Privacy policy
Andersson Partners Holding AS (organization number 932 474 131) and Andersson Partners AS (organization number 932 567 814).
The company is referred to as “we”, “us”, “our” or “ours”.
1. Data controller and contact information
This privacy policy explains how we collect and use (process) personal data in our business. We are the data controller for the processing.
2. Your rights
If you want to exercise one of your rights, please contact us. You are entitled to a response as soon as possible, and at the latest within 30 days. Read more about all your rights on the Norwegian Data Protection Authority’s website.
General rights:
- Access to and correction of your own data: You can request a copy of all the data we process about you and ask us to correct data that is incorrect.
- Erasure or restriction: In some situations, you may ask us to delete and/or restrict the processing of data about you.
- Object to a processing of personal data: If we process data about you on the basis of legitimate interest, you have the right to object to it.
- Data portability: If we process data about you on the basis of consent or a contract, you can ask us to transfer data about you to you or to another data controller.
- You can complain to the Norwegian Data Protection Authority about our processing of personal data. We hope that you will let us know directly first, so that we can try to resolve the matter for you in a good way.
3. Who we process personal data about
We process personal data about:
- Customers.
- Customers’ customers if the delivery of the service requires this.
- Potential customers.
- Contact persons at suppliers and partners.
- Visitors to the website.
- Job seekers.
- Employees.
- Former employees.
- Customers’ employees if the delivery of the service requires this.
- Customers’ former employees if the delivery of the service requires this.
4. How we collect personal data
Providing us with personal data is voluntary. However, in order for us to be able to deliver products or services, we need a number of pieces of information from you in order to complete the delivery. We do not rent, buy or sell personal data from/to others. We do not use automated decisions or profiling in the processing of your personal data.
We process personal data when someone:
- enter into an agreement with us for the purchase of products/services
- enter into a membership with us
- send us email, SMS, social media or other correspondence
- sign up for the newsletter
- order content from us, free and paid
- sign up for events (courses, lectures, workshops, etc.) organized by us, both free and paid
- use our website (cf. the section on cookies)
- leave a comment on our website
- submits an inquiry via the communication tool or contact form on our website
- respond to a survey
5. Categories of personal data, purposes and basis for processing
We process personal data in accordance with the following basis for processing in Article 6(1) of the General Data Protection Regulation:
- “Consent”: when you yourself have given us your consent.
- “Agreement”: in order to be able to fulfill an agreement to which you are a party, or to be able to carry out measures at your request, before we enter into an agreement.
- “Legal obligation”: To enable us to comply with a legal obligation.
- “Legitimate interest”: In order to safeguard a legitimate interest, which we believe outweighs the interests of the individual’s privacy.
We process personal data related to:
Inquiries from you, including communication, support, customer service etc.
When you contact us via the website (contact form, comment field, communication tools), by email, by phone (call, text message) or social media, we process personal data. Depending on where and how you send us a message, this may be contact information, IP address and other information you choose to send to us.
The purpose is to be able to respond to inquiries from you, for historical purposes, and to have documentation in case we receive complaints, appeals or legal claims. The legal basis for processing is Article 6 (1) (f) of the General Data Protection Regulation, where the legitimate interests are to be able to respond to inquiries from you, for historical purposes, and to have documentation in case we receive complaints, appeals or legal claims.
We review, archive and delete inquiries as needed, but no less frequently than every two years. In order to preserve any history and logic in the comments section, comments are not systematically deleted.
Inquiries that we are obliged to retain, such as documentation in connection with a complaint/grievance, are stored until the deadline for making a complaint/grievance has expired (two or five years). Accounting material is stored for up to five years, in accordance with the rules in the Bookkeeping Act.
Purchase of products and services, including membership
When you purchase products and services from us, including memberships, we process personal data such as contact information, order and payment information and purchase history.
The purpose is to be able to deliver products and services, including membership, to you after ordering/purchasing, and to have a history of products and services sold. The basis for processing is Article 6 (1) of the General Data Protection Regulation, b) agreement, or c) legal obligation.
Accounting material is stored for up to five years, according to the rules in the Bookkeeping Act.
Marketing in existing customer relationships
When you become a customer or member with us, we process personal data as mentioned above. If you have an existing customer relationship with us, we will be able to send you marketing by e-mail and SMS, in accordance with Section 15 of the Marketing Control Act and the Norwegian Consumer Authority’s associated guidelines.
The purpose is to be able to provide good customer service. The basis for processing is Article 6(1)(f) of the General Data Protection Regulation (GDPR), where the legitimate interest is to be able to offer you relevant products and services. The basis for processing may also be Article 6(1)(a) of the GDPR, where you have given us your consent. You can unsubscribe from e-mail and SMS marketing at any time.
Information on how to unsubscribe is provided in all emails and text messages we send that are linked to marketing. The information is stored until the data subject asks to be deleted.
Newsletters
We can send out email newsletters with articles, blog posts, discounts, offers, free templates, checklists and the like.
The newsletters may occasionally also contain information about our products and services. When you subscribe to newsletters, we process personal data such as contact information and IP address.
The purpose is to be able to inform about relevant news and offers, as well as to provide good customer service to potential and existing customers.
The basis for processing is Article 6(1)(a) of the General Data Protection Regulation, consent. Subscribing to the newsletters is voluntary and you can withdraw your consent (unsubscribe) at any time by clicking “unsubscribe” or “unsubscribe” at the bottom of one of the emails. The data is stored until the data subject requests deletion.
Job search and hiring
When you apply for a job with us, we process personal data such as contact information, CV and other information we need in order to assess your application. The basis for processing is the General Data Protection Regulation, Article 6(1)(b), and possibly Article 9(2)(b) and (h) if your application contains special categories of personal data. The data is stored for as long as it is relevant for the purpose, and is then deleted.
For employees, we process personal data as mentioned above, in addition to data that is necessary in order to pay salaries and otherwise administer the employment relationship. The processing basis for this is Article 6(1)(b) of the General Data Protection Regulation, and possibly Article 9(2)(b) and (h) for special categories of personal data. Information about employees is generally deleted when the employment relationship ends, unless special reasons (such as a dispute about termination or dismissal) make it necessary to keep them longer. Information related to payroll administration is stored for up to five years, in accordance with the rules in the Bookkeeping Act.
Events, also digital
When you participate in free events with us, we collect and process personal data such as contact information. For paid events, we also collect booking and payment information. The purpose is to be able to offer customers and potential customers relevant courses, lectures and workshops.
The basis for processing is the General Data Protection Regulation Article 6 (1) a) consent or b) agreement. The data will be stored until you withdraw your consent and, if applicable, request that it be deleted, or, by agreement, for up to five years in accordance with the provisions of the Bookkeeping Act.
Questionnaire surveys
We always inform you about the purpose of the surveys we conduct and whether they are anonymous or not. We do not share the information with others, or use it for purposes other than those we have stated. In the case of anonymous surveys, no personal data is collected.
The processing basis for surveys that are not anonymous is Article 6(1)(a) of the General Data Protection Regulation, consent. The data is stored for as long as it is relevant for the purpose, or until you withdraw your consent and possibly request that it be deleted.
Suppliers, partners and data processors
When you enter into an agreement with us, either as a supplier, partner or data processor, we process personal data such as contact information. Other information is normally linked to a business and is therefore not personal data.
The purpose is to be able to enter into such agreements, and the basis for processing is the General Data Protection Regulation Article 6 (1) (b) agreement. The data is stored for up to five years, in accordance with the rules in the Bookkeeping Act.
Use of the website
When you use our website, we process personal data such as IP address and other technical data, collected via cookies and analysis tools.
The purpose is to provide you with a good user experience and to compile statistics in order to improve and develop our website and services. The basis for processing is Article 6(1)(f) of the General Data Protection Regulation, where the legitimate interests are to provide you with a good user experience and to improve our website and services.
6. Who we share personal data with
In order to run our business, we sometimes need to share your personal data with parties such as:
- Data processors: providers of various services and products that process your personal data on our behalf (e.g. for IT and administration services, accounting, cloud storage, web hosting, sending emails and similar)
- Professional advisors from industries such as law, finance, accounting, auditing and insurance
- Support for IT and management systems
- Public authorities we are obliged to report to
We require everyone with whom we share your personal data to secure your data in accordance with good information security and the requirements of the General Data Protection Regulation. We enter into data processing agreements with all suppliers.
7. Transfer of personal data outside the EU/EEA
In some cases, your personal data will be transferred outside the EU/EEA, for example where we use suppliers outside the EU/EEA to handle the sending of newsletters, to process customer information, to make products and services available on our website, to enable payment, for security on our website and otherwise to operate our business in a safe and efficient manner.
The transfer of personal data outside the EU/EEA is only permitted to countries that have been approved by the European Commission, or under the necessary guarantees under the General Data Protection Regulation. This may be Privacy Shield for suppliers we use based in the US, use of EU standard contracts, or under binding corporate rules. If you want to know which suppliers we use outside the EU/EEA, and get access to documentation of necessary safeguards, please contact us.
8. Safety and security
We take information security seriously and we will always do our utmost to safeguard your personal data in the best possible way. Among other things, we use strong passwords, data encryption, access control, backups and two-factor authentication to secure our data and prevent unauthorized persons from accessing, changing, deleting or in any way affecting the data we hold, including your personal data.
We only use reputable providers of IT and management services such as web hosting, website and PC security, virus software, email provider, backup, and more.
We only allow others to access and/or process your personal data in accordance with our instructions and only where strictly necessary (e.g. for IT support).
We have established routines for handling data breaches, and we will, in the event of a deviation, send a deviation report to the Norwegian Data Protection Authority within 72 hours of discovering the breach. If the breach entails a high privacy risk, we will also notify affected data subjects.
Cookies and analytics on this website
What are cookies?
A cookie is a text file that is stored in your browser when you visit a website. Below we describe how we use cookies and analytical tools on our website, in accordance with the Electronic Communications Act, in the so-called “cookie clause”: 2-7 b Use of cookies.
Disable or delete cookies
You can turn off and/or delete cookies in your browser yourself. On the nettvett.no website, you can learn how to do this for most browsers. You can also learn more about safer use of the internet. However, turning off or deleting cookies can change your user experience on a website, and sometimes services on a website will no longer function properly.
Affiliate links / Sponsored links
We may recommend various products and services through so-called affiliate links (sponsored links), which are created uniquely for us. When you click on such a link, a cookie is stored in your browser so that it will be possible to track any purchase. We always provide clear information about the use of such links.
Acceptance of cookies / cookies
We use cookies. We use cookies to personalize content and ads, to provide social media features and to analyze our traffic.
Your Consent applies on this website.