Terms of use
This is a translation. In case of any discrepancy, the Norwegian version applies.
These terms apply between Einvik Studio AS (“Vekterlogg”, “we”) and the business that uses the service (“the Customer”, “you”). By creating an organisation or signing in, you accept the terms on behalf of the business.
1. The service
Vekterlogg is an app and a web-based service for documenting and coordinating security work – door security at venues, static guarding and mobile patrol. Among other things, it has guest counting, an incident log, patrols and sites, reports, chat and radio, SOS and call-out, schedules and hours, HSE and registration of bans. The service is provided “as is” and is continuously developed. We may add, change or remove features.
2. Account, roles and access
- The Customer is responsible for its own user accounts, roles and access control in its organisation.
- Sign-in details are personal and must not be shared. The Customer notifies us if misuse is suspected.
- The Customer is responsible for actions carried out by its users.
3. The Customer's responsibility for personal data
The Customer is the data controller for the personal data entered in its log (incidents, reports, bans etc.), and decides the purpose and use. Vekterlogg is the data processor and processes the data only on the Customer's behalf, under the data processing agreement. The Customer shall:
- have a valid legal basis for the data that is registered,
- inform its employees and the data subjects as required by law,
- only register data that is necessary and relevant, and
- respond to requests for access, rectification and erasure from its own data subjects.
If the Customer processes personal data on behalf of or together with a third party – for example when a security company uses the service at a venue, or a venue uses a hired security company – the Customer is responsible for ensuring that the necessary agreement is in place between the parties (a data processing agreement or a joint controller agreement). Vekterlogg is only the data processor for its direct customer (the account holder) and is not a party to such agreements between the Customer and third parties.
4. Specifically about the ban list
Registering people who have been refused entry is high-risk processing in terms of privacy. The Customer bears full responsibility for ensuring that such registration is lawful, and undertakes to comply with the points below.
- Legal basis: The Customer must have a valid basis (typically legitimate interest following a documented balancing of interests) before a person is registered.
- Relevance and data minimisation: Only necessary information is registered. Reasons must be short and factual. Information about criminal offences must not be registered beyond what the law permits.
- Retention period: Bans must have an expiry date and must not be kept longer than necessary. Registrations are deleted automatically when they expire.
- Information and access: The Customer is responsible for handling the rights of the data subjects.
- Sharing between venues: The feature for sharing bans with another venue may only be used where both businesses have an independent legal basis and have entered into the necessary agreement. The Customer is itself responsible for the lawfulness of such sharing.
We provide tools (expiry date, automatic deletion, access control, deletion of individuals), but the assessment of lawfulness lies with the Customer as data controller.
5. Acceptable use
The Customer must not use the service for unlawful purposes, register incorrect or harassing information, attempt to bypass security or access control, or use the service in a way that infringes the rights of others. We may close access in the event of material or repeated misuse.
6. Prices and payment
Use may be subject to a subscription. Applicable prices and payment terms are agreed separately. During any trial period, the service may be free or limited. We may change prices with reasonable notice.
7. Uptime and support
We aim for high availability, but do not guarantee uninterrupted operation. Maintenance, faults or circumstances at subcontractors may cause interruptions. Support is provided on a best-effort basis.
8. Limitation of liability
The service is an aid for documentation and coordination, and does not replace the Customer's own routines, professional judgement or statutory duties. SOS, the fall alarm and the other alerts in the app are an aid and do not replace the emergency numbers (110, 112 and 113). They depend on the phone, the network and the settings, and we cannot guarantee that an alert gets through. To the extent permitted by law, our liability is limited to direct loss, and we are not liable for indirect loss, loss of profit or loss resulting from the Customer's own use of information in the service.
9. Intellectual property rights
We own all rights to the service, the software and the design. The Customer is granted a non-exclusive, non-transferable right of use for as long as the agreement runs. The Customer's own data remains the Customer's.
10. Termination and deletion of data
The agreement can be terminated by either party. On termination, access is closed, and the Customer's data is deleted or returned in accordance with the data processing agreement. The Customer is itself responsible for exporting the necessary documentation before deletion.
11. Changes to the terms
We may update the terms. In the event of material changes, we ask for renewed acceptance in the app or notify you by email. Continued use after changes have been notified counts as acceptance.
12. Governing law and venue
The agreement is governed by Norwegian law. Disputes are to be resolved amicably; if necessary, the legal venue is the Customer's place of business, unless otherwise required by mandatory law.
13. Contact
Questions about the terms should be sent to kontakt@vekterlogg.no. See also the privacy policy and the data processing agreement.