Privacy Policy
At Norican, we give high priority on data security and confidentiality. This privacy policy contains information about how we manage the information we obtain from our business partners, from our website visitors and/or from other users of our various services and functionalities.
1. Data controller
The Norican company you are cooperating with, is the data controller in respect of the processing of your personal data. In case you have general questions, you can contact:
Norican A/S
Central Business Register no. (CVR no.) 36 45 87 71
Højager 8
2630 Taastrup
Denmark
2. Scope of processing and categories of personal data
Contact persons with business partners
In connection with our provision of services, contracting and supplying of products and maintenance of relationship we might process the following data about you:
If you are our customer or potential customer, we generally process your data to be able to deliver our services and products, including concluding an agreement about the delivery with you or your company.
If you are our vendor or potential vendor, we generally process your data to be able to receive your services and products including concluding an agreement about the delivery with you or your company.
If you are otherwise a business partner, we generally process your data to be able to cooperate with you or your company.
We process data about your company; however, company information is not subject to the General Data Protection Regulation (GDPR). According to circumstances we may process data about your contact information and professional information, including name, email address, telephone number, position, professional background, and information about our business relationship. We also process financial information, including payment and tax information.
The legal basis for our processing is our legitimate interest in management of our business relationship, see Article 6(1)(f) of the GDPR.
Development of existing or potential business relations, etc.:
We may also process your personal data with a view to maintaining and developing existing or potential business relations.
In that connection, we may process personal data on name, title, business address, telephone number, the products, and services you are interested in etc. Such data is, as a rule, collected only if you choose to disclose such data to us, for example, via your mail signature, business card, etc. We may, however, also collect data from other sources, such as publicly available data from your employer's website, Central Business Registration databases etc.
The legal basis for our processing of your personal data is Norican's legitimate interest in maintaining and developing the mentioned relationships, see Article 6(1)(f) of the GDPR.
Norican Newsletters and Events:
We collect information, for instance, to be able to sign you up for product launch events, training courses or newsletters, to be able to conduct events or to send you brochures, invitations and other information about our services and products.
If you sign up for one of our courses, we will be processing your personal data in that connection. We process your name, position, company, email address, telephone number and address. The legal basis for our processing is Article 6(1)(b) of the GDPR.
If you subscribe to our email newsletter, we will process your name, email address, company, organization, position, language preference and areas of interest. The legal basis is your consent, see Article 6(1)(a) of the GDPR.
In certain cases, we will use your personal data to distribute customer satisfaction surveys based on our legitimate interest in improving the products and services we provide, see Article 6(1)(f) of the GDPR. Users can choose to unsubscribe from any or all marketing communications from Norican or its brands, by selecting the relevant functionality within the email body.
Website contact field:
If you provide your contact information in a contact form on our website, we process your data to handle your request. The legal basis for our processing of your personal data is the consent you have provided, see Article 6(1)(a) of the GDPR.
Cookies:
When you visit one of our websites, data may be collected via cookies on, for example, user behavior, browser type, unit category, information on your preferred settings as well as IP address.
Personal data will be processed for marketing purposes based on Article 6(1)(a) of the GDPR (consent).
Processing for other purposes, such as statistics in respect of website visits, optimization of functionalities, etc., will take place based on Article 6(1)(f) of the GDPR (the balancing of interest’s rule), the legitimate interest of Norican being development and maintenance of a relevant website with the best possible functionalities.
3. Recipients
We might share your data within the Norican group of companies both located inside and outside EU/EEA to deliver our services and products and maintain business relationships as described above.
In some instances, we disclose your personal data to Norican’s business partners and suppliers, such as IT suppliers, marketing agencies, suppliers of newsletter services, etc. These business partners solely process the personal data on behalf of Norican and in accordance with Norican’s instructions.
We may also disclose your data to external third parties if we are required to do so to deliver, ship, take insurance etc. relating to delivering our services and products to you. Such external third parties may be shipping companies, shipping insurance companies etc.
Your personal data may also be disclosed to external advisors such as lawyers and accountants in cases where such disclosure is required by law (cf. Article 6 (1) (c) of the GDPR) or where we need e.g., legal assistance (cf. Article 6 (1) (f) of the GDPR).
As for cookies, go to our cookie policy.
4. Third countries
Norican A/S may transfer your personal data to recipients (including other Norican entities) in third countries (countries outside the EU/EEA). This may be the case if we must involve external parties, if you, for example, need services or products from Norican's offices outside the EU/EEA.
If we transfer your personal data to other Norican entities, we do so based on our Binding Corporate Rules which you can access here.
We do, as a rule, use the EU Commission’s standard contractual clauses (SCC) as transfer tool to provide appropriate safeguards, and you have the right to obtain access hereto, in case transferring to 3rd parties outside the Norican Group.
5. Storage and deletion
We will delete your personal data when we no longer need to process it for one or more of the purposes mentioned above. However, special legislation, including the local bookkeeping legislation, may entail an obligation or right for us to store such data for an extended period. The data may also be processed and stored for a longer period if it is anonymized.
As a main rule, we store personal data collected in connection with entering and delivering according to a business agreement about services and products.
As when we during our maintenance of relationship become aware that you are in a different position or maybe no longer with the company, we will delete your personal data when no longer needed to fulfill the delivery of agreed services and products.
Any documentation of your marketing consent will be stored for 2 (two) years as from the date when you withdrew your consent to receive direct marketing material. The storage period has been determined based on Norican's legitimate interest in being able to document that direct marketing took place in accordance with applicable law.
Data collected in connection with the development of existing or potential business relationships will be stored if such data is relevant for the existing or potential business relationship and for another period of up to 12 (twelve) months.
Any personal data included in bookkeeping records will be stored for 5-10 years (five to ten) years as from expiry of the financial year at which time the data will be deleted. The storage period is determined based on the storage requirements laid down by the bookkeeping legislation in the country of the Norican company with whom the related business transaction took place. Consequently, also with a view to complying with applicable law.
6. Your rights
You are entitled to access the personal data processed about you, albeit subject to certain statutory exceptions. Furthermore, you may object to collection and further processing of your personal data. You are also entitled to have your personal data corrected or to ask us to limit the processing of your personal data.
If you make a request to this effect, we will without undue delay delete the personal data we have registered about you, unless we are entitled to keep processing the data on a different basis, for instance if such processing is necessary to be able to deliver products or services, we have contractually agreed with you or your company to deliver.
In certain circumstances you may also ask us to provide you with a copy of your personal data in a structured, generally applied, and machine-readable format and request that we transfer the data to another data controller (data portability).
If our processing of your personal data is based on your consent, you may at any time revoke your consent. To do so, you need to contact us (see below). If you revoke your consent, we will cease to process your personal data, unless we are entitled to keep processing the data on a different basis, for instance if such processing is necessary to be able to deliver products or services, we have contractually agreed with you or your company to deliver. Revoking your consent does not affect the legality of the processing that took place prior to such revocation.
If you want to exercise your rights as described above, feel free to contact us at any time (see below).
In connection with inquiries concerning your rights, we ask that you provide us with adequate information to process your inquiry, including your full name and your email address, so that we may identify you and respond to your inquiry. We will respond to your inquiry as soon as possible.
Feel free to contact us at dpa@noricangroup.com (subject: Privacy Policy) if you have any questions or disagree with the way in which we process your personal data or the purposes for which we process the data. You may also file a complaint with your local data protection authority.
7. Links to other websites, etc.
Our websites might have links to other websites. Norican is not responsible for the content of the websites of other companies (third-party websites) or for the practices of such companies regarding the collection of personal data.
When you visit other websites, you should always read their policies on protection of personal data and other relevant policies.
8. Changes to our privacy policy
We reserve the right to change this privacy policy based on material changes in legislation, new technological solutions, new or improved features, or to improve our website.
Updated March 2023