1. Personal identifiable information (PII)
Novatech mainly collects personal identifiable information about you in the following cases
You have sent us an inquiry over phone, email, message boards or other channels
You have requested access in accordance with the Public Access to Information Act
You subscribe to our newsletter
You have applied for a job with us
You have ordered documents or material
You are a journalist and have contacted us for a statement
You visit our website novatech.no and submit your PII
You are using one of our online services (authentication)
Voluntarily completed customer survey
We may also receive information about you from others in the following cases:
We have asked a company for a statement and your information appears in the statement
A non-conformance report contains information about you
A complaint, tip or guidance case contains information about you
We receive information about you from a customer or potential customer
A jobseeker has provided you with a reference
Novatech AS stores information on Google Workspace, which is compliant with GDPR:
1.2. What information we store
Novatech can collect, store and process the following personal data about registered users:
The information above can be linked to the projects Novatech is involved in.
Novatech is only interested in the professional contact information.
Novatech AS is a digital company and will only store information digitally on the cloud servers.
Personal data storage is necessary for providing customers with efficient, good and reliable services.
2. Visit to our web pages
For various services on our website to work.
To offer form functionality.
For web analysis and statistics, i.e. to assess how the website is used and map potential for improvement.
Web analytics is not linked to a personal account
Novatech AS reserves the right to use logs from our web server to generate statistics on visits. These statistics allow us to improve the information on our website. The information contains various variables, such as which page you have visited, what you have searched for in our search engine, date and time of visit and technical information about your device. In practice, it will not be possible to identify the visitors from the stored parameters. Therefore, the statistics are anonymous. This information can therefore not be linked to you as an individual.
The basis for processing the generation of anonymous statistics is the Privacy Regulation, Article 6 (1) (f), which allows us to process information that is necessary to safeguard a legitimate interest that outweighs the consideration of the individual's privacy. The legitimate interest is to improve and further develop information on our websites.
2.4. Activity in online applications
We store activity logs in our online applications. This includes failed and successful logins, user actions, timestamp, IP-addresses, error, data retrieval and data modifications. These logs are only available to authorized personnel such as Novatech management, support staff, developers and auditors.
Novatech AS does not have any minors as customers and does not store information about minors. Novatech will immediately delete any and all PII submitted to Novatech through any channel as soon as we are informed.
A minor is defined as anyone below the age of 16.
Novatech does not provide any service that is considered sensitive for minors.
4.1. Request information about stored PII
You have the right to receive a copy of the PII Novatech has stored. Contact us at firstname.lastname@example.org with the request. Novatech is required to reply within 30 days.
4.2. Request to be deleted
You have the right to request that Novatech delete your PII. Contact us at email@example.com with the request. Please note that some information cannot be deleted for technical and contractual reasons, including but not limited to:
Novatech is required to comply within 30 days.
You have the right to rectification of your PII stored by Novatech. Contact us at firstname.lastname@example.org with the request. Novatech is required to reply within 30 days.
You have the right to download and transfer your PII stored by Novatech to any provider of your choice. Contact us at email@example.com with the request. Novatech is required to reply within 30 days.
Your PII is not processed to create new information such as personal profiles. We will not sell or share your personal information.
6. Data Processor Agreement
A data processor agreement will be made with the subcontractor, should Novatech AS decide to use any subcontractors that may come in contact with PII. The data processor agreement will be according to the GDPR regulations and can not be more lenient than this GDPR policy.
Reports and other work done on the behalf of clients may be printed or otherwise distributed by the client. This work is owned by the client and does not fall under the Novatech GDPR policy, but under the PII/GDPR policy of the client.
PII collected by Novatech AS collected outside the frame of these projects shall not be included in these projects. E.g. Novatech cannot use PII collected from its website or its applications or from other clients in any projects delivered to a client.
Novatech will not collect more information than necessary to efficiently perform our business from our employees.
It is the responsibility of the Novatech CEO to inform employees about the GDPR policy and to follow up on the GDPR policy if employees should be in contact with PII from people outside Novatech AS.