Data Processing Agreement
Roles
When you use NordicGov AIMS, you are the data controller for the personal data you enter, and Investment Group AS (org. no. 819 572 992) is your data processor. This page summarises the data processing terms; a signed Data Processing Agreement (DPA) governs the relationship and is available on request.
Scope and instructions
We process personal data only to provide the service and on your documented instructions, for the duration of the agreement.
Security and confidentiality
We apply appropriate technical and organisational measures (GDPR Art. 32) and ensure that personnel are bound by confidentiality.
Sub-processors and assistance
We use sub-processors (including our hosting/email provider and Stripe) under written agreements, and will inform you of material changes. We assist you, taking into account the nature of the processing, with data subject requests, breach notification and impact assessments.
Deletion and audits
On termination we delete or return personal data as instructed, subject to legal retention. We make available the information needed to demonstrate compliance and to allow for audits. To request the signed DPA, contact legal@nordicgov.eu.
The Norwegian version of this document is the legally binding version; other languages are provided for convenience only.