The Norwegian British Chamber of Commerce (“NBCC”) respects the rights of its members, subscribers, guests, employees, suppliers and other users including website visitors’ right to privacy and data protection. The NBCC is fully committed to complying with the provisions of all applicable Data Protection legislation and regulations such as the Data Protection Act and EU GDPR.
1) Data controller and data processor
2) Data collected for events, newsletters, updates, and marketing
2.1) What personal data is used, and where is it obtained from?
The NBCC collects personally identifiable information about individuals from the following sources:
• Information submitted by an individual via our website, feedback forms, or newsletter sign up form.
• Information submitted by an individual via registration forms for NBCC events
• Information voluntarily provided by an individual via email, telephone, or in face-to-face meetings
• Publicly accessible information from websites and social media
For each of the above categories, the information collected includes names, email addresses, job titles, and telephone numbers.
2.2) What is the NBCC’s legal basis?
Our legal basis for processing this data is to pursue the ‘legitimate interests’ of the individual. The personal data collected is used by the NBCC to provide individual’s information in relation to the NBCC’s activities, the NBCC’s website, other NBCC services, member administration, press releases, to process and respond to queries received from the public or other relevant stakeholders, to seek views or comments on emerging economic issues, and to send marketing communications.
The NBCC does not collect personal data about individuals except when there is a legitimate business requirement (e.g. an event), or when such information is provided on a voluntary basis.
2.3) Is personal data shared with anyone to achieve this purpose?
The collected data is stored on a GDPR-compliant, password-protected online database system, which is accessed only by the NBCC organisation. No personal data is shared with any third-party without the express permission from the individual who the data correlates to.
We limit the access of personal data to only those employees or suppliers of the NBCC who have a legitimate business need to have access to that data.
2.4) How long does the NBCC keep personal data for this purpose?
Under the EU General Data Protection Regulation, all individuals have the right to be forgotten; allowing any individual to request that their personal information is no longer held by the NBCC. Unless expressly requested to delete your personal data, it will be retained for 48 months after the last activity on your account. Personal data will then only be retained if there is a legal requirement for the NBCC to preserve the information. Individuals can update their subscription preferences or opt-out of correspondence at any time by clicking ‘unsubscribe’, found on every email sent by the NBCC, or by updating their preferences using the Contact Information Update form or by contacting us directly. Financial records (e.g. membership payments) will be retained as required by UK law.
3) Non-personal information collected via the NBCC website
The NBCC’s web server may also automatically gather information about the top viewed and visited pages and links on our website, top entry and exit points, number of form completions, time spent on pages, top downloads, top keywords used offsite to lead customers to our website, your internet protocol (IP) address, information collected via cookies, the areas you visit on the website, the links you may select from within the website to other external websites and device event information such as system activity, crashes, hardware settings, browser type and other similar types of information.
Relevant areas of the NBCC’s website will employ Secure Socket Layer (“SSL”) encryption technology to enhance data privacy and help prevent loss, misuse, or alteration of the information collected and retained by the NBCC.
4) Working with other organisations
From time to time, the NBCC collaborates with other relevant organisations and companies to promote other programs that may be of interest to members and the wider business community. In such cases, the NBCC does not provide these organisations with any personally identifiable information.
5) Social media
We may use third party tools or add-ins to manage and monitor our social media interactions. If you send us a private or direct message via social media, then the message may be stored on these platforms. As with other personal data, these direct messages will not be shared with any other organisations. Any information added to our social media accounts is treated as public, so please be aware that any comments, sharing of our content or other interactions with our social media posts may also be treated as publicly accessible information.
6) Access, review and correction
The General Data Protection Regulations gives you the right to access your personal data held by us (known as a “subject access request”). If you have an established business relationship with the NBCC, you may request from us a list of the categories of personal information held about you. Subject access requests may be made in writing to our company address or by using the NBCC Subject Access Request form. We will endeavour to respond to the request within a reasonable period and in any event within one month as required by the relevant provisions in the GDPR.
When you make a request to access or review the personal data that we hold about you, we may request for you to verify your identity before the request can be fulfilled. This is to protect your information in the event of fraud.
7) Privacy rights
In addition to the rights of access, review and correction, you have the right to object to your personal data being processed for any particular purpose, or to request that we stop using your information. If you wish to exercise these rights, please complete the NBCC UK Data Protection Query form or send a letter marked “Data Protection” to the NBCC’s offices (our address is available on https://nbccuk.com/). If you have further concerns about how we use your personal data, you also have the right to make a complaint at any time to the Information Commissioner’s Office (ICO), the data protection authority for the UK. Please visit https://ico.org.uk/ for more details on your data protection rights and how to contact them.