Privacy Notice for Business Partners, Customers, Potential Future Customers and Business Contacts

This privacy notice describes what personal data we process about our business partners, customers, potential future customers and business contacts.

Nortal’s information and contact details

Controller:
Nortal AS, or (where indicated during or after collection), contacting Nortal entity.

Contact information:
Nortal Group company contact information (https://nortal.com/contact-us/)

Contact details of Nortal’s leading data protection officer
Email: privacy@nortal.com

In Germany

German data protection officer: datenschutz@nortal.comAlso check: https://nortal.com/de/dsh-geschaeftspartner/

We only process a minimum amount of personal data and only if such data is necessary in order to carry out the purposes detailed above. The information we have, however, may vary from one person to the next as our individual relationships vary as well. To clarify what types of information we may have on you, below is a list of possible personal data types:

We process information related to the customer or prospective customer relationship. This information may include, for example:

Personal data is primarily collected either directly from you or during the course of Nortal’sbusiness activities by contacting us, by visiting our offices, our website, or by virtue of your public position in your organisation. Information related to your tasks or position in an organisation or information on your public position can be obtained from sources such astrade registers, corporate websites and other similar public sources.

Further, some personal data we use may also arise in the course of Nortal combining,supplementing and analysing data we have in order to create new data.

Data obtained and/or collected from public information sources such as national public register in the course of validating you as a customer and/or contractor and while providing our services. Customer/Contractor validation may include collection of full company trade register extract and accompanying documentation.

Nortal processes personal data of our business customers, potential business customers, potential employees, and other groups related to us for the purposes of communicating with you and to manage and cultivate a customer or other relationship relevant to our business with you. Personal data is also processed in order to plan and carry out Nortal’s business operations. By processing personal data, we aim at

When processing your personal data for the purposes described above, our processing is based on our legitimate interest as a data controller and fulfilling our contractual obligations to you while providing our services or you are providing services to us. Certain processing is based on our legal obligations as a provider of ICT services cross-border, to public authorities and for administrative reasons. Submitting your contact information on our website or at our events in consensual for the above mentioned purposes

As a main rule, we do not disclose personal data to third parties without your consent. However, as a group company operating with a hybrid service provision model, our affiliates  may require access to your information on a case by case basis. Further, we may be required to disclose data on you to other third parties in certain other situations. We may, for example, have the obligation to disclose personal data to authorities if such disclosure is mandatory under applicable laws.

We may also outsource the processing of personal data to third party service providers, such as subcontractors we have mutually agreed to provide services to you or service providers providing tools for marketing, surveys, and the like. In such case we ensure through contractual measures that your personal data is processed and protected appropriately and in compliance with applicable laws and this privacy notice.

We use a third-party service provider to provide our Marketing Automation system (ActiveCampaign LLC., for more information about ActiveCampaign, please see https://www.activecampaign.com). When necessary for technical support and maintenance, employees of ActiveCampaign might have limited access to your data.

Otherwise we do not distribute or share your personal data to third parties for marketing purposes but we may share information with our suppliers when they perform services on our behalf under contractual obligations to us and only to the extent of the purposes defined above (and to conduct third party surveys, marketing activities, event planning, and the like).

Nortal, as an international business, has centralized certain aspects of our business operations, including, for example, business, financial and human resources administration. This may result in the transfer of personal information from one country to another and amongst our various subsidiaries and affiliates. A list of the members of the Nortal group in third countries that can have access to and may process your personal data in accordance with this Privacy Notice can be viewed here (https://nortal.com/contact-us/).

Nortal has set up safeguards to protect internal transfers of personal information outside of the European Union or European Economic Area such as by way of implementing European Union Standard Model clauses for processing, or other applicable safeguard. For additional information regarding the transfers, please refer to privacy@nortal.com.  

When Nortal is participating in procurement processes to find new business opportunities outside the European Economic Area, your personal data may be sent to potential business partners or otherclients, and if the applicable law requires your express consent for such use or disclosure, we will obtain it from you.

Except as otherwise permitted or required by the applicable law or regulatory requirements, Nortal retains your personal information only for as long as we believe it is necessary to fulfill the purposes for which the personal information was collected (including, for the purpose of meeting any legal, accounting or other reporting requirements or obligations).

The data is regularly updated and data type specific retention periods are evaluated in regular intervals. All outdated, unused and obsolete data is deleted or anonymized, e.g. reducing your data to statistics.

You may request that Nortal deletes the personal information about you that Nortal is holding. There are instances where applicable law or regulatory requirements allow or require Nortal to refuse to delete this personal information. In the event that Nortal cannot delete your personal information, we will inform you of the reasons why, subject to any legal or regulatory restrictions.

You can ask to see the personal information that Nortal holds about you. If you want to review, verify or correct your personal information, please contact Nortal in writing at privacy@nortal.com.

Under the GDPR, and subject to the applicable statutory limitations, you have the right to:

Nortal may send you electronic direct marketing related to your tasks, subject to national law, if you have not declined such messages. If you do not wish to receive such messages any longer, you can at any time cancel our electronic direct marketing to you by opting-out.

Please contact privacy@nortal.com if you have any questions about Nortal’s privacy notice or its processing of your personal data.

This privacy notice may be updated by Nortal Group from time to time due to, e.g. changes in Nortal Group or its affiliates’ processing, new developments, or applicable legislation. An updated privacy notice is always available on our website for your convenience.

This privacy notice was last updated September 25, 2023.