The Harmony Method (HM) is designed to help people who experience mental challenges. As part of our service, the user registers in one or more mental training programs and completes questionnaires and tasks.
BestSolution AS wants to give you all the information you need so you can be sure that we meet the criteria for privacy when it comes to handling the personal information we collect about you. Please read this privacy statement carefully to understand our practices on how we collect, use and share your personal information.
Thank you for using the website and our programs, tests and other services (collectively, our “Products”) provided by BestSolution AS, located in co Skogstad Hotell, 3560 Hemsedal, Norway.
This privacy statement explains how the personal information collected about you when you use the Service is processed by BestSolution AS (“BestSolution”, “we”, “us” or “our”). BestSolution is responsible for processing your personal data provided to our website and Services. These privacy terms may be supplemented with additional privacy terms or notices specified in certain areas of the Service.
2.0 The information we collect
The service collects information about you in two ways: directly from your input and automatically through the technology we use.
2.1 Information you provide
Types of personal information that the Service collects directly from you include:
- E-mail address
- Telephone number, if you provide it
- Age group
- Feedback via the Harmoni App
- Results from questionnaire
- Comments, feedback, messages and other content you send to the Service
In order to access program content and use the Harmoni App, we ask you to register a user account by filling in and submitting a registration form.
2.2 Information collected via cookies
If you wish, it is possible to disable cookies by changing the settings in your browser. Remember, however, that if you block certain cookies, you may risk not getting; registered, logged in to the Service, access parts of the Service or fully use the Service.
This list of cookies used on our website provides a brief explanation of why they are used:
|Name of cookie||Description|
|These cookies are created by Google Analytics and are used to collect information about how visitors use our websites, our applications and the content we produce. They do not store personal information, and none of your personal information is shared with us or with Google as a result of our use of these cookies.|
We use the information we collect to help us understand how our websites and applications are used so that we can improve them. We also use it to compare the popularity of different content on our websites and applications, and different versions of these.
|__cfduid||Used by the content network, Cloudflare, to identify reliable web traffic.|
|_BestSolution_session||Stores the user’s position across pages.|
|Cookies for Stripe payment services.|
|_mp||Cookies from Mixpanel (analysis tool) to analyze traffic, and in particular how users reached the platform.|
|locale||Preserves the user language preference across page requests.|
3.0 Use of your information
We may use your information to:
- Provide you with the Service, such as accessing or delivering our products or services, processing or completing an order, or administering research or treatment programs
- Respond to your requests, inquiries, comments or concerns
- Provide technical, product and other support, and ensure that the Service works, safely and securely
- Offer you customized content and individual follow-up of the Service to make it more relevant to your interests and needs
- Improve, evaluate and update the Service, our products and services and develop new products and additional services
- Identify and analyze user trends, for research, auditing and reporting
- Inform you about changes or updates to the Service and our products and additional services
4.0 Your rights
You are free to decide whether you want to share your personal information with us. You can withdraw your consent at any time. If you withdraw your consent to the use of personal data when you use the Service, you will no longer have access to the content required for login.
5.0 Data Security
BestSolution, as data controller, is responsible for the security of your personal data with regard to confidentiality, integrity and availability, in accordance with §13 of the Norwegian Personal Data Low and EU GDPR regulation.
The information we collect and process is stored in a secure manner in accordance with Norway’s Personal Data Low §13. The service has a ‘Privacy by Design’ approach to system development that takes privacy into account throughout the entire development process.
We prevent unauthorized access, modification and illegal destruction of information we hold. We use common standard data security to protect against unauthorized access to data about you that we store, including personal information.
5.1 Disclosure of your information to a third-party service
The processed information is stored (firebase) on servers operated by Google. A separate agreement between Google and BestSolution governs which information they have access to and how it is to be processed. BestSolution’s employees only come into contact with your personal information when it is necessary for the safe operation of the service, and in cases where you want our employees to help you use the Service.
BestSolution, as data controller, and Google, as data processor, are both subject to confidentiality.
You retain ownership of the personal data (“Your Content”) that you upload, and we do not share your content with anyone other than our cooperating data processor and any third parties associated with one of our research projects. Your content remains secure at all times, and is encrypted or de-identified before it reaches our data processor and any third parties involved.
For research purposes, we share test results with research partners. The selected information comes from several questionnaires that leave no trace of the respondent’s identity (for example ID number or IP address). For information about our research projects and partners, go to About us.
If you have accessed the service’s content database or learning service (“Subscription Service”) through an institution-sponsored subscription, a company, or other business entity, certain usage data may be collected through the subscription service, for example, the course you signed up for may be shared with your institution in connection with usage analysis, subscription management, program management and test results, and in connection with cost allocation and departmental budget.
5.2 Access to and accuracy of your information
You have the right to access your personal information. You also have the right to correct or update any incorrect personal data.
The service allows registered users to access their own account information and make corrections or updates when logging in at any time. When you are logged in, you have access to all personal information about you contained in the Service.
5.3 Deactivation of account and deletion of personal information.
If you want to withdraw your consent and delete your personal information, send an e-mail to post@BestSolution.no We will immediately deactivate your profile and delete all information about you from our servers, including the backup server, within 30 working days. If you have been inactive for more than five years, your user profile, together with all personal information, will be automatically deleted. Once your personal information is deleted, it cannot be recovered.
Our system will automatically delete data older than five years, even if you are an active user.
If, after five years without using the Service, you want to log in again, you must create a new user profile.
5.4 Transfer of your Information
Your personal information may be transferred between us and other partners. BestSolution will always ensure that privacy and security are maintained in accordance with the requirements of the Personal Data Act and the EU’s general data protection.
7.0 Applicable Law
Use of your personal data is subject to all applicable laws regarding personal data, currently the Norwegian Personal Data Law and the regulations below.