Terms and Privacy
The Norwegian British Chamber of Commerce (“NBCC”) respects the rights of its members, subscribers, guests, employees, suppliers and other users including website visitors’ right to privacy and data protection. The NBCC is fully committed to complying with the provisions of all applicable Data Protection legislation and regulations such as the Data Protection Act and EU GDPR.
This privacy policy outlines how the NBCC collects, uses, shares, and retains all personally identifiable information (PII) collected for on behalf of the NBCC, as described by the UK Information Commissioner’s Office (ICO). Personally identifiable information is collected by the NBCC via its website and other sources (such as personal interactions and events) for the purpose of notifying stakeholders about NBCC events; including newsletters, updates, member exclusive events and networking events with NBCC guests and external visitors.
This current privacy policy is effective as of the 25th May 2019. This privacy policy will be continuously assessed against new systems, technologies, data security advice, common business practices, regulatory changes and according to the services provided by the NBCC.
1) Data controller and data processor
The data controller for all personal data collected via the NBCC’s website and supporting services is the Norwegian British Chamber of Commerce; having the company registered number of 00098126. This means that the NBCC are responsible for deciding what data is collected, how it is then held and how all personal data is used. We will implement appropriate data security measures for protecting the data from unauthorised access and loss, as laid out in the Security section of this privacy policy.
2) Data collected for events, newsletters, updates, and marketing
2.1) What personal data is used, and where is it obtained from?
The NBCC collects personally identifiable information about individuals from the following sources:
• Information submitted by an individual via our website, feedback forms, or newsletter sign up form.
• Information submitted by an individual via registration forms for NBCC events
• Information voluntarily provided by an individual via email, telephone, or in face-to-face meetings
• Publicly accessible information from websites and social media
For each of the above categories, the information collected includes names, email addresses, job titles, and telephone numbers.
2.2) What is the NBCC’s legal basis?
Our legal basis for processing this data is to pursue the ‘legitimate interests’ of the individual. The personal data collected is used by the NBCC to provide individual’s information in relation to the NBCC’s activities, the NBCC’s website, other NBCC services, member administration, press releases, to process and respond to queries received from the public or other relevant stakeholders, to seek views or comments on emerging economic issues, and to send marketing communications.
The NBCC does not collect personal data about individuals except when there is a legitimate business requirement (e.g. an event), or when such information is provided on a voluntary basis.
2.3) Is personal data shared with anyone to achieve this purpose?
The collected data is stored on a GDPR-compliant, password-protected online database system, which is accessed only by the NBCC organisation. No personal data is shared with any third-party without the express permission from the individual who the data correlates to.
We limit the access of personal data to only those employees or suppliers of the NBCC who have a legitimate business need to have access to that data.
2.4) How long does the NBCC keep personal data for this purpose?
Under the EU General Data Protection Regulation, all individuals have the right to be forgotten; allowing any individual to request that their personal information is no longer held by the NBCC. Unless expressly requested to delete your personal data, it will be retained for 48 months after the last activity on your account. Personal data will then only be retained if there is a legal requirement for the NBCC to preserve the information. Individuals can update their subscription preferences or opt-out of correspondence at any time by clicking ‘unsubscribe’, found on every email sent by the NBCC, or by updating their preferences using the Contact Information Update form or by contacting us directly. Financial records (e.g. membership payments) will be retained as required by UK law.
3) Non-personal information collected via the NBCC website
Users should also be aware that non-personal information and data may be automatically collected through the standard operation of the NBCC’s web servers, and by the use of cookies and/or Internet Protocol (“IP”) address tracking technologies. Non-personal identification information might include the browser used by you, the type of computer, the operating systems, the Internet service providers, and other similar information.
The NBCC’s web server may also automatically gather information about the top viewed and visited pages and links on our website, top entry and exit points, number of form completions, time spent on pages, top downloads, top keywords used offsite to lead customers to our website, your internet protocol (IP) address, information collected via cookies, the areas you visit on the website, the links you may select from within the website to other external websites and device event information such as system activity, crashes, hardware settings, browser type and other similar types of information.
Most browsers are set to accept cookies; however, you can set your browser to refuse cookies, or to alert you when cookies are being sent. Please note that if you disable cookies, the full functionality of the NBCC’s websites may not be available to you. The information thus collected enables us to develop and customise our services to better meet your needs and preferences, and to bring to your attention business updates, services, events, and networking opportunities that may of interest to you.
Relevant areas of the NBCC’s website will employ Secure Socket Layer (“SSL”) encryption technology to enhance data privacy and help prevent loss, misuse, or alteration of the information collected and retained by the NBCC.
4) Working with other organisations
From time to time, the NBCC collaborates with other relevant organisations and companies to promote other programs that may be of interest to members and the wider business community. In such cases, the NBCC does not provide these organisations with any personally identifiable information.
5) Social media
We may use third party tools or add-ins to manage and monitor our social media interactions. If you send us a private or direct message via social media, then the message may be stored on these platforms. As with other personal data, these direct messages will not be shared with any other organisations. Any information added to our social media accounts is treated as public, so please be aware that any comments, sharing of our content or other interactions with our social media posts may also be treated as publicly accessible information.
6) Access, review and correction
The General Data Protection Regulations gives you the right to access your personal data held by us (known as a “subject access request”). If you have an established business relationship with the NBCC, you may request from us a list of the categories of personal information held about you. Subject access requests may be made in writing to our company address or by using the NBCC Subject Access Request form. We will endeavour to respond to the request within a reasonable period and in any event within one month as required by the relevant provisions in the GDPR.
When you make a request to access or review the personal data that we hold about you, we may request for you to verify your identity before the request can be fulfilled. This is to protect your information in the event of fraud.
7) Privacy rights
In addition to the rights of access, review and correction, you have the right to object to your personal data being processed for any particular purpose, or to request that we stop using your information. If you wish to exercise these rights, please complete the NBCC UK Data Protection Query form or send a letter marked “Data Protection” to the NBCC’s offices (our address is available on https://nbccuk.com/). If you have further concerns about how we use your personal data, you also have the right to make a complaint at any time to the Information Commissioner’s Office (ICO), the data protection authority for the UK. Please visit https://ico.org.uk/ for more details on your data protection rights and how to contact them.
This privacy policy was last updated on the 8th November 2019.
