Privacy and Cookie Notice

1. Who We Are

NEMS AS is responsible for the processing of personal information described in this notice where NEMS determines why and how that information is processed.

In some situations, particularly when NEMS provides hosted software to a customer, NEMS may process personal information on behalf of that customer. In those situations, the customer normally determines the purposes of processing and NEMS acts as a data processor or service provider under the relevant agreement.

2. Scope of This Notice

This notice applies when you:

• Visit nems.eco or another public NEMS website
• Submit a contact form or request a demonstration
• Communicate with NEMS by email, telephone or social media
• Attend a meeting, webinar, conference or event
• Receive business-development or marketing communications
• Apply for employment with NEMS
• Act as a customer, supplier, partner or other business contact

Separate contractual terms, customer instructions and data processing agreements may apply to personal information processed through NEMS software solutions.

3. Personal Information We Collect

Depending on your relationship and interaction with NEMS, we may collect:

• Name, job title, employer and business contact details
• Information submitted through forms, emails and meeting requests
• Records of customer, supplier, partner and business communications
• Event registrations and communication preferences
• Recruitment information, CVs and application documents
• IP address, browser, device and approximate location information
• Website activity, cookie identifiers and campaign attribution data
• Information obtained from public business sources, professional networks and approved business information providers

Sources of information

We collect information directly from you, automatically through our website, from the organisation you represent, from public professional sources and from service providers used for legitimate business purposes.

4. How and Why We Use Personal Information

We may use personal information to:

• Respond to enquiries and demonstration requests
• Provide, support, secure and improve products and services
• Manage customer, supplier and partner relationships
• Arrange meetings, events and business communications
• Conduct relevant business-to-business marketing
• Understand and improve website use and performance
• Protect our systems, users and business operations
• Recruit employees and evaluate applications
• Comply with legal, regulatory and contractual obligations
• Establish, exercise or defend legal claims

Legal bases under the GDPR and UK GDPR

Where applicable, NEMS relies on one or more of the following:

• Contract: processing needed to enter into or perform a contract
• Legitimate interests: including customer management, relevant business communication, service improvement and security
• Consent: including certain marketing activities and non-essential cookies or tracking technologies
• Legal obligation: processing required by law
• Legal claims: processing necessary to establish, exercise or defend legal rights

Where we rely on legitimate interests, we assess those interests against the rights, interests and reasonable expectations of the individual.

5. Cookies and Similar Technologies

NEMS uses cookies, pixels, tags and similar technologies to operate the website, remember preferences, understand website use and, where consent has been provided, measure or support marketing activities.

Except where legally permitted or strictly necessary, non-essential technologies are not activated until you have provided consent. You may accept, reject or change your choices at any time.

Website interactions and communications

Some website technologies may process technical interactions such as page views, link clicks, device data, form submissions and campaign attribution. NEMS does not intend to intercept private communications or record the content of information entered into a form before it is submitted.

Website technologies are configured and used only for disclosed business purposes and, where consent is required, are activated only after consent has been provided. NEMS periodically reviews its website technologies, consent configuration and third-party providers.

6. Sharing of Personal Information

NEMS may share personal information with:

• Hosting, cloud, cybersecurity and IT service providers
• CRM, communications and customer-support providers
• Website analytics, marketing and event providers
• Professional advisers, auditors and insurers
• Companies within our corporate group where necessary
• Public authorities where required by law
• Parties involved in a legitimate corporate transaction

Providers are permitted to process personal information only for agreed purposes and are subject to appropriate contractual, confidentiality and security requirements.

International transfers

Some providers may process personal information outside Norway, the European Economic Area or the United Kingdom. Where required, NEMS uses recognised transfer mechanisms such as adequacy decisions, the European Commission's Standard Contractual Clauses, the UK International Data Transfer Addendum or other lawful safeguards.

Additional technical and organisational measures are used where appropriate to protect transferred information.

7. Retention and Security

How long we keep information

NEMS retains personal information only for as long as necessary for the purposes described in this notice, including contractual, security, accounting, legal and documentation requirements.

• Contact enquiries are retained for as long as needed to respond and document relevant follow-up
• Customer and contractual records may be retained throughout the relationship and applicable limitation periods
• Marketing information is retained until you object, withdraw consent or the information is no longer relevant
• Recruitment information is retained in accordance with applicable law and any consent provided
• Cookie and analytics information is retained according to the periods shown in the cookie consent tool

How we protect information

NEMS applies technical and organisational measures designed to protect personal information against unauthorised access, alteration, loss, misuse and disclosure.

Measures may include access controls, information classification, security monitoring, incident management, backup procedures, supplier management and employee awareness.

8. Your Privacy Rights

Depending on the law that applies to you, you may have the right to:

• Request access to your personal information
• Request correction of inaccurate information
• Request deletion of personal information
• Request restriction of processing
• Object to processing based on legitimate interests
• Object at any time to direct marketing
• Request data portability
• Withdraw consent at any time
• Lodge a complaint with a competent supervisory authority

Withdrawal of consent does not affect processing carried out lawfully before consent was withdrawn. Certain rights may be subject to legal exceptions.

In Norway, you may lodge a complaint with Datatilsynet, the Norwegian Data Protection Authority .

9. California and Other United States Privacy Rights

Residents of California and certain other US states may have additional rights where the relevant law applies to NEMS and the processing in question. These rights may include the right to:

• Know or access personal information
• Request correction or deletion
• Obtain a portable copy of personal information
• Opt out of the sale or sharing of personal information
• Opt out of targeted advertising or certain profiling
• Limit certain uses of sensitive personal information
• Appeal a decision concerning a privacy request
• Exercise privacy rights without discriminatory treatment

Sale, sharing and targeted advertising

NEMS does not sell personal information for monetary consideration. Analytics and advertising technologies may, however, be treated as "sharing" or targeted advertising under certain US state privacy laws. Where applicable, you may opt out through the website's cookie settings or by contacting NEMS.

Where legally required, NEMS recognises valid browser-based opt-out preference signals, such as Global Privacy Control.

California Invasion of Privacy Act

NEMS does not intend to use website technologies to intercept private communications. Third-party website technologies are used only for disclosed purposes, subject to appropriate controls and, where required, prior consent.

If you believe a website technology has processed the content of a private communication or form interaction in a way that is inconsistent with this notice, please contact NEMS so that the matter can be investigated.

10. Children

NEMS websites and services are intended for business and professional users and are not directed to children. NEMS does not knowingly collect personal information from children through its public website.

Please contact us if you believe a child has provided personal information to NEMS.

11. Changes to This Notice

NEMS may update this notice to reflect changes in processing activities, technologies, services or legal requirements. The current version will be published on this page with an updated effective date.

12. Contact Us and Submit a Request

Questions, objections or requests concerning personal information may be submitted to:

We may request reasonable information to verify your identity and protect personal information before responding to a request.