Privacy Policy

Data controller

The data controller is NOREXECO by Mr. Stein Ole Larsen, the CEO. Contact:

Address: Brugata 10, 2212 Kongsvinger, Norway

E-mail address: compliance@norexeco.com

Telephone number: +47 6281 3000

Organization number: 998 548 217 (VAT)

Personal data we process and why we process personal data

We collect and process your personal data for different purposes, depending on who you are and how we come into contact with you. Examples include:

To meet documentation requirements for becoming a Trade Member of NOREXECO, to enter into other agreements with NOREXECO, to perform an agreement we have with you, and/or to respond to your inquiries, we may process your name, e-mail address, address and other contact information, and where required by law a copy of personal identification and payment information.

To send marketing, newsletters and information about our business, we may process your e-mail address and name. That processing is based on your consent.

Disclosure of personal information to others

We will not share your personal data with others unless there is a legal basis for such disclosure. Such a legal basis will typically be an agreement with you or a requirement in law for us to provide the information.

NOREXECO uses data processors to collect, store or otherwise process personal data on our behalf. In such cases, we have entered into an agreement with the data processor to help ensure data security at all stages of the processing. We use categories of data processors such as: suppliers operating IT systems; suppliers assisting in salary administration; suppliers assisting in the operation of different core systems; suppliers assisting with security measures, for example access control; and the PostHog product analytics tool to collect data about how you use norexeco.com.

All processing of personal data takes place within the EU/EEA or in a third country where the supplier is confirmed GDPR compliant.

Storage

We do not store your personal data longer than necessary to fulfil the purpose of the processing, and otherwise as long as we are required by law. For example, we store certain payment information for 5 years, according to the Norwegian Bookkeeping Act Section 13.

Personal data that we process on the basis of your consent will be deleted when you withdraw your consent. Personal data we process to perform an agreement with you will be deleted when the agreement is fulfilled and all obligations arising from the agreement are fulfilled. We may nevertheless store data as long as we are required by law, and also if a special need arises, for example to establish, exercise or defend complaints or legal claims directed against us or by us.

Your rights when we process your personal data

Privacy laws and regulations give you a variety of rights related to the processing of your personal data.

While this Privacy Policy provides information about our processing, you may ask for more in-depth information on how we process your data. You have the right to access the personal data we process about you. If your personal data is incorrect, you have the right to have it rectified. If we do not have a legal basis to process personal data, the data should be erased, and you may require this to be done if we have not deleted it on our own initiative. You may request that we restrict the use of your personal data. You are entitled to data portability and may request that your personal data be transferred to you or to another business in a structured, commonly used and machine-readable format. You may object to our processing of your data. You may also object to being subject to solely automated individual decision-making with legal or similarly significant effects.

If you believe that we process your personal data without a legal basis, you may complain to the Norwegian data protection authority (“Datatilsynet”), but we ask you to contact us first so we can address your objections and resolve any misunderstandings.

Privacy legislation has extensive provisions on the above and there may be exemptions from certain rights. If you wish to exercise your rights, please contact us using the contact information at the top of this document. We will answer your inquiry as soon as possible and usually within 30 days.

Changes

If there is a change in our organization or in our services, or if there are changes to privacy laws or regulations, this Privacy Policy may change. If we have your contact information, we will notify you of these changes. Otherwise, updated information will always be available on our website.