Revision 25 May 2018
1. About Nautisk Forlag AS (Nautisk Forlag), the Services and registered users
1.1 Who are we?
Nautisk Forlag is wholly owned by NHST Media Group AS ( « NHST » ). NHST and its subsidiaries will hereinafter be called « the Group ». You will find information about the Group at www.nhst.com. Since the Group uses the same basic information systems and has common technical platforms and IT department, personal data can be processed by the Group for administrative purposes.
1.2 The Service
1.3 Whose personal data we process
Nautisk Forlag has several groups of end users. If you make use Nautisk Forlag’s Services, you will belong to one of those groups of end users.
Active customers are the group that Nautisk Forlag processes the most personal data on, those who pay for the Services.
If you no longer purchase our Services and 12 months have passed, you are considered a passive user. In that case, Nautisk Forlag will basically keep some personal data for a certain period of time, as explained in the points below. After you have been a passive user for up to 1 year, Nautisk Forlag will delete all the personal data they still have stored about you, unless otherwise provided by law, or if you have given your active consent to further processing. Point 7 below provides further information on deletion.
You can also be a registered user without purchasing Nautisk Forlag’s Services. That will be the case if you receive the Newsletters or have trial access to Services.
The last group is the unregistered users, those who neither register nor pay for Services. Nautisk Forlag processes very little personal data on this group of users.
What personal data are processed and in respect of what users will be explained in more detail below.
2. Why do we process your personal data?
Nautisk Forlag processes personal data on you for three overall purposes:
In order to be able to provide you with the Services and personalize them for your purposes.
In order to continue and further develop the Services.
In order to be able to provide, personalize and measure the effect marketing that is show or sent to you as a user of the Services.
More about purpose no. 1:
Nautisk Forlag processes your personal data in order to be able to provide you with the Services and fulfil any customer agreements we have with you. This includes for instance giving you access to the Services, allowing you to administer your user and customer relations, delivering products to your address, sending invoices and reminders to your email address, and informing you about important matters related to your customer relationship or the Services.
Data about you is also used to prevent misuse of the Services. Misuse may be attempts at logging onto other people’s accounts, trying to swindle people, “spamming”, hate messages, harassment, and other acts that are forbidden under relevant legislation.
More about Purpose no 2:
Nautisk Forlag uses data about you and your use of the Services to make sure you get an optimal and confidential user experience, and to learn more about how we can and should develop the Services further.
More about Purpose no. 3:
Nautisk Forlag uses data about you for direct communication and marketing purposes through traditional channels like emails, text messaging – SMS, letters and telephone calls, unless you have withdrawn from such communication or in other ways have withdrawn your consent.
3. Overview of Nautisk Forlag’s processing basis
Any processing of personal data requires a legal basis, also known as a processing basis. This means that before Nautisk Forlag starts the process of processing your personal data, we must ensure that we are entitled to carry out that processing (that Nautisk Forlag has a legal basis). That basis may come directly from you for instance in the form of voluntary consent or an agreement with us. Here is an explanation of what bases Nautisk Forlag uses to process personal data and when they use them.
Nautisk Forlag neither can, nor will we, process other personal data about you than what is expressly stated, and neither can nor will we do it in other ways than those described in this policy.
3.1 Legitimate interest
Moreover, Nautisk Forlag has a legitimate interest in some forms of processing, such as marketing purposes. Such processing based on a legitimate interest applies to active user, or passive users (former users) as described in point 1.3).
You have a right to «Opt out», which means that you are allowed reserve yourself against the processing, as described in point 8. This means that you can choose to withdraw from this processing if you do not want Nautisk Forlag to carry out the processing. You can contact Nautisk Forlag via the Contact page.
Nautisk Forlag does not have any terms and conditions linked to such opting out, but Nautisk Forlag makes it clear that the use of the Services may deteriorate for those users who use their right to withdraw consent.
If you are a registered user or an active user with Nautisk Forlag, then Nautisk Forlag must be able to process personal data on you in order to be able to fulfil the user agreement with you. It is only the processing that is necessary for meeting Nautisk Forlag’s obligations under the agreement that is carried out with this processing basis.
What processing is necessary to fulfil the agreement will depend on the user agreement between you and Nautisk Forlag. Your user agreement will be available and you should read it before you accept the agreement.
One example of processing based on an agreement: If you are an active user with Nautisk Forlag for delivery of Services, Nautisk Forlag has to know the delivery address. Another example is that Nautisk Forlag has to process personal data in order to have the correct invoice sent out and make sure it is paid.
3.2.1 Newsletters and notices
Nautisk Forlag also has newsletters and notices which you as a registered user can choose to sign up for. You will not receive these things unless you actively sign up for them. You can control the sign-up or, if you want, you can cancel it freely yourself via the newsletter or notice itself.
You are free to use the Services without giving us your consent to process your personal data. The Services may lose some functionality and user friendliness without certain consents. Another example is that we have consent to be able to send you good offers when you are no longer considered to be an active user.
NHST Global Publications uses information that we gather from our own and third parties’ cookies, tracking pixels and other tracking technology integrated into the Services. This processing applies to all groups of end users of the relevant Services.
Nautisk Forlag is required by law to carry out certain processing of personal data, such as for instance any personal data that Nautisk Forlag has to process to comply with its accounting and book-keeping obligations.
4. The data that are processed
Data that is processed about everyone using the Services:
Information that is available on your device and its internet connections, such as for example the name of the maker of your mobile phone/PC, operating system and browser version, e-mail client, and information on the connection with the Services, such as IP-addresses, network ID, cookies and unique identification files.
Statistics on your use of the Services, such as for instance how often various button or links are pressed, purchases that are completed, what pages are visited, when and for how long they are visited, Cross-device»-tracking for logged-in users, etc.
Statistics on interaction over newsletters and surveys displayed in the Services.
The location of the unit you use, if such information is shared by the unit.
The information given in the above points is basically not connected with your identity, but is treated as anonymized or pseudonymized data about one of Nautisk Forlag’s users. You can limit such storage by surfing in so-called «Private Mode»/«Incognito Mode» or by using the «Do Not Track»-function in your browser.
If you register as a customer or user of the Services, any data stored will be linked to our customer relationship or your user, as mentioned in the above points.
If you register as a customer or user of the Services we will also process the information you yourself have given us in connection with your customer or user relationship, such as:
Information about your customer relationship, such as the type of Services you have and what newsletters you may receive, payment data and history.
Data to which you have given us access or which are lying openly accessible on social media such as Facebook, Twitter, Linkedin etc.
* = required in order to complete your registration.
5. Where is the information gathered from
6. Our relationship with third parties
6.1 Who helps NHST Global Publications in processing your personal data?
In order to be able to provide you with the Services Nautisk Forlag uses several services delivered by third parties. This means that some of these third parties process data on you on our behalf. Third parties who process personal data on behalf of Nautisk Forlag are called data processors, in Appendix 2 you will find an up-to-date overview of such data processors.
Nautisk Forlag has data processor agreements with third parties that process personal data on our behalf in accordance with current legal requirements.
7. Deleting and filing your personal data
Nautisk Forlag deletes all personal data stored on you after the customer relationship has ceased, when we no longer have legal basis to process your data, We will keep your data further only if you have given your consent for us to do so. Special legal requirements such as accounting obligations and similar demand that certain data are stored longer. Such data will not be used for any other purposes, and during the period leading up to the deletion of such information there will be limited access to such data, and they will be secured by appropriate technical and organizational means.
8. Your rights
Such withdrawal can also be done by cancelling any customer relationships you have with us where you ask us to have your user account deleted. To delete anonymized information on your use of the Service, you also have to delete cookies on the unit/your browser. Withdrawal of consent does not affect the legality of the processing built on consent until the consent is withdrawn.
You can also get in touch with Nautisk Forlag in the same way if you want to look into which of your personal data Nautisk Forlag has stored, and if you want to have these personal data transferred to you or to have the data deleted or corrected.
Likewise, you can contact Nautisk Forlag if you want to limit Nautisk Forlag’s processing of your personal data or if you want to protest against Nautisk Forlag’s treatment/processing of your personal data. You are also entitled to complain against our treatment to the Data Protection Agency, which is the supervisory authority, if you believe our treatment is in violation of the legislation.
You can choose for yourself to remove our access to your unit’s location data by switching off the location tools on the unit, or by refusing sharing of such data through your unit’s settings.
9. Safety and security
Nautisk Forlag has technical and organizational safety measures, including procedures for internal control and information security in accordance with the current privacy rules in Norway.
It is safe to use the Services. Nautisk Forlag handles personal data in an encrypted and safe manner for instance by using HTTPS communication for transferring data on you safely and securely.
Appendix 1. Legitimate interest
When you purchase a payable product, including signing up for trials, Nautisk Forlag has a legitimate interest to market our products and services to you in channels like email and telephone, as well as send you notifications that we think you will be interested in reading.
Further, Nautisk Forlag has legitimate interest to use personal data to improve our Services by using various analytics and test tools, for instance so-called A/B testing. The purpose for this is to improve the user-experience for all our user groups on our Services.
The personal data
The information processed is normal personalia, data about subscriptions and products, behavioural data from navigation and reading patterns or data given directly by the user. Nautisk Forlag is not processing sensitive data, ref GDPR art. 9 or 10, and Nautisk Forlag is not processing personal id numbers or credit card information.
Nautisk Forlag has taken steps to reduce the risk in connection with all data processing. This means that all data that potentially are shared with third-parties are pseudonymized and contain few data points, only cookie-ids and if relevant the name of the segment that the user belongs to. The systems are well secured, both in technical and organizational terms. Data that are processed by third-party suppliers or partners will not be used to enrich any third-party user-profiles for re-targeting or other advertising purposes. Nautisk Forlag also offer the possibility to opt-out of all processing based on legitimate interest.
Appendix 2. Overview of data processors
Evry ASA - www.evry.no
MailChimp – www.mailchimp.com
NHST Media Group – www.nhst.no
Visiolink – www.visiolink.dk
SuperOffice – www.superoffice.com