Terms of agreement for Okam AS
Last updated: 17 October 2026. For customers whose agreement was made before this date, the changes apply from 17 November 2026.
This is an English translation of Avtalevilkår for Okam AS. If the two differ, the Norwegian version applies.
General terms of agreement for Okam AS
These terms («the Terms») apply between you as a customer («the Customer») and Okam AS, org. no. 925 024 414, when you buy Okam AS's products and services («the Products»).
1. Entering into and duration of the agreement
- Entering into the contract: The Customer accepts the Agreement by entering a confirmation code received by SMS. This is legally binding. If the Terms and the Order conflict, the Order prevails.
- Duration and termination: The Agreement runs until either party terminates it with one (1) month's written notice to hei@okam.no.
- Assignment: The Customer may not assign the Agreement without the prior written consent of Okam AS.
2. Payment and liability
- Fees: The Customer pays the fees stated in the Order. All prices exclude VAT. Payment is due 14 days from the invoice date.
- Liability: A breach of the agreement shall be remedied within reasonable time. Liability is limited to the value of the service concerned per incident.
- Failure to deliver: If Okam AS does not deliver the agreed services, the Customer is entitled to a refund of fees paid for the part not delivered. The refund is made within 14 days.
3. Other provisions
- The Customer's responsibility: The Customer is responsible for giving correct information about its business and for checking the agreement before start-up.
- Changes: Okam AS may change the Terms with one month's notice. Financial terms are changed only at a new agreement period.
- Governing law and disputes: The Agreement is governed by Norwegian law. Disputes are settled amicably or by Oslo District Court (Oslo tingrett).
4. Personal data
When the Customer uses the Products, Okam AS processes personal data about the Customer's customers, guests and staff on the Customer's behalf. The Customer is the controller, and Okam AS is the processor. Appendix 1, Data processing agreement is part of the Terms and is accepted with them, in the same way as the Terms (confirmation code by SMS, see section 1).
Appendix 1, Data processing agreement
Data processing agreement between the Customer (controller) and Okam AS, org. no. 925 024 414 (processor)
1. Purpose and scope. Okam AS processes personal data to deliver the POS system, online ordering, table booking, kitchen display and related services to the Customer. The processing consists of recording, storing, displaying, sending and deleting the data in the Products. Okam AS processes the data only to deliver the Products.
2. Whom and what. It covers the Customer's customers and guests (name, phone, e-mail, address, orders, comments, table bookings, receipts, payment status) and the Customer's staff (name, login, sales per staff member). Okam AS does not process card numbers. The payment provider does.
3. Duration. The agreement applies as long as the Customer uses the Products, and after that until the data has been deleted or returned under section 9.
4. Instructions. Okam AS processes the data only on the Customer's documented instructions, including with regard to transfers outside the EEA, unless the law requires otherwise. If the law requires it, Okam AS informs the Customer before the processing, unless the law prohibits such notice. The Terms, this agreement and the settings the Customer chooses in Okam are the instructions. Okam AS says so at once if, in Okam's opinion, an instruction breaches data protection law.
5. Confidentiality and security. Everyone with access at Okam AS is bound by confidentiality, also after the agreement ends. Okam AS has measures under GDPR Article 32, including access control, encrypted transfer, logging and backups.
6. Subprocessors. The Customer gives general authorisation to the subprocessors listed in Okam's privacy policy under «Subprocessors». Okam AS notifies the Customer by e-mail at least 30 days before a new subprocessor is used, and the Customer may object. Okam AS imposes the same obligations on the subprocessors and is liable to the Customer for them.
7. Transfers outside the EEA. Data is transferred outside the EEA only when the transfer has a lawful basis, for example the EU adequacy decision for companies certified under the EU-U.S. Data Privacy Framework, or the EU standard contractual clauses.
8. Assistance and breaches. Okam AS helps the Customer respond to requests from data subjects for access, correction, deletion and other rights, and with the Customer's obligations under GDPR Articles 32 to 36: security, notifying breaches to the Norwegian Data Protection Authority (Datatilsynet) and to data subjects, data protection impact assessments and prior consultations. Okam AS notifies the Customer without undue delay, and at the latest within 48 hours, when Okam becomes aware of a security breach affecting the Customer's data.
9. When the agreement ends. Okam AS deletes or returns the data, at the Customer's choice, and deletes existing copies. Data the Customer must keep under the Bookkeeping Act is kept by Okam AS for the Customer for the retention period, unless the Customer asks for it to be delivered. After that it is deleted, and Okam AS confirms the deletion in writing.
10. Audits. Okam AS gives the Customer the information needed to show that the agreement is followed, and accepts audits and inspections by the Customer or an auditor the Customer authorises, with reasonable notice, at most once a year unless there has been a breach.
11. Termination. The Customer may terminate this agreement with immediate effect if Okam AS no longer meets the requirements of GDPR Article 28.
12. Governing law. Norwegian law. If this agreement and the Terms conflict, this agreement prevails for personal data.