Privacy Policy
This privacy policy provides information about how personal data is processed in Decon-X International AS with org. no. 989 730 282 (hereinafter „Decon-X“). The terms „we“ and „us“ refer to Decon-X. The terms „you“ and „you“ refer to the person about whom we process personal data.
1 Purpose of processing personal data
1.1 Sending out newsletters and other marketing
Decon-X offers the opportunity to receive marketing inquiries from us, such as our newsletter „Smittevernsnytt“. By signing up, we process the recipient’s email address. The purpose of the processing is to reach out to existing, potential and former customers and partners in order to market our services. The inquiries typically contain information about infection control, invitations to webinars and marketing of our services and products.
We use the supplier Kabaji LCC to assist us with sending out marketing.
Decon-X’s processing of personal data is based on consent and is based on GDPR art. 6 (1)(a). The consent can be withdrawn at any time by unsubscribing via the link at the bottom of our inquiry.
1.2 Provide our customer portal
Decon-X offers a customer portal for our customers, so that they can get an overview of disinfection processes with Decon-X. The access is granted by us, to specific contact persons at the customer. In this context, we process personal data such as e-mail and passwords, as well as connection to the business.
The data is processed for as long as there is an existing customer relationship.
The legal basis for the processing of the personal data is based on an agreement pursuant to GDPR Art. 6(1)(b), if the user has entered into an agreement with us. If the user is employed by a customer, the processing is based on legitimate interest according to GDPR art. 6(1)(f) and the legitimate interest is to be able to carry out contractual relationships in a good and efficient manner.
1.3 Offer contact form
Decon-X has a contact form on the website that can be used to request more information or make an appointment with us. By contacting us, we process information about name, associated company, job role, phone number, e-mail and message.
The information is processed until we have responded to the inquiry and there is no longer a need for follow-up.
We use services provided by Google to provide the contact form, including reCAPTCHA to ensure that the user is a real person, prevent bots from using the form and prevent automated attacks.
The legal basis for the processing is our legitimate interest in answering inquiries from and getting in touch with various stakeholders. The legal basis is GDPR Art. 6(1)(f).
1.4 Interaction with partners and suppliers
We process personal data about partners and suppliers for the purpose of service delivery and service exchange. The personal data that is processed is names, telephone numbers, addresses, e-mail addresses and invoice information. We process the personal data as long as we have an active contractual relationship, and as long as there is a need for follow-up after the contractual relationship.
The legal basis for the processing is our legitimate interest pursuant to GDPR art. 6(1)(f) in fulfilling the contract Decon-X has with the individual partners and suppliers.
1.5 Social Media Presence
Decon-X is present on various social media such as Facebook, Instagram, YouTube and LinkedIn. By interacting with our pages on social media, for example by viewing the page, commenting or liking posts, recommending a page to others or similar, Decon-X processes personal data about the user. The information we process is name, profile picture and the activity the user has undertaken on Decon-X’s site.
The social media also has access to this information and also uses it for its own purposes, as stated in the respective media’s privacy policies. Decon-X has entered into a joint data controller agreement with Meta which can be found here: Page Insights Addendum.
The processing lasts as long as the user has a profile and until the user requests the social media and/or Decon-X to delete the user’s personal data.
The legal basis for the processing of the personal data is legitimate interest pursuant to GDPR Art. 6(1)(f). The legitimate interest consists of reaching out to existing and potential customers on relevant platforms.
1.6 Host webinars
At regular intervals, we hold webinars. To participate, the participant must provide his/her email address. The purpose is to manage participants in and conduct our webinars and thus reach out to various stakeholders. The information is stored until the webinar has been held and until the recipient unsubscribes via e-mail on which the invitation to the webinar is sent.
The legal basis is our legitimate interest under GDPR art. 6(1)(f) in holding the webinar and reaching out with relevant information to participants who have registered.
1.7 Use of cookies
We use cookies on our website; https://deconx.com/.
- We use cookies that are necessary for our website to function
- We use cookies from Google Analytics for analysis and statistics.
You can delete cookies at any time. For more information on how to manage the use of cookies in your browser, please refer to each browser’s information pages: Google Chrome, Mozilla Firefox, Microsoft Edge and Safari.
2 Storage time
We process personal data for as long as it is necessary for the purpose for which it is collected. If necessary, we store the information further in line with our legal obligations, such as compliance with the Bookkeeping Act. In certain cases, we may also retain the personal data if it is necessary for the establishment, defence or exercise of a legal claim.
3 Recipients of the personal data and use of subcontractors
Decon-X does not pass on personal data to third parties unless there is a legal basis for such disclosure.
We use subcontractors (data processors) for certain administrative tasks. In cases where we share the information with the data processor, the processing of personal data is secured through data processing agreements. The data processing agreements ensure that the personal data is not used for any other purpose and that the processing meets the requirements of the GDPR.
Decon-X uses certain data processors that process personal data outside the EU/EEA. The basis is either the EU’s standard contractual clauses or that there is an adequacy decision such as the EU-US Data Privacy Framework.
4 Rights of the data subject
By contacting Decon-X, you as a data subject have the right to demand:
- Correction, access and deletion. You have the right to request a free copy of your personal data, request correction of inaccurate data, and under certain circumstances request that your personal data be deleted.
- You have the right to require us to restrict the processing of your personal data in certain circumstances, for example while we are investigating any objections from you relating to our processing of personal data.
- In some cases, you have the right to data portability, i.e. you can demand that we disclose information about you in a structured, usable and machine-readable format, in order to be able to transfer it to another data controller. This only applies if we process the personal data based on your consent or because it is necessary for the performance of an agreement with you.
- In some cases, you have the right to object to our processing of your personal data. We will then stop processing the data, unless we can demonstrate compelling legitimate reasons for us to continue the processing.
- Protest against direct marketing. You have the right to object to our direct marketing (including profiling for these purposes). We will then stop our processing of your personal data for these purposes.
- Withdraw consent. If the processing of personal data is based on your consent, you have the right to withdraw your consent at any time. We will then stop future processing of personal data based on your consent.
- Complaint to the Data Protection Authority. You have the right to complain to the Norwegian Data Protection Authority about the processing of your personal data. We appreciate it if you contact us directly first.
5 Contact information of the data controller
If you have any questions about how Decon-X processes personal data, please contact:
- Address: Vollsveien 13C, 1366 Lysaker, Norway
- Phone: +47 22 16 51 60
- E-post:post@deconx.com