Privacy Policy for NordTrykk AS

NordTrykk AS is committed to protecting your privacy and ensuring that your personal data is processed in a lawful, fair, transparent, and secure manner. This privacy policy explains how NordTrykk AS collects, uses, stores, shares, and protects personal data in connection with its printing-house business activities.

1. Introduction and company information

This privacy policy applies to the processing of personal data by NordTrykk AS in connection with the provision of printing, production, customer service, sales, delivery coordination, website use, and related services.

Data controller: NordTrykk AS

Address: Østre Aker vei 24, 0581 Oslo, Norway

Email: [email protected]

Phone: +47 23 45 78 19

NordTrykk AS acts as the data controller for personal data processed in the course of its business operations, unless otherwise stated.

2. Data collection and processing

NordTrykk AS may collect and process the following categories of personal data:

• Identification and contact information: name, job title, company name, address, email address, and phone number.
• Order and customer information: details provided in connection with quotes, orders, print specifications, delivery instructions, and invoicing.
• Communication data: correspondence by email, telephone, contact forms, and other communication channels.
• Technical data: IP address, browser type, device information, and usage data collected through our website and digital services.
• Payment and accounting data: payment-related information, invoice details, and transaction records.
• Content data: files, artwork, text, images, and other materials submitted for printing or production.

NordTrykk AS may receive personal data directly from you, from your employer or business partner, from public sources, or from third parties involved in the delivery of our services.

3. Purpose of data processing

NordTrykk AS processes personal data for the following purposes:

• to respond to inquiries and provide quotations;
• to enter into and perform contracts;
• to produce, deliver, and invoice printing services;
• to manage customer relationships and provide support;
• to communicate about orders, specifications, and service updates;
• to maintain accounting, tax, and business records;
• to improve our services, website, and internal operations;
• to ensure security, prevent misuse, and detect fraud;
• to comply with legal obligations and regulatory requirements.

4. Legal basis for processing

NordTrykk AS processes personal data on one or more of the following legal bases, depending on the context:

• Performance of a contract: where processing is necessary to provide requested services or fulfill an agreement.
• Legal obligation: where processing is necessary to comply with applicable laws, including accounting and tax obligations.
• Legitimate interests: where processing is necessary for the legitimate business interests of NordTrykk AS, provided that such interests are not overridden by your rights and freedoms.
• Consent: where you have given clear consent for specific processing activities, such as certain marketing communications or optional cookies, where applicable.

5. Data sharing and third parties

NordTrykk AS may share personal data with carefully selected third parties where necessary for the purposes described in this policy. Such recipients may include:

• IT and hosting providers;
• payment service providers and accounting systems;
• delivery and logistics partners;
• subcontractors involved in printing, finishing, or production;
• professional advisers such as auditors, lawyers, and consultants;
• public authorities where required by law.

NordTrykk AS ensures that third parties processing personal data on our behalf are subject to appropriate contractual obligations and confidentiality requirements.

6. Data transfer to third countries

NordTrykk AS primarily processes personal data within Norway and the European Economic Area (EEA). If personal data is transferred to a country outside the EEA, NordTrykk AS will ensure that appropriate safeguards are in place in accordance with applicable data protection requirements. These safeguards may include adequacy decisions, standard contractual clauses, or other lawful transfer mechanisms.

7. Storage duration

NordTrykk AS retains personal data only for as long as necessary to fulfill the purposes for which it was collected, unless a longer retention period is required or permitted by law.

• Customer and contract data: retained for the duration of the customer relationship and for a reasonable period thereafter.
• Accounting and tax records: retained for the period required by applicable law.
• Communication records: retained as long as needed to handle inquiries and maintain business documentation.
• Marketing data: retained until you withdraw consent or object, where applicable.

When personal data is no longer needed, NordTrykk AS will delete, anonymize, or securely archive it in accordance with applicable requirements.

8. User rights

Subject to applicable law, you may have the following rights regarding your personal data:

• Right of access: to obtain confirmation of whether your personal data is being processed and to receive a copy of that data.
• Right to rectification: to request correction of inaccurate or incomplete personal data.
• Right to erasure: to request deletion of personal data in certain circumstances.
• Right to restriction: to request that processing be restricted in certain situations.
• Right to data portability: to receive personal data you have provided in a structured, commonly used, machine-readable format, where applicable.
• Right to object: to object to processing based on legitimate interests or to direct marketing, where applicable.

To exercise your rights, please contact NordTrykk AS using the contact details provided below. We may request additional information to verify your identity before responding to your request.

9. Withdrawal of consent

Where NordTrykk AS relies on your consent to process personal data, you may withdraw that consent at any time. Withdrawal of consent does not affect the lawfulness of processing carried out before the withdrawal. If you withdraw consent, NordTrykk AS will stop the relevant processing unless another lawful basis applies.

10. Right to complain

If you believe that NordTrykk AS has processed your personal data in violation of applicable privacy laws, you have the right to lodge a complaint with the competent supervisory authority. In Norway, this is the Norwegian Data Protection Authority (Datatilsynet).

We encourage you to contact NordTrykk AS first so that we may try to resolve your concern directly and promptly.

11. Data security

NordTrykk AS implements appropriate technical and organizational measures to protect personal data against unauthorized access, loss, misuse, alteration, or disclosure. These measures may include access controls, encryption where appropriate, secure storage, staff confidentiality obligations, regular backups, and internal procedures for handling personal data securely.

While NordTrykk AS takes reasonable steps to protect personal data, no system can be guaranteed to be completely secure. We continually review and improve our security practices.

12. Contact information

If you have questions about this privacy policy or the processing of your personal data, please contact:

NordTrykk AS
Østre Aker vei 24, 0581 Oslo, Norway
Email: [email protected]
Phone: +47 23 45 78 19

13. Changes to privacy policy

NordTrykk AS may update this privacy policy from time to time to reflect changes in legal requirements, our services, or our processing practices. The updated version will be published on our website or otherwise made available to you. We encourage you to review this privacy policy periodically to stay informed about how NordTrykk AS processes personal data.