Introduction
First of all, we do not sell your personal data to anyone.
Personal information or personal data is information that may be connected to you as a physical person. It may be your name and contact information, but it may also be other information that identified with you as a physical person.
Abinfa is, in it’s present organization, being operated by one private person as a leisure time activity, at the moment probably not bound by the EU General Data Protection Regulation. We do however think that the regulation represents a good principle and strive to follow the regulation. We can not guarantee the response times or the service level required by the regulation as the regulation is followed on a voluntary basis. This Privacy Notice is written to also cover the event that Abinfa should develop into a professional organization, and the wording in the Privacy Notice may reflect this.
For Abinfa, every individual’s right to protection of their personal integrity is vital, and awareness of the duty of Abinfa’s confidentiality as well as integrity is a natural part of day-to-day business. When we design and develop our products and services, we have put in place technical, physical and organizational controls to protect the confidentiality, integrity and availability of your personal data and the information we hold and process about you. Abinfa respects your privacy and will strive to process any personal data according to the EU General Data Protection Regulation (GDPR). This Privacy Statement is intended to help you understand what data we collect, why we collect it, and what we do with it, as well as your choices regarding use, access and correction of personal information.
The processor
Abinfa is the controller for it’s personal data processing.
How we collect personal data
The personal data that we process are usually collected from you when you buy our products and services, contact us or visits our premises or web site.
In order to offer you products and services we may also collect data from other sources like public registers, other customers, agents, distributors and media.
What kind of personal data we collect
The kind of personal data we collect depends on your relation to us. Typical relations are customer, potential customer, supplier, partner and distributor.
The following are examples of which kind of personal data we collect:
- Basic information like name, address and e-mail.
- Identifying information like customer number and IP address.
- License number and service number.
- Personal preferences like consent.
How we use personal data
Sales and marketing
When you buy licenses, products or services from us, we collect data about you as a customer in order to sell the licenses, products or services to you, manage the relationship with you and give you as a customer a good experience.
You will receive marketing communications if you have requested such information, purchased goods or services from us, or if you have given your consent to receive marketing communications from us.
We collect and use personal data through our web sites. This may include data collected by cookies, online forms, surveys and posts where you freely give us your personal data.
Business relations
We process personal data to support and manage customer, supplier, distributor and partner relationships. This is done mainly to prepare for or execute contracts.
Recruitment
If you apply for a position with us, we will collect and use the personal data you provide us with in order to handle your application.
For some positions we will, with your consent, conduct background checks of candidates as part of our recruitment process.
Security
We have implemented various security measures that requires processing of personal data. This is to protect us against illegal or unauthorized access to systems, processes, equipment, rooms, buildings or areas.
Events
We may handle the registration for an event in which Abinfa is the organizer or sponsor in order to organize the event.
Fulfill legal obligations and legal proceedings
Abinfa have various legal obligations that necessitate processing of personal data, like obligations relating to tax and accounting.
We may also process personal data in relation to legal proceedings.
Basis and purpose for processing
Abinfa is processing personal data for specific purposes, and only when we have a valid basis for the processing. Examples of typical basis’s and purposes are:
To enter into or fulfill a contract
The overall purpose of Abinfa collecting, processing and holding personal data is in order to prepare, provide and administer the products and services we offer you. We process personal data if it is necessary in order to enter into an agreement or fulfill a contract with you. This may be selling, delivering and supporting licenses, products and services.
Legitimate interests
Abinfa is processing personal data when it is necessary in order to safeguard our legitimate interests of our business and any applicable legal requirements relating to this. Such interests may be implementing appropriate security measures, safeguarding our legal rights, protect against legal claims and analysis of use in order to develop and offer our products and services, including developing our relationship with our customers together with our partners.
Consent:
Sometimes Abinfa is processing personal data based on your consent. Examples of this is sending you marketing material in digital channels or marketing material from our partners. We also collect your consent in order to use information about customer relationships to offer more relevant marketing. We use cookies when you visit our web site in order to offer you a better user experience, discover potential for improvement and make sure that our services on our web site are working.
You can withdraw your consent at any time. Withdrawing you consent will not affect the lawfulness of the processing based on the consent prior to your withdrawal.
Legal obligations
Abinfa is subject to a number of legal obligations that require us to process personal data. By legal obligation we mean requirements that follow from law, regulations or government decisions. Typical examples of this is tax and accounting.
These websites may collect data about you, use cookies, embed additional third-party tracking, and monitor your interaction with that embedded content, including tracking your interaction with the embedded content if you have an account and are logged in to that website.
Who we share your personal data with
Abinfa only shares personal data with in accordance with applicable data protection law.
We do not sell your personal data to anyone.
We may share your personal data with:
- Other companies in the same ownership structure. We only share neutral data like name, contact information and products or services within the ownership structure.
- Our partners and suppliers if they provide parts of the products or services we deliver to you, or if they may increase the value of these products or services to you.
- Public authorities and private entities (e.g. financial institutions) as mandated by law.
If you reside outside the EU/EEA, we may have to transfer data outside the EU/EEA in order to sell and deliver products or services or you.
Use of data processors
A data processor is an entity that processes personal data on behalf of us and in the way that we decide, like a supplier. When we use data processors, we take steps to ensure that your data is processed according to data protection law and our demands.
Retention
We retain your personal data as long as necessary to fulfill our agreement with you or as long as it is necessary to fulfill the purpose of the processing.
Even if our agreement in fulfilled, there are some information that we have to retain longer in order to fulfill statutory obligations. For example, we have to retain information about transactions for five years to fulfill demands in accounting laws. The information will thereafter be deleted within one year. Further, we have the right to retain some information for a period after the customer relationship has been terminated in order to be able to meet possible future claims as a compensation claim. We retain such information until any claims will be obsolete and access to the information will be restricted to a few people.
Transfer to third countries
In some situations, we may transfer personal data to recipients outside the EU/EEA (the European Economic Area) – “third countries”. This mainly occurs when we transfer information or other assets to a recipient in a third country at your request with an agreement as the basis for the transfer. Another situation is when Abinfa is obliged to provide personal data to an authority in a third country.
If we do not have an agreement with you about a transfer to a third country or that includes transfer to a third country, one of the following conditions must be met for us to make a transfer:
- That the European Commission has decided that the third country ensures an adequate level of protection
- That there are other safeguards such as standard data protection clauses or binding corporate rules
- That there is a specific authorisation from a supervisory authority
- That it is permitted under applicable data protection legislation
Information security
Abinfa protects your personal data through technical and organizational security measures. We cannot be specific about how this is done as this would weaken the security. It Is however a priority for us to ensure a sufficiently secure processing of personal data.
Your rights
You can request to be informed what personal data, if any, Abinfa processes about you. You may also request that any excessive personal data we may happen to process is deleted or blocked, and request rectification of any wrongful personal data that we may process. You can also contact the national Data Protection Authority to lodge a complaint, see more information below.
More information
lf you want more information than provided in this policy for example on how your information is used, how we maintain the security of your information, and your rights to access information we hold on you, please contact us by using the contact form provided on www.abinfa.com (use topic: “Data Privacy”). The Norwegian Data Protection Authority can be contacted on www.datatilsynet.no.
Changes and latest version
Abinfa’s Privacy Notice is regularly updated, for example, if new purposes for processing are added or if additional categories of personal data are processed.
The latest version of this document is made available on Abinfa’s website:
Last updated as of 3rd January 2023.