This Privacy Policy applies to the collection, use, and processing of personal data in connection with the services we offer. (You can find information about the Services on our website).

ProCorp AS (“ProCorp”) is responsible for the processing of personal data in accordance with this Privacy Policy and acts as the data controller in accordance with applicable data protection laws. The applicable data protection law is the EU General Data Protection Regulation 2016/679 as implemented in Norwegian law (hereinafter referred to as “GDPR”).

If you have any questions regarding this Privacy Policy, please contact us at post@procorp.no or +47 22 47 88 20.

1. PURPOSES OF PROCESSING

ProCorp processes personal data for the following purposes:

• Entering into or fulfilling contracts with customers in connection with the Services.
• Administration of customer relationships.
• Compliance with legal obligations.
• Marketing of the Services.

2. LEGAL BASIS FOR PROCESSING

Processing of personal data in connection with entering into or fulfilling a contract with customers acting as individuals (not on behalf of a company) is based on GDPR Article 6(1)(b). Processing of personal data for the same purposes when the data subject is an employee acting on behalf of a company is based on GDPR Article 6(1)(f). The processing of personal data serves a legitimate interest of both ProCorp and the company, and the data subject’s privacy is safeguarded through the employment contract with the individual and the guarantees provided by ProCorp in this Privacy Policy.

The administration of customer relationships has the same legal basis as the activities mentioned above since this processing is also necessary for the performance of the Services or serves legitimate interests, which are not overridden by the data subject’s privacy interests.

3. RECIPIENTS OF PERSONAL DATA
ProCorp may sometimes share personal data with third parties when necessary for the delivery of the Services and/or if requested by the customer, such as when the provision of the Services requires collaboration with such a third party, typically a bank or another financial institution.

Providers of IT solutions used by ProCorp for the processing of personal data may have access to personal data for purposes specifically stated in a data processing agreement, e.g., maintenance and support services related to the IT system. The data processing agreement obligates the provider to comply with applicable data protection laws when performing its services for ProCorp.

Personal data may be disclosed to national authorities if required by Norwegian law, e.g., for compliance with obligations under the Norwegian Anti-Money Laundering Act.

If personal data is to be transferred to a country outside the EEA that does not provide adequate safeguards for the data, ProCorp will enter into the EU’s standard contractual clauses for the transfer of personal data with the relevant company or use other legal mechanisms that make the transfer lawful (in accordance with GDPR Chapter V).

4. DATA SECURITY
ProCorp continuously works to prevent unauthorized access, disclosure, or other unauthorized processing of personal data. We have implemented physical, technical, and administrative procedures and measures to protect personal data.

– Personal data is stored in secure operating environments accessible only to ProCorp employees and subcontractors who have a legitimate need for access to the information.
– All our employees are subject to strict confidentiality obligations as set out in the Financial Undertakings and Financial Groups Act Section 9-6.

5. DELETION
ProCorp has established procedures for the storage and deletion of personal data to ensure that personal data is not retained for longer than necessary to fulfill the purposes of processing. Please note that even if personal data was collected for one purpose, e.g., for the purpose of delivering the Services, another purpose may require us to retain the same information for a longer period, e.g., legal obligations arising from Norwegian accounting rules or the Anti-Money Laundering Act. You may also provide your consent for further processing of your personal data, e.g., to allow us to contact you regarding Services that we believe may be of interest to you or companies you represent.

6. YOUR RIGHTS
You may at any time request a copy of your personal data that we have registered and/or request that we correct errors in your personal data. If technically feasible, we can transfer personal data you have provided directly to another company.

7. USE OF COOKIES
We use cookies on our websites. A cookie is a small text file that is stored on your computer when you visit our websites. Cookies help us identify your computer.

8. CHANGES
We may change this Privacy Policy from time to time. You will always find the latest version here. If we make changes that significantly alter our privacy practices, we will post a notice on our websites before the changes take effect.6.