Privacy policy
1. Introduction
This privacy policy describes how Dillien AS ("Dillien") processes personal data as the data controller, and helps you understand what rights you have as a data subject in this regard. The privacy policy will change from time to time, and the current version will always be available on Dillien's website.
Dillien also processes personal data as a data processor on behalf of companies that are customers and use Dillien's software platform. Such processing is subject to Dillien's data processing agreement with the respective customers and the customers' own privacy policies.
2. Personal data, purposes, and legal bases for processing
2.1 Personal data processed to provide Dillien's services
Dillien processes personal data about people who register user accounts on the software platform Dillien offers via its website, in order to provide its services and enable login to the platform. The personal data may include name, email address, telephone number, employer/company affiliation, role, and login metadata (IP address, information about the browser used, login time, geolocation, etc.). If a user chooses to register and log in to Dillien's software platform via third parties, such as Vipps, some of the personal data may be collected from there. The legal basis for this processing is Dillien's legitimate interest in providing its services and fulfilling agreements with its customers, cf. GDPR Article 6(1)(f).
2.2 Personal data processed for marketing and sales purposes
If you subscribe to newsletters or marketing material, Dillien will use your registered personal data to keep you updated on product updates, customer events, and other business-related news. The personal data may include your name, email address, employer/company affiliation, and role. The legal basis for this processing is your consent, cf. GDPR Article 6(1)(a), or, if you are a registered user of Dillien's software platform, Dillien's legitimate interest in keeping users informed and updated about Dillien's services, cf. GDPR Article 6(1)(f).
Dillien may use personal data from willing customers and users in connection with the publication of references or similar content on Dillien's website and in other channels. The personal data may include name, employer/company affiliation, and role. The legal basis for this processing is your consent, cf. GDPR Article 6(1)(a).
Dillien processes personal data about potential customers or customer representatives for marketing and sales purposes. The personal data may include name, email address, telephone number, and employer/company affiliation. The legal basis for this processing is Dillien's legitimate interest in marketing its business and services to potential customers, cf. GDPR Article 6(1)(f).
2.3 Personal data processed for operational and communication purposes
Dillien processes personal data that is necessary to maintain normal operations and business-related communication, e.g. in connection with support, contact with suppliers and customers, contact with potential candidates for employment, etc. The personal data may include name, email address and contact information, and employer/company affiliation and role. Depending on the person Dillien communicates with, and what the communication concerns, the legal basis for processing will be Dillien's legitimate interest in maintaining business-related communication, cf. GDPR Article 6(1)(f).
3. Third parties and sharing of personal data
Dillien uses third-party service providers to deliver its services and will share personal data with these providers as necessary to operate and improve our platform. Beyond this, Dillien will not share personal data with third parties, unless it follows from an agreement or instruction, or is necessary to comply with legal obligations, cf. GDPR Article 6(1)(c).
4. Information security and retention time
Dillien will implement appropriate technical and organizational measures to achieve a level of security appropriate to the risk, in accordance with GDPR Article 32. The personal data processed under this privacy policy will be stored for as long as is necessary for the processing purposes set out above.
5. Your rights
Dillien processes personal data in accordance with applicable data protection legislation, including the Personal Data Act and the GDPR, under which data subjects have certain rights.
As a data subject, you can request information about, and access to, all personal data Dillien processes about you. You may also request rectification and erasure of your personal data, restriction of processing, and transmission of the personal data to you in a machine-readable format.
When Dillien's processing of personal data is based on your consent, you may withdraw your consent at any time. The withdrawal of consent will not affect the lawfulness of the processing carried out before the consent was withdrawn.
If you believe that Dillien has not complied with your rights under applicable data protection legislation, you can complain to the Norwegian Data Protection Authority.
Any questions about your rights under this privacy policy can be directed to privacy@dillien.com
