Privacy Notice for Business Partners, Customers, Potential Future Customers and Business Contacts

This privacy notice describes what personal data we process about our business partners, customers, potential future customers and business contacts.

Nortal’s information and contact details

Nortal AS, or (where indicated during or after collection), contacting Nortal entity.

Contact information:
Nortal Group company contact information (

Contact details of Nortal’s leading data protection officer

In Germany

German data protection officer: datenschutz@nortal.comAlso check:

Information that we collect about you

We only process a minimum amount of personal data and only if such data is necessary in order to carry out the purposes detailed above. The information we have, however, may vary from one person to the next as our individual relationships vary as well. To clarify what types of information we may have on you, below is a list of possible personal data types:

1. Your name, date of birth/Personal identification code, title/position, contact information (email, work and/or home address, phone number(s)), name of your employer.
2. Information collected from you upon attending our meetings and events, including records of visit, CCTV footage (please inquire about our CCTV policy separately).
3. Information collected about you from your employer
4. Information about your participation in Nortal events, including dietary restrictions;
5. Information about your participation in customer surveys
6. Data generated by us while providing our services;
7. Personal data provided to us by business partners, clients and employees;
8. Information in accordance with our website privacy notice and cookie policy

Information about provided services

We process information related to the customer or prospective customer relationship. This information may include, for example:

Services ordered by and provided to the customer;
Service delivery and billing information;
Meeting information; and
Information on other material or communications related to the customer or prospective customer relationship.

How do we get information about you?

Personal data is primarily collected either directly from you or during the course of Nortal’sbusiness activities by contacting us, by visiting our offices, our website, or by virtue of your public position in your organisation. Information related to your tasks or position in an organisation or information on your public position can be obtained from sources such astrade registers, corporate websites and other similar public sources.

Further, some personal data we use may also arise in the course of Nortal combining,supplementing and analysing data we have in order to create new data.

Data obtained and/or collected from public information sources such as national public register in the course of validating you as a customer and/or contractor and while providing our services. Customer/Contractor validation may include collection of full company trade register extract and accompanying documentation.

The purposes and legal basis for the processing

Nortal processes personal data of our business customers, potential business customers, potential employees, and other groups related to us for the purposes of communicating with you and to manage and cultivate a customer or other relationship relevant to our business with you. Personal data is also processed in order to plan and carry out Nortal’s business operations. By processing personal data, we aim at

1. Cultivating, maintaining and managing a business relationship with you including by, for example, conducting surveys and providing information about events;
2. Customer acquisition and outreach through marketing and client communications such as newsletters, email marketing;
3. Providing and developing our services under contract or improving our overall contractor/customer experience;
4. To assist us in matching Business partners capabilities to our supplier requirements;
5. This personal information will also be used to contact and identify the Business partnerthroughout the business partners evaluation process;
6. We use the information you provide to conduct standard pre-contract due diligence, respond to enquiries, establish and renew contractual relationships with you and provide you with information on our products and services;
7. Carrying out our statutory obligations based on, e.g. export controls legislation, money laundering legislation, legal claims.

Legal basis for processing personal data

When processing your personal data for the purposes described above, our processing is based on our legitimate interest as a data controller and fulfilling our contractual obligations to you while providing our services or you are providing services to us. Certain processing is based on our legal obligations as a provider of ICT services cross-border, to public authorities and for administrative reasons. Submitting your contact information on our website or at our events in consensual for the above mentioned purposes

Who processes the personal data?

As a main rule, we do not disclose personal data to third parties without your consent. However, as a group company operating with a hybrid service provision model, our affiliates  may require access to your information on a case by case basis. Further, we may be required to disclose data on you to other third parties in certain other situations. We may, for example, have the obligation to disclose personal data to authorities if such disclosure is mandatory under applicable laws.

We may also outsource the processing of personal data to third party service providers, such as subcontractors we have mutually agreed to provide services to you or service providers providing tools for marketing, surveys, and the like. In such case we ensure through contractual measures that your personal data is processed and protected appropriately and in compliance with applicable laws and this privacy notice.

We use a third-party service provider to provide our Marketing Automation system (ActiveCampaign LLC., for more information about ActiveCampaign, please see When necessary for technical support and maintenance, employees of ActiveCampaign might have limited access to your data.

Otherwise we do not distribute or share your personal data to third parties for marketing purposes but we may share information with our suppliers when they perform services on our behalf under contractual obligations to us and only to the extent of the purposes defined above (and to conduct third party surveys, marketing activities, event planning, and the like).

Transfers of your personal data to third countries

Nortal, as an international business, has centralized certain aspects of our business operations, including, for example, business, financial and human resources administration. This may result in the transfer of personal information from one country to another and amongst our various subsidiaries and affiliates. A list of the members of the Nortal group in third countries that can have access to and may process your personal data in accordance with this Privacy Notice can be viewed here (

Nortal has set up safeguards to protect internal transfers of personal information outside of the European Union or European Economic Area such as by way of implementing European Union Standard Model clauses for processing, or other applicable safeguard. For additional information regarding the transfers, please refer to  

When Nortal is participating in procurement processes to find new business opportunities outside the European Economic Area, your personal data may be sent to potential business partners or otherclients, and if the applicable law requires your express consent for such use or disclosure, we will obtain it from you.

The storage period

Except as otherwise permitted or required by the applicable law or regulatory requirements, Nortal retains your personal information only for as long as we believe it is necessary to fulfill the purposes for which the personal information was collected (including, for the purpose of meeting any legal, accounting or other reporting requirements or obligations).

The data is regularly updated and data type specific retention periods are evaluated in regular intervals. All outdated, unused and obsolete data is deleted or anonymized, e.g. reducing your data to statistics.

You may request that Nortal deletes the personal information about you that Nortal is holding. There are instances where applicable law or regulatory requirements allow or require Nortal to refuse to delete this personal information. In the event that Nortal cannot delete your personal information, we will inform you of the reasons why, subject to any legal or regulatory restrictions.

You can ask to see the personal information that Nortal holds about you. If you want to review, verify or correct your personal information, please contact Nortal in writing at

Your rights as a data subject

Under the GDPR, and subject to the applicable statutory limitations, you have the right to:

request access to information that Nortal holds about you;
request the correction of information that Nortal has about you;
request the erasure of information that Nortal has about you;
restrict the use of your personal data;
receive your personal data;
object to the processing of your personal data;
withdraw your consent for the use of your personal data when personal data is processed on the basis of consent;
file a complaint about our processing with a supervisory authority at your country of domicile.

Nortal may send you electronic direct marketing related to your tasks, subject to national law, if you have not declined such messages. If you do not wish to receive such messages any longer, you can at any time cancel our electronic direct marketing to you by opting-out.

Please contact if you have any questions about Nortal’s privacy notice or its processing of your personal data.

Updates to the Privacy Notice

This privacy notice may be updated by Nortal Group from time to time due to, e.g. changes in Nortal Group or its affiliates’ processing, new developments, or applicable legislation. An updated privacy notice is always available on our website for your convenience.

This privacy notice was last updated September 25, 2023.