Privacy policy
Introduction
This privacy policy describes Dillien AS ("Dillien")'s processing of personal data as the data controller, and helps you to understand what rights you have as a data subject in this regard. The privacy policy will change from time to time, and the current version will always be available on Dillien's website.
Dillien also processes personal data as a data processor, on behalf of companies that are customers and use Dillien's software platform. Such processing is subject to Dillien's data processing agreement with the respective customers and the customers' own privacy statements.
Personal data, purpose and basis for processing
Personal data processed to provide Dillien's services
Dillien processes personal data about people who register user accounts on the software platform Dillien offers via its website, in order to offer its services and login to the platform. The personal data may, for example, include name, e-mail address, telephone number, employer/company affiliation, role, login metadata (IP address, information about the browser used, login time, geolocation, etc.) If a user chooses to register and log in to Dillien's software platform via third parties, such as Vipps, some of the personal data may be collected from there. The legal basis for this processing is Dillien's legitimate interest in providing its services and fulfilling agreements with its customers, cf. GDPR Article 6(1)(b).
Personal data processed for marketing and sales purposes
If you subscribe to newsletters or marketing material, Dillien will use your registered personal data to keep you up to date on product updates, customer events and other business-related news. The personal data may, for example, include your name, e-mail address, employer/company affiliation and role. The processing basis for this is your consent, cf. GDPR Article 6(1)(a), or, if you are a registered user of Dillien's software platform, Dillien's legitimate interest in keeping users informed and updated about Dillien's services, cf. GDPR Article 6(1)(f).
Dillien may use personal data from willing customers and users in connection with the publication of references or similar on Dillien's website and in other channels. The personal data may, for example, include name, employer/company affiliation and role. The processing basis for this is your consent, cf. GDPR Article 6(1)(a).
Dillien processes personal data about potential customers or customer representatives for marketing and sales purposes. The personal data may, for example, include name, e-mail address, telephone number, employer/company affiliation. The processing basis for this is Dillien's legitimate interest in marketing its business and services to potential customers, cf. GDPR Article 6(1)(f).
Personal data processed for operational and communication purposes
Dillien processes personal data that is necessary to maintain normal operations and business-related communication, e.g. in connection with support, contact with suppliers and customers, contact with potential candidates for employment, etc. The personal data may include e.g. name, e-mail address and contact information, employer/company affiliation and role. Depending on the person Dillien communicates with, and what the communication concerns, the basis for processing will be Dillien's performance of a contract, cf. GDPR Article 6(1)(b), or Dillien's legitimate interest in maintaining business-related communication, cf. GDPR Article 6(1)(f).
Third parties and sharing of personal data
Dillien uses third party service providers to deliver its services and will share personal data with these third parties. The third parties used at any given time are listed here. Beyond this, Dillien will not share personal data with third parties, unless it follows from an agreement or instruction or is necessary to comply with legal obligations, cf. GDPR Article 6(1)(c).
Information security and retention time
Dillien will implement appropriate technical and organizational measures to achieve a level of security appropriate to the risk, in accordance with Article 32 GDPR. The personal data processed under this privacy policy will be stored for as long as is necessary for the processing purposes set out above.
Your rights
Dillien's processing of personal data takes place in accordance with applicable data protection legislation, including the Personal Data Act and GDPR, under which data subjects have certain rights.
As a data subject, you can request information about and access to all personal data Dillien processes about you. You may also request rectification and erasure of your personal data, restriction of processing and transmission of the personal data to you in a machine-readable format.
When Dillien's processing of personal data is based on your consent, you may withdraw your consent at any time. The withdrawal of consent will not affect the lawfulness of the processing carried out before the consent was withdrawn.
If you believe that Dillien has not complied with your rights under applicable data protection legislation, you can complain to the Norwegian Data Protection Authority.
Any questions about your rights under this privacy policy can be directed to contact@dillien.com
