Privacy Policy

Who we are

This service (NordicGov AIMS) is provided by Investment Group AS, org. no. 819 572 992, Telegata 3, 3674 Notodden, Norway. Investment Group AS is the data controller for personal data processed about visitors to our website and holders of accounts.

For privacy questions, contact us at legal@nordicgov.eu.

What we collect

• Account data — name, work email, organisation, role.
• Content you enter — the governance, compliance and organisational data you register in the platform.
• Billing data — company name, address and VAT number. Card details are processed directly by our payment provider; we do not store card numbers.
• Technical data — IP address, log data and cookies needed to operate and secure the service.

Why we process it, and our legal basis

• To deliver the service — performance of our contract with you (GDPR Art. 6(1)(b)).
• Billing and accounting — to comply with legal obligations, including the Norwegian Bookkeeping Act (Art. 6(1)(c)).
• Security, support and improvement — our legitimate interest in a safe, reliable service (Art. 6(1)(f)).
• Marketing — only where you have given consent (Art. 6(1)(a)), which you may withdraw at any time.

Sub-processors

We use a small number of trusted providers to run the service, including a hosting and email provider and a payment provider (Stripe). They process data only on our instructions and under data processing agreements. We may update this list; material changes will be notified.

Where your data is stored

We aim to store data within the EU/EEA. Where a provider processes data outside the EU/EEA, we rely on appropriate safeguards such as the European Commission's Standard Contractual Clauses.

How long we keep it

We keep account and content data for as long as your account is active. After termination we delete or anonymise it within a reasonable period, except where we must retain certain records to meet legal obligations (for example accounting records, which Norwegian law requires us to keep for five years).

Your rights

You have the right to access, correct, delete, restrict and object to the processing of your personal data, and to data portability. Where processing is based on consent, you may withdraw it at any time. Contact us at legal@nordicgov.eu. You also have the right to lodge a complaint with the Norwegian Data Protection Authority (Datatilsynet).

Changes

We may update this policy from time to time. The date below shows when it was last revised.