Privacy Policy
1. Introduction and Company Information
This Privacy Policy explains how Nordfjord Teknikk AS collects, uses, stores, shares, and protects personal data when you visit our website, contact us, use our services, or otherwise interact with us.
Data controller: Nordfjord Teknikk AS
Address: Strandgata 18, 6900 Florø, Norway
Email: [email protected]
Phone: +47 57 74 82 19
Nordfjord Teknikk AS is a real business operating in Norway and processes personal data in accordance with applicable privacy legislation, including the General Data Protection Regulation (GDPR) and relevant Norwegian data protection rules.
2. Data Collection and Processing
We may collect and process the following categories of personal data:
- Identification data: name, company name, job title, and contact details.
- Contact information: email address, phone number, postal address, and other communication details.
- Communication data: messages, inquiries, support requests, and correspondence.
- Customer and service data: information related to orders, deliveries, service requests, agreements, and invoicing.
- Technical data: IP address, browser type, device information, log data, and usage information collected through our website.
- Payment and accounting data: information necessary for invoicing, bookkeeping, and compliance with accounting obligations.
We normally collect personal data directly from you, but we may also receive data from business partners, public sources, or third parties where permitted by law.
3. Purpose of Data Processing
We process personal data for the following purposes:
- To respond to inquiries and provide customer service.
- To enter into, perform, and manage agreements with customers, suppliers, and business partners.
- To deliver products and services, including administration, support, and follow-up.
- To issue invoices, handle payments, and maintain accounting records.
- To maintain and improve our website, systems, and services.
- To ensure security, prevent misuse, and detect fraud or unauthorized access.
- To comply with legal obligations, including accounting, tax, and record-keeping requirements.
- To send relevant business communications where permitted by law or based on consent.
4. Legal Basis for Processing
We process personal data only when we have a valid legal basis. Depending on the context, our legal bases may include:
- Performance of a contract: when processing is necessary to fulfill an agreement with you or to take steps at your request before entering into a contract.
- Legal obligation: when processing is required to comply with applicable laws and regulations.
- Legitimate interests: when processing is necessary for our legitimate business interests, provided that your interests and fundamental rights do not override those interests.
- Consent: when you have given us clear consent for specific processing activities, such as certain marketing communications where required.
5. Data Sharing and Third Parties
We may share personal data with third parties where necessary and lawful. Such recipients may include:
- IT and hosting providers;
- accounting, auditing, and legal advisors;
- payment service providers and banks;
- delivery and logistics partners;
- service providers assisting with customer support, communication, or system maintenance;
- public authorities where required by law.
We only share personal data to the extent necessary for the relevant purpose and require appropriate confidentiality and data protection safeguards from our processors and partners.
6. Data Transfer to Third Countries
In some cases, personal data may be transferred to or accessed from countries outside the European Economic Area (EEA). If such transfers occur, we will ensure that appropriate safeguards are in place, such as:
- an adequacy decision by the European Commission;
- Standard Contractual Clauses (SCCs);
- additional technical and organizational measures where necessary.
You may contact us for more information about any international data transfers and the safeguards used.
7. Storage Duration
We retain personal data only for as long as necessary to fulfill the purposes for which it was collected, unless a longer retention period is required or permitted by law.
- Customer and contract data are retained for the duration of the business relationship and thereafter as needed for legal claims and record-keeping.
- Accounting and tax-related data are retained for the period required by applicable law.
- Inquiry and communication data are retained for as long as necessary to handle the request and for a reasonable follow-up period.
- Technical logs are retained for a limited period unless needed for security, troubleshooting, or legal purposes.
When personal data is no longer needed, it will be securely deleted or anonymized.
8. User Rights
Subject to applicable law, you have the following rights regarding your personal data:
- Right of access: to obtain confirmation of whether we process your personal data and to receive a copy of that data.
- Right to rectification: to request correction of inaccurate or incomplete personal data.
- Right to erasure: to request deletion of your personal data in certain circumstances.
- Right to restriction: to request limitation of processing in certain situations.
- Right to data portability: to receive personal data you have provided to us in a structured, commonly used, machine-readable format, where applicable.
- Right to object: to object to processing based on legitimate interests or for direct marketing purposes.
To exercise your rights, please contact us using the contact details provided below. We may need to verify your identity before responding to your request.
9. Withdrawal of Consent
Where processing is based on your consent, you may withdraw that consent at any time. Withdrawal of consent does not affect the lawfulness of processing carried out before the withdrawal.
If you withdraw consent, we may no longer be able to provide certain services or communications that depend on that consent.
10. Right to Complain
If you believe that our processing of your personal data violates applicable privacy laws, you have the right to lodge a complaint with the competent supervisory authority.
In Norway, this is the Norwegian Data Protection Authority (Datatilsynet).
11. Data Security
We take appropriate technical and organizational measures to protect personal data against unauthorized access, alteration, disclosure, loss, or destruction. These measures may include access controls, encryption where appropriate, secure storage, staff confidentiality obligations, and regular review of our security procedures.
While we strive to protect your personal data, no system can be guaranteed to be completely secure. We encourage you to use caution when transmitting information over the internet.
12. Contact Information
If you have questions about this Privacy Policy or our processing of personal data, or if you wish to exercise your rights, you may contact us at:
Nordfjord Teknikk AS
Strandgata 18, 6900 Florø, Norway
Email: [email protected]
Phone: +47 57 74 82 19
13. Changes to Privacy Policy
We may update this Privacy Policy from time to time to reflect changes in our practices, services, legal requirements, or other operational reasons. The updated version will be published on our website with a revised effective date where appropriate.
We encourage you to review this Privacy Policy periodically to stay informed about how we process personal data.