This privacy policy describes ENVE AS ("ENVE")'s processing of personal data as the data controller, and helps you to understand what rights you have as a data subject in this regard. The privacy policy will change from time to time, and the current version will always be available on ENVE's website.
ENVE also processes personal data as a data processor, on behalf of companies that are customers and use ENVE's software platform. Such processing is subject to ENVE's data processing agreement with the respective customers and the customers' own privacy statements.
ENVE processes personal data about people who register user accounts on the software platform ENVE offers via its website, in order to offer its services and login to the platform. The personal data may, for example, include name, e-mail address, telephone number, employer/company affiliation, role, login metadata (IP address, information about the browser used, login time, geolocation, etc.) If a user chooses to register and log in to ENVE's software platform via third parties, such as Vipps, some of the personal data may be collected from there. The legal basis for this processing is ENVE's legitimate interest in providing its services and fulfilling agreements with its customers, cf. GDPR Article 6(1)(b).
If you subscribe to newsletters or marketing material, ENVE will use your registered personal data to keep you up to date on product updates, customer events and other business-related news. The personal data may, for example, include your name, e-mail address, employer/company affiliation and role. The processing basis for this is your consent, cf. GDPR Article 6(1)(a), or, if you are a registered user of ENVE's software platform, ENVE's legitimate interest in keeping users informed and updated about ENVE's services, cf. GDPR Article 6(1)(f).
ENVE may use personal data from willing customers and users in connection with the publication of references or similar on ENVE's website and in other channels. The personal data may, for example, include name, employer/company affiliation and role. The processing basis for this is your consent, cf. GDPR Article 6(1)(a).
ENVE processes personal data about potential customers or customer representatives for marketing and sales purposes. The personal data may, for example, include name, e-mail address, telephone number, employer/company affiliation. The processing basis for this is ENVE's legitimate interest in marketing its business and services to potential customers, cf. GDPR Article 6(1)(f).
ENVE processes personal data that is necessary to maintain normal operations and business-related communication, e.g. in connection with support, contact with suppliers and customers, contact with potential candidates for employment, etc. The personal data may include e.g. name, e-mail address and contact information, employer/company affiliation and role. Depending on the person ENVE communicates with, and what the communication concerns, the basis for processing will be ENVE's performance of a contract, cf. GDPR Article 6(1)(b), or ENVE's legitimate interest in maintaining business-related communication, cf. GDPR Article 6(1)(f).
ENVE uses third party service providers to deliver its services and will share personal data with these third parties. The third parties used at any given time are listed here. Beyond this, ENVE will not share personal data with third parties, unless it follows from an agreement or instruction or is necessary to comply with legal obligations, cf. GDPR Article 6(1)(c).
ENVE will implement appropriate technical and organizational measures to achieve a level of security appropriate to the risk, in accordance with Article 32 GDPR. The personal data processed under this privacy policy will be stored for as long as is necessary for the processing purposes set out above.
ENVE's processing of personal data takes place in accordance with applicable data protection legislation, including the Personal Data Act and GDPR, under which data subjects have certain rights.
As a data subject, you can request information about and access to all personal data ENVE processes about you. You may also request rectification and erasure of your personal data, restriction of processing and transmission of the personal data to you in a machine-readable format.
When ENVE's processing of personal data is based on your consent, you may withdraw your consent at any time. The withdrawal of consent will not affect the lawfulness of the processing carried out before the consent was withdrawn.
If you believe that ENVE has not complied with your rights under applicable data protection legislation, you can complain to the Norwegian Data Protection Authority.
Any questions about your rights under this privacy policy can be directed to kontakt@enve.no
