17); restrict processing (Art. 18); receive your data in a portable format (Art. 20); object to processing based on legitimate interests (Art. 21); and withdraw consent at any time (Art. 7(3)). Contact us at the details in Section 11 to exercise any right. We will respond within 30 days (extendable by 60 days for complex requests).
You also have the right to lodge a complaint with your national supervisory authority see Datatilsynet (datatilsynet.no), your EEA national DPA (edpb.europa.eu), or the ICO (ico.org.uk).
10. Updates
We may update this Statement to reflect changes in the Evaluation Kit, processing activities, or applicable law. Material changes will be notified at least 14 days in advance.
11. Contact Details
Evaluation Kit Agreement
Onics AS -Data Processor (for technical Platform issues)
info@onics.com | www.onics.com