TrueFlow Technologies
Home · Trust centre · Privacy Policy

Privacy Policy

How TrueFlow Technologies collects, uses and protects personal data, in line with the GDPR and the Norwegian Personal Data Act.

TrueFlow Technologies AS (“TrueFlow”, “we”, “us”) respects your privacy and is committed to protecting your personal data. This notice explains how we collect and use personal data, and your rights, in accordance with the EU General Data Protection Regulation (GDPR) as implemented in Norway by the Personal Data Act (personopplysningsloven).

Where we process personal data on behalf of a customer within our products and services, the customer is the data controller and our data-processing agreement with them governs that processing.

Who we are

The data controller is TrueFlow Technologies AS, org. no. 937 929 978, Bergen, Norway. For any privacy question or to exercise your rights, contact hello@trueflowtechnologies.com.

What we collect and why

CategoryExamplesPurpose and legal basis
Contact & enquiry dataName, email, company, messageRespond to enquiries and provide informationBasis: legitimate interest / steps prior to a contract
Customer & supplier dataContact, contract and billing informationManage the relationship and meet our obligationsBasis: contract / legal obligation
Website usage dataIP address, device and usage data, cookiesOperate and secure the websiteBasis: legitimate interest / consent for non-essential cookies
Recruitment dataCV, application and correspondenceAssess applicationsBasis: steps prior to a contract / consent

We collect only the data we need for these purposes and do not use it for unrelated purposes without a lawful basis.

Cookies

Our website uses cookies necessary for its operation and, only with your consent, cookies for analytics. See our Cookie Policy for details and how to manage your choices.

Sharing and international transfers

We share personal data only where necessary: with service providers who process data on our behalf under a data-processing agreement, with professional advisers, and where required by law. Consistent with our sovereign approach, personal data is by default kept within the EEA. Where data is transferred outside the EEA, we ensure an appropriate safeguard is in place, such as an adequacy decision or the EU Standard Contractual Clauses together with a transfer risk assessment.

Retention

We keep personal data only as long as necessary for the purpose for which it was collected, or as required by law (for example accounting records under the Bookkeeping Act). When no longer needed, data is securely deleted or anonymised.

Your rights

Subject to the conditions in the GDPR, you have the right to access your data; to have inaccurate data corrected and incomplete data completed; to have your data erased in certain circumstances; to restrict or object to certain processing, including direct marketing; to receive certain data in a portable format; and to withdraw consent at any time where processing is based on consent.

To exercise your rights, contact hello@trueflowtechnologies.com. You also have the right to lodge a complaint with the Norwegian Data Protection Authority (Datatilsynet), datatilsynet.no.

Changes

We may update this notice from time to time. The current version is published here, with the date of the latest revision shown below.