1. Your privacy is important to us
When you use our site, you’re trusting us with your information. This is a big responsibility and we work hard to protect your information and to make sure that our processing takes place in a correct and legal manner. Norwesco is responsible for your data which means that it is us you should turn to with questions or comments, or if you want to exercise any of the rights you have in relation to our handling of your personal data.
2. Personal data that we process
Our starting point is not to process more personal data than we need and we always strive to use the least privacy-sensitive data. Typically, we do not collect sensitive personal data, unless there are legal grounds for this in, for example, recruitment or employment. We primarily process your personal data in order to fulfill our obligations in accordance with agreements, contracts, and laws, as well as to perform customer and market analyses.
Suppose you, as a contact person, are at a company that buys services from us or is a supplier to us. In that case, we may handle the following personal information that can be attributed to you:
3. Purpose of the proceedings and legal bases
Regarding you as a contact person for a corporate customer or supplier to Norwesco, we process your personal data in point 2 above for the purpose of administering our customer and supplier relationships, delivering goods services, and marketing our goods and services. The treatment takes place on the basis of our legitimate interest in streamlining our operations and our contact with customers and suppliers, as well as reaching out with marketing. In situations where Norwesco sells goods or services to a company where you are the contact person, the processing takes place because it is necessary for us to be able to fulfill our agreement with you.
Regarding contact persons at corporate customers and suppliers, we process your personal data in point 2 for statistics, customer surveys, and analysis of sales/projects. The treatment takes place on the basis of our legitimate interest in being able to follow up, analyze and quality assure sales/projects.
4. Data storage
Regarding you as a contact person with a customer or supplier, we store your personal information for as long as is necessary to fulfill the purpose of the processing. Storage of your information is saved as long as we, based on your professional role, assess that you can be a potential customer with us. Personal information needed for us to be able to send marketing to you is stored until you object to the marketing.
We always process your personal data to the extent and during the time we are obliged to do so by law. Examples of this are personal data that are necessary to process in order to ensure correct accounting. This information is stored for seven years after the accounting event has occurred. In cases where the personal data is not linked to current legislation and agreements, we revise our registers once every two years to clear out obsolete personal data.
If you are applying for a vacancy with us, we store and handle the information for recruitment purposes, in order to be able to contact you. If you agree to future recruitment opportunities, we may also store the information up to 12 months after our last contact in order to possibly contact you for a later follow-up. You have the right to withdraw your consent during the period at any time.
To the extent that your personal data is no longer necessary to fulfill the purpose of the processing, or the processing for any other reason would no longer be permitted, the data will be anonymized or deleted.
5. Disclosure of data
We may disclose your personal information to our personal data assistants, such as companies that work with IT and cloud services. In such cases, a personal data assistant agreement is entered into which ensures that your personal data is processed only in accordance with this personal data policy.
We may also disclose your personal information to authorities if necessary.
We do not distribute your information to third parties.
We have developed routines and working methods for your personal data to be handled in a secure manner. Our starting point is that only employees and other people within the organization who need the personal data to perform their tasks should have access to them.
Our security systems are developed with your privacy in focus and protect to a very high degree against intrusion, destruction, and other changes that may pose a risk to your privacy. We have good routines for IT security to ensure that your personal data is processed securely.
7. Your rights
You have the right to receive confirmation of whether we process personal data concerning you, and in that case to have access to this personal data and also information about the personal data and our handling of them.
You have the right to have incorrect personal data concerning you corrected by us without undue delay. You also have the right to supplement incomplete personal data in certain cases, taking into account the purpose of the processing.
You have the right to have your personal data deleted by us under certain circumstances, for example, if the personal data is no longer necessary to fulfill the purposes for which it was collected, or if the personal data has been processed illegally.
You have the right to demand that we limit the processing of your personal data in certain cases. For example, if you dispute the accuracy of the personal data, you can demand that we limit the processing of the data during the time it takes us to check whether the data is correct.
You have the right to object to the processing of your personal data that takes place on the basis of our legitimate interest. If this happens, we must demonstrate compelling legitimate reasons that outweigh your interests, rights, and freedoms in order to continue the treatment.
You have the right to object to the processing of your personal data to the extent that the processing takes place for direct marketing. In the event of such an objection, we will no longer process your personal data for that purpose.
You have the right in certain circumstances to obtain the personal data that you have provided to us and that concerns you in an electronic format that is widely used. You have the right to transfer such data to another personal data controller (data portability).
If you have views on our processing of your personal data, you are welcome to contact us. You also have the right to submit a complaint about the processing of your personal data to the Data Inspectorate. Note, however, that there may be restrictions by law and other regulations that affect your rights above.
8. Collection of information and tracking
You can visit our website without leaving any personal information. We use Google Analytics, Google Tag Manager, Clarity, and cookies to improve our service, user-friendliness and to analyze how the website is used. The information collected is mostly anonymous traffic data such as browser information, device, and language.
9. Additions and amendments
We may make additions or changes to this personal data policy. If we do, we will publish the updated policy with a new revision number.