Privacy policy

PRIVACY POLICY
northernhorizon.no

This Privacy Policy aims to provide you with information on how your personal data is processed during your visits to our website, as well as when you contact our company or use our services. It serves to provide you with the information mentioned in Article 13 of the Regulation (EU) 2016/679 of the European Parliament and of the Council of 27 April 2016 on the protection of natural persons concerning the processing of personal data and on the free movement of such data and repealing Directive 95/46/EC (“GDPR“). This Privacy Policy is informative and does not impose any obligations on you (it is not a regulation or a contract).

Who is the controller of your personal data?

1. The controller of your personal data is Northern Horizon AS, Hovedveien 27, 9760 Nordvågen.
2. For any matters related to personal data protection, you can contact us via email at: [email protected]

How do we ensure the security of your personal data?

1. Your personal data is processed in accordance with the Regulation (EU) 2016/679 of the European Parliament and of the Council of 27 April 2016 on the protection of natural persons concerning the processing of personal data and on the free movement of such data and repealing Directive 95/46/EC (“GDPR“) and other currently applicable data protection laws.
2. We apply the required technical and organizational measures by national and EU law to ensure the protection of processed personal data and secure personal data from unauthorized access, unauthorized acquisition, processing in violation of the regulations, and alteration, loss, or destruction.
3. Providing personal data is voluntary but necessary to use the functionalities of the website that require it, as well as to conclude a contract related to the use of our services and issue accounting documents related to the concluded contract.
4. In situations where the basis for processing personal data is consent, its absence will prevent us from taking action to which this consent relates. You can withdraw your consent at any time; however, this will not affect the legality of processing your personal data based on consent before its withdrawal.

For what purpose and on what basis do we process your personal data, and how long will we store it? 

We process your personal data primarily to provide the services we offer and perform the contracts concluded this way, as well as to take actions before their conclusion. We also process your personal data to provide electronic services related to your use of our website. Your personal data may be processed for the following purposes:

1. Provision of services

Your personal data provided by you in connection with using our company’s services (in particular: first name and last name, address [street, building number, apartment number, city, country], email address, phone number, and in the case of entrepreneurs, also the company name and address and VAT number) is or may be processed by us for the following purposes and on the following legal bases:

1. performance of the service and execution of the concluded contract, as well as taking actions at your request before its conclusion (Article 6(1)(b) GDPR),
2. possible determination, pursuit, or defense against claims that may arise from your use of our services, as well as other purposes (e.g., archiving for evidence purposes), which constitute our legitimate interest (Article 6(1)(f) GDPR),
3. issuing and storing accounting documents and considering possible complaints, according to applicable regulations (Article 6(1)(c) GDPR).

We will process your personal data for the duration of the contract unless further data storage is required by generally applicable laws (e.g., tax, accounting regulations) or is justified by the statute of limitations or our overriding interest resulting from the exercise of legitimate interests. In each case, the longer personal data storage period will prevail.

2. Electronic services

Your personal data provided by you or other data collected in connection with your use of our website (such as, in particular: your IP address, request URL, device identifier, time spent on individual pages, browser type, browser language, date and time of website use, screen resolution, operating system type and version), is or may be processed by us for the following purposes and on the following legal bases:

1. provision of electronic services based on the electronic services contract, as well as taking actions at your request before concluding the contract (Article 6(1)(b) GDPR),
2. possible determination, pursuit, or defense against claims that may arise from your use of our website, as well as other purposes (e.g., archiving for evidence purposes), which constitute our legitimate interest (Article 6(1)(f) GDPR).

We will process your personal data for the duration of the electronic services provision, unless further data storage is justified by the statute of limitations or generally applicable laws or is justified by our overriding interest resulting from the exercise of legitimate interests. In each case, the longer personal data storage period will prevail.

3. Marketing and website analytics

Your personal data provided by you or other data collected in connection with your use of our website, is or may be processed by us for the following purposes and on the following legal bases:

1. marketing our services, which constitutes our legitimate interest in conducting marketing activities (Article 6(1)(f) GDPR), provided that sending commercial information or direct marketing using telecommunications terminal equipment and automatic calling systems is only possible with your prior consent (granting this consent is voluntary but necessary for sending commercial information). In such cases, the basis for processing personal data may also be your consent (Article 6(1)(a) GDPR)
2. creating summaries, analyses, and statistics, including reporting, service development planning, development works, creating statistical models, which constitute our legitimate interest in improving and developing the website (Article 6(1)(f) GDPR),
3. possible determination, pursuit, or defense against claims that may arise from your use of our website, as well as other purposes (e.g., archiving for evidence purposes), which constitute our legitimate interest (Article 6(1)(f) GDPR).

Our marketing activities may involve presenting you with offers and advertisements tailored to you based on profiling (e.g., based on your activity on our website), allowing us to better tailor the offer to specific groups of our customers and your preferences. However, our marketing activities do not significantly affect you, and we believe that displaying personalized ads is more beneficial than presenting an offer unrelated to customer needs. Your personal data for marketing activities conducted based on consent will be processed until its withdrawal, while for marketing activities conducted based on a legitimate interest, until an objection is raised, unless further storage (in both cases) is justified by the statute of limitations or generally applicable laws or justified by our overriding interest resulting from the exercise of legitimate interests.

4. Newsletter

Your personal data provided by you in connection with subscribing to the Newsletter is or may be processed by us for the following purposes and on the following legal bases:

1. provision of the Newsletter service based on the regulations, consisting of sending commercial information to the email address provided by you (Article 6(1)(b) GDPR),
2. possible determination, pursuit, or defense against claims that may arise from your use of the website, as well as other purposes (e.g., archiving for evidence purposes), which constitute our legitimate interest (Article 6(1)(f) GDPR).

We will process your personal data for the duration of the Newsletter subscription, unless further data storage is justified by the statute of limitations or generally applicable laws or is justified by our overriding interest resulting from the exercise of legitimate interests. In each case, the longer personal data storage period will prevail.

5. Email or phone contact

Your personal data provided by you in connection with email or phone contact (i.e., data necessary to establish and maintain contact), as well as collected during further communication, is or may be processed by us for the following purposes and on the following legal bases:

1. responding to email or phone contact, which constitutes our legitimate interest (Article 6(1)(f) GDPR),
2. taking actions at your request before concluding a contract if the communication concerns this (Article 6(1)(b) GDPR),
3. possible determination, pursuit, or defense against claims that may arise from your use of the website, as well as other purposes (e.g., archiving for evidence purposes), which constitute our legitimate interest (Article 6(1)(f) GDPR).

We will process your personal data until the correspondence is conducted, unless further data storage is justified by the statute of limitations or generally applicable laws or justified by the overriding interest of the Controller resulting from the exercise of legitimate interests. In each case, the longer personal data storage period will prevail.

What are cookies?

1. The website uses cookies and similar functionalities. Cookies are saved on the end device of the person visiting the website. Each person visiting the website can choose the scope of cookies and then give their consent within the so-called cookie banner displayed during the first visit to the website.
2. Cookies are IT data, in particular, text files, stored on the end device of the person visiting the website and intended for using the website. Cookies usually contain the name of the website they come from, the storage time on the end device, and a unique number.
3. Cookies are primarily used to ensure the proper functioning of the website. Depending on the scope of cookies chosen by the person visiting, cookies may also be used for other purposes, such as creating statistics that help understand how users use the websites, enabling the improvement of their structure and content, as well as for marketing purposes, including reaching the visitors with advertising messages who previously visited the website while using other websites or social media (in this regard, cookies of third parties, i.e., the providers of tools used for this purpose by the Controller, may also be used).
4. Depending on the scope of cookies, they collect different types of information, which generally do not constitute personal data. However, some information collected this way, depending on the type of cookies, may include information allowing the identification of the person visiting the website, particularly when combined with other data. This applies primarily to cookies that require the consent of the person visiting the website. The other provisions of the Privacy Policy, including, in particular, the rights of the person concerned, apply to such information.
5. Detailed information on the scope and types of cookies used on the website can be found within the cookie banner displayed during the first visit to the website, as well as by clicking the button with the “bitten cookie with a Y letter” icon in the lower left corner of the website. In the same way, the person visiting the website can change their cookie preferences at any time, including withdrawing previously given consents, without affecting the legality of actions taken based on consent before its withdrawal.
6. To ensure the proper functioning of the website, cookies are used based on Article 173(3)(2) of the Telecommunications Law. In other cases, obtaining and storing information using cookies is based on the consent of the person visiting the website, given within the cookie banner displayed during the first visit to the website or due to changes in settings after clicking the “Cookie settings” button. This consent also includes transferring the data collected this way to providers of marketing and analytical tools.
7. Where cookies may contain information constituting personal data, the basis for processing is the Controller’s legitimate interest (Article 6(1)(f) GDPR), such as examining and analyzing traffic on the website to conduct statistics, as well as conducting marketing activities by the Controller or third parties. Where these third parties have direct access to such information, the legal basis for such processing will be the legitimate interest of these third parties or separate consent given by the person visiting (e.g., within the privacy settings of the social media). Where the information collected within the cookies is necessary for the proper provision of electronic services on the website, the basis for processing such information is Article 6(1)(b) GDPR.
8. Depending on the purposes and legal basis for processing personal data, the information collected through cookies may be stored for different periods. Information on the storage period of information collected by individual cookies can be found within the cookie banner displayed during the first visit to the website, as well as at any time after clicking the “Cookie settings” button. If the information collected within cookies constitutes personal data, it will generally be stored until an objection is raised. Personal data may also be stored until the statute of limitations or for the time required by law. In each case, the longer personal data storage period will prevail.
9. The website uses marketing and analytical tools from other providers who use cookies on the website (third-party cookies). The providers of these tools are the entities listed in the following point. More information about the cookies of these entities can be found in their privacy policies. Cookies from these third parties, who may be independent controllers or act as joint controllers with the Controller, may be stored on the end device of the person visiting the website.
10. The website uses marketing and analytical tools provided by the following entities, using external cookies and similar technologies:
    • Google Ireland Limited (Google Ads, Google Analytics, Google Tag Manager, Google Merchant Center, reCaptcha, etc.) – https://business.safety.google/privacy/,
    • CookieYes – https://www.cookieyes.com/privacy-policy/

11. Some of the above-mentioned providers may store User data outside the European Economic Area. In such cases, your data will be transferred only to countries that provide an adequate level of protection, and to countries that do not provide an adequate level of protection, only if appropriate safeguards are ensured, including, among others, based on standard contractual clauses adopted by the European Commission.
12. The website also uses additional Google Analytics features (Google Analytics Advertising Features). You can change this through the settings of your web browser and the settings of your Google ad preferences.
13. The website uses Google Consent Mode in the Advanced version, meaning that anonymous user data of the website (devoid of cookies) is used for conversion modeling.

What are your rights?

In connection with our processing of your personal data, you have several rights. You can exercise each of these rights by contacting us via email or post at the address specified in point 2 of the section “Who is the controller of your personal data?”.

You have the right to:

1. access your personal data and request their rectification, deletion, and restriction of processing. To the extent that the basis for processing is our legitimate interest, you have the right to object to the processing of your personal data,
2. to the extent that the basis for processing your personal data is consent, you have the right to withdraw consent. Withdrawal of consent does not affect the legality of processing based on consent before its withdrawal,
3. to the extent that the basis for processing your personal data is consent or contract, you also have the right to data portability, i.e., to request that we provide you with your personal data in a structured, commonly used format,
4. lodge a complaint with the President of the Office for Personal Data Protection (ul. Stawki 2, 00-193 Warsaw), in any case where you believe that the processing of personal data violates your rights.

To whom do we disclose your personal data?

Your personal data may be transferred to entities authorized to receive personal data based on legal regulations, as well as to entities to whom we entrust data based on contracts related to the operation of our website, including, among others, hosting services, marketing services, and IT system delivery services, and in the case of data processing related to contract conclusion, also to entities providing software for issuing accounting documents and to the accounting office. We may also transfer your personal data to providers of tools used for conducting analytical research, creating statistics, tracking traffic on our website, and marketing automation.

In certain cases, we use Google reCAPTCHA within our website to avoid the use of text fields by automated bots. For this reason, Google Ireland Limited may obtain information about the user’s IP address.

Some service providers may store your data outside the European Economic Area. In such cases, your data will be transferred only to countries that provide an adequate level of protection, and to countries that do not provide an adequate level of protection, only if appropriate safeguards are ensured, including, among others, based on standard contractual clauses adopted by the European Commission.