Offenlegungs-richtlinien

• Verstoßen Sie nicht gegen geltende Gesetze oder Vorschriften
• Greifen Sie nicht auf unnötige, übermäßige oder erhebliche Datenmengen zu
• Ändern Sie keine Daten in den Systemen oder Diensten der Organisation
• Verwenden Sie keine invasiven oder zerstörerischen Scan-Tools mit hoher Intensität, um Schwachstellen zu finden
• Versuchen oder melden Sie niemals jegliche Form von Dienstverweigerung, z. B. Überwältigung eines Dienstes mit einer hohen Anzahl von Anfragen
• Unterbrechen Sie nicht die Dienste oder Systeme der Organisation

We process your personal data for the following purposes: (a) performing the Pilot Agreement -creating your account, enabling Platform features, delivering alerts, providing technical support, and generating evaluation reports; (b) complying with legal obligations -data retention requirements, lawful authority requests, and regulatory record-keeping; (c) legitimate interests -assessing Platform performance, identifying bugs, and generating anonymised evaluation insights; (d) consent -where we request it separately for optional activities such as experience surveys or non-essential analytics. You may withdraw consent at any time without affecting the lawfulness of prior processing.

‍

‍

Personal data is only shared as strictly necessary for the purpose of conducting the Evaluation/Pilot: our internal pilot evaluation teams (under confidentiality obligations); Onics’s approved sub-processors (cloud infrastructure and monitoring tools, subject to our prior written authorisation).

We do not sell your personal data or share it with advertisers or other third parties except as part of the Pilot.

‍

Onics Norway AS is established in Norway (EEA). Onics does not use cloud service providers that process data outside the EU/EEA.

‍

We retain personal data only as long as necessary for the purposes above, or as required by law. Indicative periods: Retention Period

Account & identity data: Deleted/anonymised within 90 days after Pilot ends

Sensor & alert event data: Up to 12 months, then anonymised or deleted

Usage & diagnostic logs: Up to 6 months, then deleted

Communications & support records: Up to 24 months

Anonymised/aggregated data: Indefinite (no longer personal data)

Upon termination of the Pilot Program, Onics must securely delete or return all personal data per the DPA.

‍

‍

We implement appropriate technical and organisational measures to protect your personal data. In the event of a personal data breach, We must notify you within 72 hours. Where a breach poses a high risk to your rights, we will notify you directly in accordance with Article 34 GDPR.

‍

Under applicable data protection law, you have the right to: access your personal data (Art. 15); rectify inaccurate data (Art. 16); request erasure (Art. 17); restrict processing (Art. 18); receive your data in a portable format (Art. 20); object to processing based on legitimate interests (Art. 21); and withdraw consent at any time (Art. 7(3)). Contact us at the details in Section 11 to exercise any right. We will respond within 30 days (extendable by 60 days for complex requests).

You also have the right to lodge a complaint with your national supervisory authority see Datatilsynet (datatilsynet.no), your EEA national DPA (edpb.europa.eu), or the ICO (ico.org.uk).

‍

We may update this Statement to reflect changes in the Pilot Programme, processing activities, or applicable law. Material changes will be notified at least 14 days in advance.

See your Pilot / Evaluation Kit Agreement

Onics AS -Data Processor (for technical Platform issues)

info@onics.com | www.onics.com

‍