Terms of Use and Privacy
Last updated: July 2018
Welcome to Ducky

Ducky is an interactive engagement tool, motivating people to live more sustainable by tracking personal impact and measuring the collaborative effect of a team working together. Our services are currently available for use via a web browser (Google Chrome works best) and as a Progressive Web App on your mobile devices.

mobile_web_appsProgressive web apps are regular web pages or websites, but can appear as traditional applications on your devices.

The data controller of your personal information is Ducky AS, Org.nr: 914 177 928, providing the service to you. This privacy policy may sometimes refer to “you”, and by “you” we mean a visitor of our websites, a user of one or more of our services, and/or a user through our customer. The privacy policy does not apply to third-party websites, products or services.

We will update this Privacy Policy from time to time, and post all changes right here, but if the changes are significant, we will provide a more prominent notice. Our Data Protection Officer is lawyer Eirik Brønner from Advokatfirmaet Brønner & CO DA. 

Contact our Data Protection Officer by phone 22 42 40 10 or by email eb@bronner.no.

Inquiries to our Data Protection Officer must relate to Ducky's processing of personal information, and mainly related to personal information about you. Examples of this may be questions about your rights.

img container
Let’s start from the beginning:

Personal information is any information you voluntarily submit to us and that identifies you personally, including your contact information, such as your name, e-mail address, company name and other information about yourself. It also includes information about your environmental habits, entered by you through the carbon footprint calculator, the climate challenge and the climate data API.

Ducky is split into different domains - ducky.eco, challenge.ducky.eco and footprint.ducky.eco. When you scroll, browse, click or navigate our Ducky web pages, we collect navigational information. Navigational information refers to information about your computer and your visits to these pages, geographical location, browser type, referral source, length of visit and pages viewed.

We use Google Analytics to analyse your visit on our pages. Why do we do it? Well, we want you to have the best experience possible when visiting us.

anonymous_userIn Google Analytics we have anonymised your IP-address.

How do we get your personal information?

You give us personal information when visiting our landing pages, create an account and use our services (the footprint calculator, the climate challenge etc.)

email_envelopeAn example: as a new user we ask you for personal information such as your name and your email address to create your account.

What is the purpose of collecting your personal information?

There are two reasons for why you’d chose to use the Ducky platform. One is that you found us through social media, a search engine (most likely Google), a link on a website, a recommendation from a friend or a colleague and so on. The other is that you’ve been invited to participate in a climate challenge at your work, school or organisation.

Two purposes for collecting your personal information is therefore:

  • To manage your personal footprint on a monthly and yearly basis with the carbon footprint calculator. 
  • To participate in the climate challenge through our customer (your company, school or organisation).
When do we collect personal information about you?
  • Account creation. To create an account you provide data such as your name, your email address and a password. 
  • Profile. You can add information about yourself on your profile such as a profile picture and a description. This information is not required for creating an account.
  • Facebook or Google+ login. When creating an account with Facebook or Google+ you’ll get a pop-up window where you can tick off the information you want to transfer from these services to Ducky. Cross-check to see if you agree, and make the changes you feel comfortable with!
  • Participating in a climate challenge. When participating in a climate challenge, we collect information about saved CO2, climate activities and logging. 
  • Calculating your personal footprint. In the carbon footprint calculator, we collect your answers in addition to if you have or haven't taken the full climate calculator.

save_folderAn exemption: we don’t save your answers unless you take the full calculator.

personal_info

privacy-statistics

What do we do with the information you give us?

We don’t sell it. We use your personal information to produce aggregated insights and statistics that don’t identify you or anyone you know as a person. These insights are used in reports, presentations, case studies, on landing pages, social media, blogs etc.  

CO2_leafExamples are total CO2e saved in a climate challenge and name of climate challenge, number of activities logged or most popular activities in a climate challenge, average CO2 saved per person, name of best team in a climate challenge.

In addition we may use your personal information to:

  • Improve your browsing experience by personalising our websites and to improve our services.
  • Communicate and send you information or content that we think will motivate your journey toward sustainability by email, or other means - in accordance with your communication preferences.
  • Respond to customer support requests.  
Retention of personal information

How long we keep information we collect about you depends on the type of information and the purpose of processing. We retain personal information that you provide to us as long as we have an ongoing relationship with you. 

After participating in a climate challenge by invitation from our customer (your workplace or school), we automatically delete your Ducky account 7 days after challenge end, unless you opt-in to keep your account. 

If you create your Ducky account to manage your personal footprint, we look at our relationship as an ongoing one, and will keep it until you choose to delete it. If you choose to delete your Ducky account, we both delete and anonymise your personal information.

anonymous_userWhat does that mean? It means that we delete your personal information (name, email etc.), and we anonymise your climate actions. This way we can add your individual efforts to the bigger picture - without tracing it back to you. 

privacy-email
Emails

If you create an account on ducky.eco, subscribe to one of our mailing lists and/or use one of our services you may receive emails relevant to that mailing list. 

email_envelopeFor example after entering your code to participate in a Climate Challenge you can opt-in to receive emails specifically related to the challenge. 

In every email you receive from us there is an option to unsubscribe from the mailing list at the bottom of the email. You can also set or change your communication preferences in your profile settings.

When you use our mobile web application

We send push notifications during the climate challenge to keep you engaged and motivated. If you no longer wish to receive such communications, you may turn them off at the device level.

 

What about children?

Our websites are not intended for or targeted at children under 15, and we do not knowingly or intentionally collect their personal information. Children under the age of 15 can use our services, but only with participation, under supervision and with approval from a parent or a legal guardian.

 

Customer testimonials and comments

We post customer testimonials and comments on our websites, which may contain personal information. We obtain each customer’s consent prior to posting name and testimonial. 

privacy-password

Security of your personal information

We secure the personal information you provide on computer servers in a controlled, secure environment, protected from unauthorised access, use or disclosure. All personal information is protected using appropriate physical, technical and organisational measures.

Ducky accounts require a username and a password to login. You must keep your username and password secure, and don’t disclose it to a third party. Account passwords are encrypted, meaning that we can’t see your passwords. This means that we don’t resend forgotten password, we only reset them.

Social media features

Our websites include social media features, such as the Facebook share button in the climate challenge. These features may collect your IP address, which page your visiting on our sites, and may set a cookie to enable the feature to function properly. Social media features are hosted by a third party, and this privacy policy does not apply to these features. 

privacy-third-party-websites
Links to third-party websites

Our website include links to other websites, such as www.stoknes.no. These pages have their own privacy policies, and we encourage you to read them carefully as you do ours. 

Consent

It’s voluntary to provide personal information to our services such as creating an account, calculating your personal footprint, participating in an environmental challenge and receiving newsletters. 

When you first visit our website you are asked to either accept or decline cookies in the notification.

In order to create an account on Ducky you have to accept this Privacy Policy.  

User profile preferences

When you are logged into your Ducky Account you can make changes on receiving emails from us, profile deletion, profile picture and a short personal bio.

Your Ducky user profile is by default public on the Ducky platform to your team. This means that your profile picture, profile description, recently logged activities and top-list achievements are visible to other Ducky users on your team.

privacy-deletion
Deletion

As a user of Ducky and our services, you have the right to delete your user profile at any time and thereby have all personal information about yourself deleted. Click here to see the guide on how to delete your user profile. Your user is immediately deleted and we cannot retrieve information about you any longer. 

Due to back-ups and copies, it takes 180 days for the data to be completely deleted from the Google Cloud Platform. If you choose to create a new Ducky account, you’ll get a new user-ID linked to your account information. It will not retrieve information or be linked to your previous account

Data processors and transfers abroad

We engage sub-processors, to perform services on our behalf and/or to assist us with the provision of services to you.

The EU-U.S Privacy Shield framework came into force on July 12th, 2016, and ensures an adequate level of protection of the transfer of personal information from Europe to the United States of America. As a result of the EEA Agreement, the Privacy Shield is used as a basis for the transfer of personal data from Norwegian companies to the United States. All of Ducky’s sub-processors are subject to the Privacy Shield Framework. Click here to see the list of companies adhering to the framework. 

Our HQ is located in Trondheim, Norway, but your information may be transferred to, stored, or processed in the United States. If we disclose your personal information to third parties we ensure an adequate level of security and sufficient agreements to prevent third parties to use personal information for other purposes than agreed.

Disclosure of information

We may offer Climate Challenges where winners are awarded. For our customers (your workplace, school or organisation) to be able to announce the winner(s), on a team or individual level, we may share your name and/or contact information with them to reach out to you.

Co-worker confidentiality commitments

All Ducky employees and volunteers are required to sign and adhere to a confidentiality agreement. Only employees who need to access your personal information to do their work are granted access and ensures a high level of protection. General employee guidelines:

  • All employees and volunteers are required to sign and adhere to the confidentiality agreement.
  • Only authorised co-workers have access to personal information.
  • All employees practice a culture of privacy protection.
privacy-rights
How to exercise your rights

You have the right to request access to your personal information, correct it, update it or delete out-of-date or inaccurate personal information we hold about you. Many changes can be done in your Account Settings, but you can also contact us to exercise your rights.

To exercise your rights, contact our Data Protection Officer by phone: 22 42 40 10, or email: eb@bronner.no. You'll be answered within 30 days. Requests that are unreasonable or not required by law may be rejected.

Contacting Ducky

You can contact Ducky at post@ducky.eco or by post:

Ducky AS,
Kjøpmannsgata 51,
7011 Trondheim,
Norway

Email communication is not always secure, please do not include sensitive information (racial or ethnic origin, political opinions, membership of a political association, religious beliefs or affiliations, philosophical beliefs, sexual preferences or criminal record). 

Questions or comments?
Thank you for taking the time to read our privacy statement! Please contact us if you have questions, comments or just say hey. We appreciate your input.
Help & Feedback