PRIVACY IS A MATTER OF TRUST AND TRUST IS BASED ON TRANSPARENCY PURPOSE AND USE It is important for us in ALLIANCE+ that you consider us a trustworthy partner and for you to trust us, we want to be transparent about what we do including how we treat personal data. This policy describes how ALLIANCE+ collects and process personal data about you when you communicate with us, order services from us or visit our webpage. Our services are directed towards public and private companies and therefore, the information we process is primarily about the company you represent. This policy applies to all the personal data you give us, or we collect through our webpage or other sources. ALLIANCE+ is data responsible for your personal data. If you need to contact ALLIANCE+, find our contact information in section 5. We use cookies on our webpage to optimize your use of the site, which is described in our cookie policy on www.allianceplus.eu This policy includes: + Which personal data we collect and purpose + Sharing personal data + Retention and deletion of personal data + Your rights + Contact information + Changes to the privacy policy 1. THE PERSONAL DATA WE COLLECT AND PURPOSE When you visit our webpage We automatically collect information about you and your use of the webpage when you visit our webpage. This can be information about you IP address, which types of browsers you use, which pages you visit, which links you activate and in general how you navigate on the webpage and how you use it. The purpose is to pursue our legitimate interest in optimizing the user experience and the functions of our webpage and to register how much time visitors remain on our webpage to show you relevant information. The legal basis for processing data on our webpage is to be found in the EU General Data Protection Regulation (GDPR) article 6, section 1f. When you order services from us We collect information on your name, email and phone number and data on the company you represent including payment method, deliverance period, where to deliver which services and at what time. The purpose is to be able to deliver the services you ordered and live up to our contract duties to the company you represent. The legal basis for processing data is to be found in the EU GDPR article 6, section 1b or 1f. When you have questions or communicate with us in general We collect information on you name, email and phone number and data on the company you represent. The purpose is to answer your questions or communicate with you to ensure the service you require or the service you wish for us to deliver. The legal basis for processing data is to be found in the EU GDPR article 6, section 1f. When you represent a company that is customer in ALLIANCE+ We collect information on you name, email and phone number and data on the company you represent and other data you choose to give us yourself except from any sensitive personal data. The purpose is to be able to communicate with you by mail or phone and service you and the company you represent in the best possible way including taking care of special wishes or needs and give us the prerequisites to offer the company you represent relevant information. We also use the information to contact you or the company you represent with our services and/or send you information on the same or similar services that might be of interest to you or your company. The legal basis for processing data is to be found in the EU GDPR article 6, section 1f. When you represent a supplier We collect information on you name, email and phone number and data on the company you represent and other data you choose to give us yourself except from any sensitive personal data. The purpose is to be able to communicate with you by mail or phone regarding the services you or your company deliver for us as a supplier. The legal basis for processing data is to be found in the EU GDPR article 6, section 1f. 2. SHARING PERSONAL DATA We only share personal data when we are obligated by law or to deliver the services we offer. Your personal data can be shared with external partners who process personal data on our behalf. We use external partners for some of our services, for technical support of our webpage and for processing and storing data in systems. A list of our data processors can be required by contacting ALLIANCE+ on the contact information in section 5. These companies are data processors and subjective to our procedures. The data processors cannot process data for any other purposes than fulfilling the agreement with us and is subject to confidentiality of the data. We have written data processor agreements with all data processors who process personal data on our behalf. ALLIANCE+ does not transfer any personal data to third countries. 3. RETENTION AND DELETION OF PERSONAL DATA We do not gather personal data when you navigate on our website. Our analytics is not tracking any IP addresses or similar personal data. If you choose to use our contact formula, the email address that you submit to us will be forwarded to Mandrill who provide us with email marketing services. We consider Mandrill to be a third-party data processor. In addition to Mandrill, you email will also be stored in our backend database. Be aware that all the email logs in Mandrill are kept in their database for 30 days before being fully deleted. Data gathered during your communication with us or as part of a contract with your company will be deleted when your company is no longer a customer in ALLIANCE+ unless i) we have a legitimate interest in keeping it for a longer period, ii) if it is necessary for a legal claim to be determined, applied or defended, or iii) if storing is necessary to fulfill a legal requirement. The same applies if your company is no longer a supplier for us. Accounting material is stored five years to the end of an accounting year to fulfill the requirements of the Accounting Act. 4. YOUR RIGHTS In ALLIANCE+, we want to be transparent and therefore, we would like to inform you in this section of your rights. Right of access You can at any time request information from us on which data we have registered about you, which purpose it serves, which categories of personal data, which potential receivers of data, from where the data origins. You have the right to receive a copy of the personal data we process about you. If you wish a copy of your personal data, kindly send a written request to your contact person in ALLIANCE+ or the contact mails in section 5. You might be asked to document that you are in fact the person you say you are. Right to rectification You have the right to have your data corrected at any time. If you notice any errors in your personal data or in the data of your company, please make sure to contact your contact person in ALLIANCE+ or write an email to one of the contact mails in section 5 for us to correct it. Right to deletion In some cases, you have the right to have all or some of your personal data deleted by us if for example you recall you consent or we do not have any other legal basis for continuing the processing. If a continuous processing is necessary, for example for us to comply with legal duties or to determine, apply or defend a legal claim we are not obligated to delete your personal data. Otherwise, we refer to section 3 for the description of our retention and deletion policy. Right to limit processing to only storing In some cases, you have the right to limit our processing to only storing, for example if the data we have is not correct. Otherwise, we refer to section 1 for the explanation of our legal basis for processing. Right to object At any time, you have the right to object to our processing of your personal data in terms of direct marketing, including the processing we do to target our direct marketing. Furthermore, at any time, you have the right to object to the processing of your personal data that we do based on our legitimate interests for reasons that concern your personal situation. Right to recall consent At any time, you have the right to recall any consents you might have given us, for example in relation to newsletters or direct marketing. Right to complain If you believe we are not handling your personal data in the right way, please contact your contact person in ALLIANCE+ or one of the contact mails in section 5 so we can look into your case and try to rectify the mistake. At any time, you can complain to the national data protection authority if you believe we are not handling your data in the right way. 5. CONTACT INFORMATION If you have any questions or remarks to this policy, or you wish to use your one or more of your rights, feel free to contact us: Denmark Allianceplus A/S Søndre Ringvej 49A 2605 Brøndby +45 70207011 info@allianceplus.dk Sweden Allianceplus AB Evenemangsgatan 31A 169 79 Solna +46 107222500 info@allianceplus.se Norway Allianceplus AB Opsangervegen 10 5460 Husnes +47 53482080 post@allianceplus.no 6. CHANGES TO THE PRIVACY POLICY The newest version of this policy will always be available on our website: www.allianceplus.eu