PRIVACY POLICY FOR DNI

In connection with our business, DotNet Internals AS will process personal information. We are concerned with processing personal data in a reassuring and trustworthy manner. Below is a description of the purpose and background for our processing of personal data, what information is processed, rights for those to whom the personal data applies when processing personal data. All processing of personal data takes place in accordance with the current privacy rules, including the Personal Data Act and the Privacy Regulation (GDPR). If you have questions or want to know more about our processing of personal data, you can contact us - see contact information below.


1.Responsible for the processing of personal data

DotNet Internals AS is responsible for processing, ie decides why and how the personal data is to be processed, for processing discussed below.

We may also process personal data in other ways than mentioned below, but then we will inform the personal data that applies in other ways than through this statement.

Our processing as a data controller is based on the business we run and the purpose of our business, see more below about the purpose of processing personal data.

Contact information for data controller:
DotNet Internals AS (DNI)
Martin Linges vei 25
1364 Fornebu, Norway
Email: salg@dni.no
Phone: + 47 63016710
Organization number: 918 772 693


2.Processing of personal data

We collect and use personal information for different purposes depending on who you are and how we get in touch with you. Below is the personal information we process about you, the purpose and the legal basis of the processing, how long we process the personal data, etc.

"Personal information" means all information that can be linked to a natural person (the latter is referred to as "registered").

"Processing" means anything that is done with personal data, such as collection, registration, organization, structuring, storage, adaptation or change, retrieval, consultation, use, disclosure by transfer, dissemination or any other form of making available, compilation or alignment, limitation, deletion or destruction.

We are a data processor, ie we process personal data e.g. for our customers, you will receive information about the treatment from the person responsible for treatment.

2.1 Communication and contact

We process personal information about those who contact us to answer and document the communication and to contact others who are not covered by the processing below in the statement. This applies to all forms of communication, physical and digital, written and oral.

In such cases, we process the name, telephone number, e-mail address and any personal information that may result from the inquiry, including history / logs about the inquiry.

The processing of data is based on the Privacy Ordinance Article 6 (1) f in that we have a legitimate interest in processing the personal data. We have therefore considered that our legitimate interest in having contact with the outside world is part of our business and in documenting the business we run, as well as answering those who contact us and registering such contact. We have assessed that this is necessary for us to handle inquiries we receive, and that the data subjects' privacy is ensured.

It is voluntary to provide us with personal information, but it will be necessary to provide us with the information in order for us to be able to answer inquiries.

We process the information until we expect that there will be no further follow-up of the contact, normally for two years.

2.2 Information and marketing

If you request information or sign up for newsletters, or are an existing customer of ours, we will send out information about our products and services, products for partners, newsletters and other information and marketing. We will then process your name and email address. The treatment takes place on the basis of consent or agreement with you. The processing takes place until you have either received the requested information, have withdrawn your consent or are no longer a customer of ours. Your personal information will then be deleted.

We process the personal data to inform you about services and products that may be of interest to you, and process the personal data on the basis of your consent GDPR Article 6 (1) a. You can withdraw your consent at any time by using any possibilities to cancellation in shipments you receive, or by contacting us.

When sending information about the services you use, which do not contain marketing, this will be done regardless of whether you have consented, and the personal data will then be processed in accordance with GDPR article 6 (1) b by us fulfilling an agreement with you. The purpose of the treatment is then to keep you updated about the services you receive.

2.3 Existing and potential customers, suppliers and partners, etc.

We process personal information about contacts of existing and potential customers (in business relationships), suppliers and other partners for sales and marketing activities, to manage our relationship with suppliers and others, prepare, implement and document services and evaluate the use of services. In these cases, we will process names, contact information, company names and information related to the contact with the company in which the person works.

The processing of personal data is based on the Privacy Ordinance Article 6 (1) f, and we have considered that we have a legitimate interest in managing the relationship with our customers, partners and suppliers, and that and that the processing of this type of data is not so intrusive that the privacy of the persons concerned must override this treatment.

We also store and disclose information where we have a legal obligation to do so, for example in accordance with accounting and tax legislation. We may store information for as long as we believe it may be used, for example to document matters relating to services.

In many cases, it will be necessary for us to obtain personal information in order to enter into agreements with customers and suppliers, among other things to document that an agreement has been entered into. If we do not receive the information we need, we will not be able to enter into agreements.

It is voluntary for the contact persons if they wish to provide us with personal information. If we collect personal information from others, it will mainly apply to contact information (including name, address, telephone number and e-mail address), position, function and employer, as well as any competence and references where relevant. The source for such information will be the contact person's employer, for example from the employer's website. In some cases, we collect references from others to assess the suitability of suppliers and partners.

We store the information until the relationship with the customer, supplier or partner ceases or until the contact person ceases to be the contact person, with the exceptions mentioned above.

2.4 Recruitment

When recruiting for new positions with us, e.g. CV, application, certificates and references are processed. Processing of personal data takes place on the basis of consent that you have given if processing takes place through e.g. recruitment solution, or on the basis of our legitimate interest in recruiting new employees based on the Privacy Ordinance Article 6 (1) f. these interests.

2.5 Events etc.

For participants in events, contact information will be registered and processed as well as which event the person is to attend, so that the person can identify as registered and that the necessary communication and possible invoicing of participation fee can be carried out.

2.6 Use of websites

To obtain information about the use of our websites, we use cookies. You can read more about cookies and which cookies we use at the end of this statement.

We use the information collected to improve the customer experience on websites and services, as well as to offer functionality in the services. We also use the information to provide visitors with recommendations and service adjustments that are as relevant to you as possible. This will both be given on the basis of visitors' behavior, e.g. on the basis of services used, links clicked on, or information read, and on the basis of the behavior of other users with similar usage patterns.

The personal information is also used to improve our websites, and to compile statistics and understand the use of the pages. As far as practicable, we try to do this with anonymous information, without knowing that the information is specifically related to the individual visitor.

We process personal data above on the basis of GDPR Article 6 (1) f. We have assessed it as necessary for us to do so in order to adapt the website to our users. However, we safeguard the privacy of visitors to the website by only using the information for statistics. In these statistics it is not possible to identify individuals. The information will be stored for as long as it is necessary for the purposes mentioned above.

3 Storage and deletion (deletion) of personal data

We store personal information for as long as is necessary for the purpose for which the personal information was collected, and delete the information in accordance with requirements in the regulations. How long we process the individual types of information we process is included in the above where the individual treatments are discussed.

Instead of deleting the personal data, in some cases it may be relevant to anonymise the personal data. By anonymisation is meant that all identifying or potentially identifying characteristics are removed from data sets that are taken care of.

This means, for example, that personal data that we process on the basis of your consent will be deleted if you withdraw your consent. Personal information we process to fulfill an agreement with you is deleted when the agreement is fulfilled and all obligations arising from the contractual relationship are fulfilled, such as. legal obligations related to accounting, follow-up of the customer relationship related to complaints, etc.


4 Processing of personal data as part of services

Customers of us who use our services are responsible for the processing of personal data that is processed when using the services. We will then process personal data on behalf of the customer, and are then the data processor. A data processor agreement has been entered into between us and the customers to regulate our processing of personal data on behalf of the customers.

It is our customers who are then responsible for the treatment (treatment manager), and you must contact our customer to enforce your rights, see above.

The information in this privacy statement will also apply to our processing of personal information about our customers' customers with regard to the disclosure and transfer of personal information and security / technical matters. For deletion of personal information, it depends on when our customer chooses to delete the information. We will never use information or information from our services without this being instructed or approved by our customers.

5 Transfer or disclosure of personal information to others

We do not pass on personal information to others in cases other than those mentioned in this declaration and unless there is a legal basis for such disclosure. Examples of such a basis will typically be an agreement with or consent from the data subject or a legal basis that requires us to release the information. The latter applies to public activities such as tax collection (if necessary), accountant / auditor, as well as others that we need in our business as a bank connection.

We use data processors to collect, store or otherwise process personal information on our behalf. In such cases, we have entered into agreements to safeguard your rights and security for your personal information at all stages of the processing.

If it is required by law or there is a suspicion that a crime has been committed in connection with the use of our services, personal information we have stored about you may be disclosed to public authorities.

If personal data may be subject to transfer to another organization in connection with a merger, financing, reorganization or dissolution transaction of all or part of us, we will only do so if the parties involved have entered into an agreement where the collection, use and sharing of personal data is limited to the purposes of the transaction, including a provision as to whether or not the transaction will proceed, and the personal data shall only be used by the parties involved to complete and complete the transaction. If another company buys us or our business or assets, that company will have access to the personal information collected by us, and will assume the rights and obligations regarding your personal information as described in this privacy statement.


6 Transfer of personal data to recipients in countries outside the EEA

It is an objective for us that all processing of personal data shall be carried out within the EEA, but it may be that we use suppliers or process personal data outside the EEA. In such cases, transfer and processing outside the EEA will take place in countries approved by the EU Commission or in accordance with a valid legal basis for the transfer of personal data according to GDPR Chapter V. If transfer to countries approved by the EU Commission does not take place, guarantees set out in Article 46 (2) of the GDPR. You can be informed of the basis used for the transfer if you contact us.

7 Safety of treatment

We give high priority to the security of personal information in our business and will implement all required technical and organizational measures to secure your personal information. All processing will, if possible, be encrypted, and not available to anyone other than those who need personal information for their tasks.

We handle information so that it is correct, accessible and handled according to the degree of sensitivity of the information. We also use a variety of security technologies and information security procedures to protect your personal information from unauthorized access, use or disclosure. Where necessary, risk assessments are carried out.

We have entered into data processor agreements with all our suppliers who process personal data, where they assume the same degree of security as we have in our processing of personal data.

We restrict access to your personal information to the staff or third parties who process the information on our behalf. These parties are subject to strict confidentiality requirements and we can impose sanctions or terminate the agreement if these requirements are not complied with.

Routines have been established for handling breaches of information security and routines (privacy breaches), and we will, if there are breaches that pose a risk to the privacy of the personal data concerned, send a non-conformance report to the Data Inspectorate as soon as possible and no later than 72 hours after the breach. discovered. If the breach entails a high probability of the privacy of those affected by the breach, we will also notify them .


8 Your rights when we process personal information about you

Below are your rights as registered. In order to exercise your rights, you must [fill in how the registered person must proceed, e.g. contact us, see contact information above].

We will respond to your inquiry to us as soon as possible, and no later than 30 days. If it takes longer than 30 days, you will be notified.

We will ask you to confirm your identity or provide additional information before we allow you to exercise your rights against us. We do this to make sure that we only give access to your personal information to you - and not someone who pretends to be you.

Your rights below apply where we are responsible for processing, see above. Are we a data processor for our customers, and you use services from one of our customers and then this is responsible for the processing of personal data (processing manager). You must then the person you receive the service to exercise your rights related to the processing of your personal data. Your rights will then essentially be as described below.

8.1 Information

You have the right to receive information about the personal information we process about you. Through this statement, we inform you about our processing of personal data. You can also contact us if you want more information.

8.2 Insight

You have the right to demand access to the personal data that is processed about you.

8.3 Change and delete

You can also ask us to correct incorrect information we have about you or ask us to delete personal information. We will as far as possible accommodate a request to delete personal information, but we can not do this if we still need the information.

8.4 Treatment on the basis of consent

If we process personal data on the basis of your consent, you can withdraw the consent at any time. The easiest way to do this is to use the method provided when you gave your consent or contact us.

8.5 The right to restrict or protest against the treatment

You have the right to have the treatment restricted in certain cases, see further in the Privacy Regulation Article 33.

8.6 The right to data portability

For information that you have provided to us and is necessary to carry out an agreement with us, and which is processed automatically (ie not manually by us), you can request that the personal information about you be handed over or transferred to another supplier in a structured, commonly used and machine readable format (data portability).

8.7 Automated decisions, including profiling

No automated decisions will be made as mentioned in GDPR Article 22 paragraphs 1 and 4 based on your personal information.


9 Complaints

If you believe that our processing of personal data is not in accordance with what we have described here or that we in other ways violate the privacy legislation, then you can complain to the Data Inspectorate. However, we ask you to contact us first, so that we can spread any incorrect treatment as soon as possible.

You can find information about your rights and how to contact the Data Inspectorate on the Data Inspectorate's website: 

www.datatilsynet.no.


10 Changes

Should there be a change in our services or changes in the regulations on the processing of personal data, it may lead to a change in the information you have provided here. If we have your contact information, we will notify you of these changes. Otherwise, updated information will always be easily available on our website.

11 Cookies

Dotnet Internals uses cookies, also called cookies, on our website. A cookie is a data file that is stored on your computer, tablet or phone by the website you visit.

Our website uses cookies to optimize the user experience when you visit our website. By using tracking software, we monitor behavior and engagement and can thus adapt the experience of the website. We use HubSpot on our website.

By using our website, you consent to our use of cookies. However, you can choose not to allow the use of cookies. However, this may prevent you from accessing certain content on various websites. If you want more information on how to manage the use of cookies in your browser then you will find more information here. (external website)

HubSpot will ask your browser to accept the following cookies (external website). You will be tracked anonymously until you fill in your contact information in one of our forms and agree to marketing from us. The consent means that your contact information is linked to the information that has been tracked anonymously. If you want more information on how this works, you can read more here. (external website).

Our subcontractors in connection with the operation of our website, as well as marketing measures are:

  • HubSpot
  • Facebook
  • LinkedIn

Communication, engagement and actions implemented through external social media platforms are adapted to the terms and conditions, as well as guidelines for privacy for these.

Users are advised to use social media platforms wisely and communicate / engage on them carefully and cautiously with regard to their own privacy and personal information.

Dotnet Internals will never request personal or sensitive information through social media platforms and encourages users who wish to discuss sensitive details to make contact through primary communication channels such as telephone or email.