Privacy policy

Netsecurity takes privacy seriously

Updated 14.11.2023

About the privacy policy

This privacy policy applies to Netsecurity AS (also referred to as "we" or "us"). We have the role of data controller with regard to the processing of personal data described in this privacy policy. Contact information for Netsecurity AS for questions or inquiries related to privacy, see section 5.

Categories of data subjects

• The privacy policy describes our processing of personal data, related to the following categories of data subjects:
• Contacts and employees of our business customers.
• Contacts and other private individuals who have consented to direct marketing communications.
• Other private individuals who use the services Netsecurity offers.
• Job applicants
• Assignments and deliveries
• Digital security services
  
  

2. Purposes, types of personal data and legal basis

Below we have listed the purposes for our processing of personal data, the types of personal data we process, and the legal basis for such processing.

2.1 Direct marketing

With the active consent of our customers and contacts, we will collect personal data in connection with the distribution of our newsletter and other relevant marketing communications. Newsletters or other mailings to customers and contacts will contain information about our products, services, professional articles, seminars, webinars, events and courses. In this context, we will process the following personal data:

• Name/name of contact
• E-mail address
• Phone number/phone number
• Employer's name
• Title of contact

The processing of personal data in connection with our distribution of marketing communications is based on contact consent and complies with Article 6(1)(a) of the General Data Protection Regulation.

2.2 Processing of personal data in connection with registration for our seminars, webinars, events and courses

In order to fulfill our contractual obligations in connection with your registration for our seminars, webinars, events and courses, it is necessary for us to process some of your personal data. In this context, we will process the following data:

• Name/name of contact
• E-mail address
• Phone number/phone number
• Employer's name
• Job title

The processing of the personal data mentioned above is necessary in order to participate in the relevant seminar, webinar, event or course. We only process personal data provided by you in the registration form. The processing is necessary for us to be able to fulfill our agreement with you as a customer, see Article 6(1)(b) of the GDPR, and also serves a legitimate purpose, see Article 6(1)(f) of the GDPR.

2.3 Processing of personal data when we communicate directly with you

We will also process personal data about you in connection with daily case management. This is necessary in order to provide you with a satisfactory customer experience in relation to our products, services, seminars, webinars, events and courses. In this context, we will process the following personal data:

• Name/name of contact
• E-mail address
• Phone number/phone number
• Employer's name
• Your title
  

Processing of personal data in connection with your correspondence with us serves a legitimate purpose, see Article 6(1)(f) of the General Data Protection Regulation.

2.4 Job applicants

We process personal data about you in connection with job advertisements and your application for a job. Job applicants receive direct information about which processes they are to participate in and where/how their personal data is processed. For more information about storage and deletion, see section 4.

• Name and address
• Your address
• E-mail address
• Telephone number
• Application/CV
• Certificates/transcripts
• Statements from references
• Background check
• Internal assessments/interview records
• Personality and ability tests
• Presentation videos
  
  

2.5 Assignments and deliveries

Netsecurity has no vested interest in collecting or processing personal data in connection with assignments and deliveries, but will in some cases process personal data as part of an assignment or delivery. This includes the following areas:

• Consulting services
• Consulting services
• Product sales

The handling of personal data in connection with assignments and deliveries is regulated in the individual assignment agreement.

2.6 Digital Security Services

Netsecurity Digital Security Services delivers services that actively contribute to reducing and managing risks associated with digitization. The services include:

• Security Monitoring (MDR)
• Netsecurity Incident Response Team (IRT)

In connection with the delivery of Digital Security Services, Netsecurity may collect and process information related to devices, users or services to the extent necessary to deliver the services in accordance with the individual service agreement. The handling of personal data is regulated in the legal terms and associated data processing agreement for the individual service agreement, with Netsecurity as data processor.

2.7 Cookies (cookies )

We use cookies to gain insight into user interactions on our websites.A cookie is a text file that is stored on the user's computer when the user opens a website. Cookies are used, among other things, to recognize the websites the user visits, improve the websites and customize offers on products and services.

Read more here about our cookies

When you as a user visit our websites, you will be asked to either accept or decline the use of cookies. You can withdraw your consent to the use of cookies at any time. If you do not want cookies to be stored, you can change the settings in your browser. You can also delete existing cookies. If you choose to delete or not accept cookies, you may experience reduced functionality on our websites.

The use of cookies is regulated in section 2-7b of the Norwegian Electronic Communications Act and associated regulations.

3. Partners with whom we share personal data

We do not sell, trade or otherwise transfer your personal data to third parties. Exceptions are trusted third parties that help to operate our websites and business (e.g. Hubspot, the marketing agency Twoday AS and selected recruitment companies), to deliver ordered goods, provide service or service. Access to personal data is then limited to personnel who need access to perform their tasks. Data processing agreements have been entered into that require our partners, such as IT service providers, to work in a structured, risk-based manner, with continuous improvement and have an adequate level of privacy and information security.

4. Storage of personal data

Personal data for which Netsecurity is the data controller will not be stored in our CRM and ERP systems for longer than is necessary to fulfill the purpose of the processing or statutory obligations to which Netsecurity is subject.

5.Your rights

As a data subject, you have the right to ask us for access to the personal data we have registered about you for which Netsecurity is the data controller. You can also request correction, deletion and restrictions in the processing of personal data in accordance with personvern@netsecurity.no.

If you are still dissatisfied, you also have the right to lodge a complaint with the Norwegian Data Protection Authority as supervisory authority.

The processing of personal data in connection with the exercise of the data subject's rights is governed by Articles 15-22 and 77 of the General Data Protection Regulation.

6. Information security

Netsecurity's management system is certified in accordance with the quality and security standards ISO 9001 and ISO 27001. Netsecurity has implemented organizational and technical measures to ensure that your personal data is processed securely and in accordance with the requirements for integrity, confidentiality and availability in applicable privacy legislation. The information security of our IT systems is regularly assessed through risk management, internal and external audits. Assessments related to the level of data protection are carried out if personal data can be transferred to countries outside the EU/EEA. Where our processing involves the transfer of personal data out of the EU/EEA, we take measures to protect the personal data.

7. Changes to the privacy policy

We may make adjustments to this privacy policy. Comprehensive changes are published as news. The latest version is available on our website.

8. How to contact us

At Netsecurity, we are concerned with privacy and information security, every day. If you have any questions about privacy and the processing of your personal data, these should be directed to Netsecurity's privacy contact, by e-mail: personvern@netsecurity.no or by letter: Netsecurity AS, Drammensveien 288, 0283 OSLO. We will respond to your inquiry as quickly as possible.