Personal data policy

WHAT PERSONAL DATA DO WE COLLECT AND WHY?
If you as a customer have entered into an agreement with us, if you freelance for us, if you subscribe to one of our newsletters and invitations or if you otherwise use our services, you may provide us with information that is considered personal data.

The types of personal data that Narva collects may, depending on the context, include:

• name and contact information, including address, mobile number and email address;
• delivery and billing information, payment information and other information that you provide in connection with the purchase or delivery of a product or service; and
• IP address. Collection of your personal data can take place from the following sources:
• via our website, if you have signed up for our newsletter or filled in our contact form;
• when you contact us by email;
• through an agreement or other business contact, if you are the contact person for one of our contractual partners.

WHY DO WE PROCESS YOUR PERSONAL DATA?
If you have ordered a product or service from Narva, you have entered into an agreement with Narva, and we therefore process your personal data in order to administer your order and deliver the product or service you have requested.

In addition to this, Narva may use your personal data for the following purposes and based on the following legal grounds:‍

• Performance of a contract. For example, to administer and deliver services and goods you have ordered and to process payments.
• Consent. For example, to manage subscriptions to newsletters.
• Compliance with legal obligations. For example, we save invoice records in accordance with applicable accounting regulations.
• Legitimate interest. For example, to enable content production, sales and marketing activities, and to communicate with you via email.

If a service we provide requires your consent, we will always explicitly ask for your consent to such a service and to process your personal data in such cases. When providing your consent, you will be asked to confirm that you have read this privacy policy and agree to your data being processed as described here. You can withdraw your consent at any time and can always contact us using the details provided below.

STORAGE OF PERSONAL DATA
Narva takes all reasonable measures to ensure that your personal data is processed and stored securely. Your personal data is never stored longer than permitted under applicable law and for the purposes outlined above. Your personal data will be processed by us for the periods listed below, after which the data will be deleted:

• Customer: Your data will be stored until we have delivered the service or product you ordered and for up to three years after your customer relationship with us has ended. However, this does not apply if we need to store your personal data longer for any of the reasons listed below.
• Communication: If you have contacted Narva, for example via email, your personal data will be stored as long as necessary to complete the contact.
• Legal obligations: Narva saves records that constitute accounting information in accordance with applicable accounting regulations.
• Consent: In cases where we process your personal data based on your consent, we only store your data for as long as we have your consent.
• Direct marketing: We may process your personal data for direct marketing and other sales and marketing activities unless you opt out of such marketing.

‍TRANSFER OF PERSONAL DATA
Narva always takes the utmost care when transferring your personal data, and your data will never be forwarded without the support of this privacy policy and appropriate security measures. Narva may use data processors to conduct its business and provide you with the services you order. Your personal data may also be disclosed to fulfill certain legal obligations and may be shared with the Swedish Tax Agency or other relevant authorities when permitted and required by law.

Narva does not transfer any personal data directly to countries outside the EU/EEA and does not sell any personal data. However, we sometimes use services such as MailChimp and Outlook 365. In certain cases, personal data is stored on servers outside the EU/EEA. These services participate in “The Privacy Shield Framework” or equivalent.

COOKIES
Our website, www.narva.se, sometimes uses cookies solely to make it easier for you to use our pages. A cookie is a small text file saved on your computer, mobile phone, or tablet when you visit a website that uses cookies. The cookie cannot identify you personally, only the browser you use during your visit. The next time you visit the same website, it can read your cookie and display the pages according to your preferences.

‍These cookies are used:
We use Google Analytics on our website to measure statistics on users, page views, and similar data. Google Analytics uses three cookies:

• _ga is used to distinguish users and expires after 2 years.
• _gid is used to distinguish users and expires after 24 hours.
• _gat links the website to our Google Analytics account and expires after 90 days.

According to the Electronic Communications Act, all visitors to websites using cookies must be informed about this. Visitors must also be given the option to prevent cookies from being stored on their computer.

If you do not accept cookies being saved on your computer, you can change your browser settings (Google Chrome, Internet Explorer, Firefox, Safari, etc.) to prevent cookies from being saved.

YOUR RIGHTS
You have the right to request information about the personal data we have registered about you and how it is used, following a written request sent to us using the contact details below. You also have the right to request that your personal data be corrected if it is incorrect, incomplete, or misleading by contacting us using the details provided below. To protect your privacy and personal data, we may require you to identify yourself in connection with our assistance.

In accordance with applicable data protection legislation, you also have the right to request that your personal data be deleted or that the processing of your personal data be restricted. In certain cases, you also have the right to object to the processing of your personal data and to request that your personal data be transferred in electronic format.

You can file a complaint with the Swedish Data Protection Authority (Datainspektionen) if you believe that Narva’s processing of your personal data is not in compliance with applicable law.

If you wish to unsubscribe from Narva’s newsletters, a link for doing so is included in every email. Please note that you may still receive invitations to seminars or other relevant information directly from Narva employees. If you wish to completely opt out of receiving any information from us, please notify us using the contact details provided at the bottom of this page.

‍CONTACT INFORMATION
If you wish to contact us regarding this privacy policy or ourprocessing of your personal data, please reach out to gdpr@narva.se.

Updated: 2025-01-07