Privacy Policy

Nordisk Administrasjonsrådgivning AS (“we”, “us”, “our”) is committed to protecting your privacy and processing personal data in a lawful, fair, and transparent manner. This privacy policy explains how we collect, use, disclose, store, and protect personal data when you interact with us, use our services, or visit our website.

1. Introduction and Company Information

This privacy policy applies to the processing of personal data by:

• Company: Nordisk Administrasjonsrådgivning AS
• Address: Dronning Eufemias gate 16, 0191 Oslo, Norway
• Email: [email protected]
• Phone: +47 23 45 78 19
• Business type: Administration

As an administration services provider, we may process personal data in connection with client administration, correspondence, invoicing, contract management, customer support, supplier management, and related business operations.

2. Data Collection and Processing

We may collect and process the following categories of personal data, depending on your relationship with us and the services involved:

• Identification data: name, job title, employer, and contact details.
• Contact data: email address, postal address, and telephone number.
• Contract and business data: agreements, correspondence, service requests, billing information, and communication history.
• Payment and accounting data: invoice details, transaction references, and bookkeeping records.
• Technical data: IP address, browser type, device information, and usage data collected through our website or digital services.
• Other information: any personal data you voluntarily provide to us in communications, forms, or meetings.

We generally collect personal data directly from you, from your employer or organization, from publicly available sources, or from third parties where necessary and permitted by law.

3. Purpose of Data Processing

We process personal data for the following purposes:

• To provide and administer our services.
• To communicate with clients, suppliers, and other business contacts.
• To manage contracts, orders, and customer relationships.
• To issue invoices, process payments, and maintain accounting records.
• To comply with legal obligations, including bookkeeping and tax requirements.
• To improve our services, operations, and internal administration.
• To maintain security, prevent misuse, and protect our rights and interests.
• To handle inquiries, complaints, and requests.

4. Legal Basis for Processing

We process personal data only where we have a valid legal basis. Depending on the context, our legal bases may include:

• Performance of a contract: where processing is necessary to enter into or perform a contract with you or your organization.
• Legitimate interests: where processing is necessary for our legitimate business interests, provided your interests and fundamental rights do not override those interests.
• Legal obligation: where processing is required to comply with applicable laws and regulations.
• Consent: where you have given us clear consent for specific processing activities.

Where we rely on consent, you may withdraw it at any time without affecting the lawfulness of processing carried out before withdrawal.

5. Data Sharing and Third Parties

We may share personal data with third parties where necessary for the purposes described in this policy and in accordance with applicable law. Such recipients may include:

• IT and cloud service providers.
• Accounting, auditing, and bookkeeping service providers.
• Payment processors and financial institutions.
• Professional advisers, including legal and tax advisers.
• Public authorities, where required by law or lawful request.
• Business partners and subcontractors involved in delivering our services.

We require third parties that process personal data on our behalf to protect it appropriately and to process it only according to our instructions and applicable law.

6. Data Transfer to Third Countries

In some cases, personal data may be transferred to or accessed from countries outside the European Economic Area (EEA). If such transfers occur, we will ensure that appropriate safeguards are in place, such as:

• an adequacy decision by the European Commission;
• standard contractual clauses approved by the European Commission;
• other lawful transfer mechanisms permitted under applicable privacy laws.

Where required, we will also implement additional technical and organizational measures to protect your personal data during transfer.

7. Storage Duration

We retain personal data only for as long as necessary to fulfill the purposes for which it was collected, unless a longer retention period is required or permitted by law. Retention periods may depend on:

• the nature of the relationship with you;
• contractual obligations;
• legal, accounting, and tax requirements;
• the need to establish, exercise, or defend legal claims.

When personal data is no longer needed, we will delete, anonymize, or securely archive it in accordance with applicable requirements.

8. User Rights

Subject to applicable law, you may have the following rights regarding your personal data:

• Right of access: to obtain confirmation of whether we process your personal data and to receive a copy of that data.
• Right to rectification: to request correction of inaccurate or incomplete personal data.
• Right to erasure: to request deletion of your personal data in certain circumstances.
• Right to restriction: to request that we limit the processing of your personal data in certain cases.
• Right to data portability: to receive personal data you have provided to us in a structured, commonly used, machine-readable format and, where technically feasible, to have it transmitted to another controller.
• Right to object: to object to processing based on legitimate interests or for direct marketing purposes.

To exercise your rights, please contact us using the details provided below. We may need to verify your identity before responding to your request.

9. Withdrawal of Consent

If we process your personal data based on consent, you may withdraw your consent at any time. Withdrawal of consent does not affect the lawfulness of processing carried out before the withdrawal. To withdraw consent, contact us at [email protected].

10. Right to Complain

If you believe that our processing of your personal data violates applicable privacy laws, you have the right to lodge a complaint with the competent supervisory authority. In Norway, this is the Norwegian Data Protection Authority (Datatilsynet).

We encourage you to contact us first so that we can try to resolve your concerns directly.

11. Data Security

We implement appropriate technical and organizational measures to protect personal data against unauthorized access, loss, alteration, disclosure, or destruction. These measures may include:

• access controls and authentication measures;
• encryption where appropriate;
• secure storage and transmission practices;
• staff confidentiality obligations and training;
• regular review of security procedures and access rights.

Although we strive to protect personal data, no method of transmission or storage is completely secure. We therefore cannot guarantee absolute security.

12. Contact Information

If you have any questions about this privacy policy or our processing of personal data, or if you wish to exercise your rights, please contact us:

• Nordisk Administrasjonsrådgivning AS
• Address: Dronning Eufemias gate 16, 0191 Oslo, Norway
• Email: [email protected]
• Phone: +47 23 45 78 19

13. Changes to Privacy Policy

We may update this privacy policy from time to time to reflect changes in our practices, legal requirements, or operational needs. The updated version will be published with a revised effective date where appropriate. We encourage you to review this policy periodically to stay informed about how we process personal data.

By using our services or communicating with us, you acknowledge that you have read and understood this privacy policy.