Privacy policy

Last updated on 14 May 2024.

Version 1.

Introduction

At Nortec A/S ("Nortec" or "we/us"), we prioritise data security and confidentiality. This privacy policy establishes guidelines for how we handle your personal data, which is collected and processed when you visit our website www.nortec.dk.

Data Controllers

The website is owned and published by:

Nortec A/S

Ellehammersvej 16

7100 Vejle

CVR: 19992306

Phone: 70 256 256

Email: [email protected]

Purposes of processing your personal data

We process your personal data for the following purposes:

  • Sending service messages, market surveys, satisfaction and customer surveys and invitations for user reviews.
  • Handling and responding to inquiries regarding sales, support or service.
  • Ensuring compliance with terms and conditions, including establishing, defending and enforcing legal claims.
  • Compliance with legal requirements, including accounting.
  • Compiling statistics for internal analysis to improve and develop our websites, services and products.
  • Sharing information about your user for targeted advertising on digital media such as Facebook, Instagram, LinkedIn, YouTube, Vimeo, etc.
  • Newsletter subscription.
  • Participation in competitions and other events.
  • Processing solicited and unsolicited job applications.

Note, we do not process information about your user for targeted advertising on digital media unless you have given explicit consent. Similarly, we will not subscribe you to newsletters, competitions or other events without your explicit consent.

Basis for processing your personal data

Our basis for processing your personal data is as follows:

  • Fulfillment of contract, e.g., if we enter into an agreement with you or you gain employment with us (General Data Protection Regulation Article 6(1)(b)).
  • Our legitimate interest in sending service messages and conducting surveys, compiling statistics, etc. (GDPR Article 6(1)(f)).
  • Our legitimate interest in ensuring compliance with terms and conditions, including establishing, defending and enforcing legal claims (GDPR Article 6(1)(f)).
  • Our legal obligation to comply with legislation (GDPR Article 6(1)(c)).
  • Our legitimate interest in improving and developing our websites, services and products (GDPR Article 6(1)(f)).
  • Consent for direct marketing, e.g., when subscribing to a newsletter (GDPR Article 6(1)(a)).

Categories of personal data

Personal data that may be collected and processed include:

  • Your digital behaviour from your use of nortec.dk.
  • A unique ID and technical information about your computer, tablet, or mobile phone, your IP address, geographical location and which pages you click on (interests).
  • Personal data in connection with filling out forms on nortec.dk, including name, email address and phone number.
  • Certain personal data may also be collected via cookies when you navigate our website, provided you have given permission. Please refer to our cookie policy.

Categories of recipients

We use a number of third parties for storage and processing of data. These third parties only process information on our behalf and may not use it for their own purposes. Under certain circumstances, we may transfer your personal data to the following recipients as part of fulfilling the above purposes:

  • IT providers for operation and support.
  • Personal data may be disclosed to third parties to a greater extent, e.g., if required under mandatory legal or regulatory requirements or by disclosure to police, courts, lawyers and auditors.

Transfer to recipients in countries outside the EU/EEA

We use the following providers, which may result in the transfer of personal data to countries outside the EU/EEA.

You can read more about the transfer bases in the European Commission’s standard contractual clauses here.

Meta Platforms, Inc.

  • Including Facebook and Instagram: Based in the USA. The transfer basis is as follows: Meta Platforms, Inc. – Standard contractual clauses (GDPR Article 46).

Google, Inc.

  • Including YouTube: Based in the USA. The transfer basis is as follows: Google, Inc. – Standard contractual clauses (GDPR Article 46).

Microsoft Corporation

  • Including LinkedIn: Based in the USA. The transfer basis is as follows: Microsoft Corporation – Standard contractual clauses (GDPR Article 46).

Zendesk Inc.

  • Based in the USA. The transfer basis is as follows: Zendesk Inc. – Standard contractual clauses (GDPR Article 46).

ContentSquare LTD.

  • Including Hotjar: Based in the UK. The transfer basis is as follows: ContentSquare LTD. – Standard contractual clauses (GDPR Article 46).

Storage of personal data

We retain your personal data for as long as it is necessary for our processing purposes.

Read more about the purposes and storage in our cookie policy.

Deletion of personal data

We delete your personal data when we no longer need to process it to fulfill one or more of the purposes listed in the section "Purposes of processing your personal data" above. However, the data may be processed and stored longer in an anonymised form.

Security

We have implemented appropriate technical and organizational security measures to ensure an adequate level of security. Thus, we do our best to ensure the quality and integrity of your personal data.

Withdrawal of consent

You can withdraw any consents you have given at any time. We will then delete your information unless we can continue processing it on another basis. You can unsubscribe from our newsletter by clicking the link at the bottom of the newsletter.

You can also write to us at [email protected] or call us at 70 256 256.

Your rights

Under the General Data Protection Regulation (GDPR), you have several rights concerning our processing of information about you.

If you wish to exercise your rights, please contact us using the contact information provided in the "Data Controllers" section above. When making inquiries regarding your rights, please provide sufficient information – name and email address – so we can handle your request and identify you. We will respond to your request as soon as possible and no later than one month.

Right of access

  • You have the right to access the information we process about you, as well as a range of additional information.

Right to rectification

  • You have the right to have incorrect information about yourself corrected.

Right to erasure

  • In certain cases, you have the right to have information about you deleted before our general deletion occurs.

Right to restriction of processing

  • In certain cases, you have the right to restrict the processing of your personal data. If you have the right to restrict processing, we may only process the information – apart from storage – with your consent, or for the establishment, exercise, or defense of legal claims, or to protect a person or important public interests.

Right to object

  • In certain cases, you have the right to object to our otherwise lawful processing of your personal data. You can read more about your rights in the Danish Data Protection Agency’s guidance on the rights of data subjects, which you can find on the Data Protection Agency's website.

Right to data portability

  • In certain cases, you have the right to receive your personal data and request that the personal data be transferred from one data controller to another.

Complaint to Datatilsynet

You have the right to file a complaint with the Data Protection Agency if you are dissatisfied with the way we process your personal data. You are also welcome to contact us at [email protected] or take legal action in a regular court. You can also file a complaint with:

Datatilsynet

Borgergade 28, 5. Sal

1300 København K

Phone: 33 19 32 00

E-mail: [email protected]

Links to other websites, etc.

Our websites may contain links to other websites or integrated websites. We are not responsible for the content of other companies' websites or their practices in collecting personal data. When you visit other websites, you are encouraged to read the owner's privacy policy and other relevant policies.

Use of social media

We use social media as part of our general branding of Nortec. We use the following social media platforms: Facebook, Instagram, LinkedIn, YouTube and Vimeo.

You can contact us via these social media platforms, and in connection with responding to your inquiries, we will process your personal data to the extent it is included in your inquiry. Depending on your behaviour on our social media pages, both we and the social media platform may collect the following information about you when you visit Nortec's pages:

  • Whether you "follow" Nortec's pages.
  • Comments you leave on Nortec's pages and comments in which you tag Nortec.
  • That you have visited Nortec's pages.

Changes to this privacy policy

We reserve the right to change this privacy policy due to changes in legislation, new technical solutions, new or improved features, and to enhance the website.