Privacy and cookies
Privacy statement
This privacy statement explains how Norvault Security processes personal data when you visit the website, contact us by email or have a business relationship with us.
1. Who we are
Norvault Security AB is responsible for the processing of personal data described in this privacy statement.
- Legal name: Norvault Security AB
- Organisation number: 559345-7038
- Registered office: Uppsala, Sweden
- Website: norvaultsecurity.com
- Email: office@norvaultsecurity.com
For privacy questions or to exercise your rights, email office@norvaultsecurity.com.
2. Scope and our role
This statement applies to the website, business communications and the administration of prospects and customers. Norvault Security is the data controller for these activities: we determine why and how personal data is processed.
When personal data forms part of a client engagement, the relevant agreement provides additional details about roles and responsibilities.
3. Personal data we process
We only process data needed for the website, communications and our business services.
When you visit the website, the hosting and security infrastructure may process technical request and log data, such as an IP address, date and time, requested page, browser information and error or security notifications.
When you contact us, we may process your name, business contact details, organisation, role, the content of your message and subsequent correspondence. An email is only sent to Norvault when you send it from your own email application.
Within a business relationship, we may also process contract, invoice and administrative data needed to provide services and run the business.
We do not ask for special-category personal data through this website. Do not include such data in an email unless it is necessary and has been agreed with us in advance.
4. Purposes and legal bases
| Purpose | Data | Legal basis |
|---|---|---|
| Delivering and securing the website and investigating faults | Technical request and log data | Legitimate interest in a secure and reliable website |
| Answering a question or discussing a possible engagement | Contact details, organisation and correspondence | Steps before entering into a contract and legitimate interest in business communication |
| Performing an agreement and managing the customer relationship | Contact, contract and service data | Performance of a contract |
| Invoicing, administration and legal obligations | Business and financial records | Legal obligation and, where applicable, performance of a contract |
Norvault does not use website visits for profiling, advertising or automated decision-making.
5. Cookies and similar technologies
The current website does not itself place analytics, marketing, tracking or preference cookies. Norvault also does not use a tag manager, tracking pixel, analytics provider, browser fingerprinting or local browser storage for measurement on this website. A cookie banner is therefore not shown.
The hosting or security infrastructure may use a temporary, strictly necessary technology or cookie only when technically required for security or reliable delivery. Norvault does not use this to track visitors, build profiles or display advertising.
If the website later uses non-essential cookies or similar technologies, this statement will be updated in advance and consent will be requested first where required.
6. Technical log data
Technical log data may be used to keep the website available and secure, prevent misuse, resolve errors and investigate security incidents. This data is not used to create marketing profiles of visitors.
7. Recipients of personal data
Where necessary, personal data may be processed by providers of hosting and website infrastructure, email and communications, administration and accounting. Professional advisers or competent public authorities may also receive data where necessary or legally required.
Norvault does not sell personal data.
8. Processing outside the EEA
Some service providers may process personal data outside the European Economic Area. Where this occurs, the transfer must be based on a valid transfer mechanism, such as an adequacy decision or appropriate contractual safeguards.
9. Security
Norvault takes appropriate technical and organisational measures to protect personal data against loss, misuse, unauthorised access and unwanted alteration or disclosure. Access is restricted to people and providers who need the data for their work.
10. Retention
Personal data is not retained for longer than necessary for the purpose for which it was collected.
- Technical log data is retained according to the necessary security and troubleshooting purposes and the infrastructure provider's settings.
- Contact details and correspondence are retained for as long as needed to handle the request, provide relevant follow-up and manage the business relationship.
- Contract, invoice and administrative data is retained for the customer relationship and afterwards for as long as statutory retention requirements or legitimate legal interests require.
When data is no longer needed, it is deleted or anonymised.
11. Your rights
Depending on the circumstances, you have the right to:
- request access to your personal data;
- have inaccurate data corrected;
- have data erased;
- restrict processing;
- object to processing based on legitimate interests;
- receive or transfer data where the right to data portability applies;
- lodge a complaint with a supervisory authority.
Send a request to office@norvaultsecurity.com. We may ask for additional information to verify your identity.
12. Complaints
Please contact us first if you have a privacy question or complaint. You also have the right to lodge a complaint with the Swedish supervisory authority, Integritetsskyddsmyndigheten (IMY), or with the supervisory authority in the EEA country where you live or work.
13. Children
The website and services are intended for organisations and are not directed at children. Norvault does not knowingly collect children's personal data through the website.
14. Links to other websites
The website contains links to external websites, including LinkedIn. When you follow such a link, the external party's privacy policy applies.
15. Changes
Norvault may update this privacy statement when the website, services or data processing changes. The latest version is available on this page with the date of the most recent update.
16. Contact
Questions about this privacy statement or the processing of personal data can be sent to:
Norvault Security AB Uppsala, Sweden Organisation number 559345-7038 office@norvaultsecurity.com