PRIVACY POLICY

IDEX ASA PRIVACY POLICY

Last updated 30 May 2018

1.IDEX’S COMMITMENT TO PRIVACY

IDEX ASA (“IDEX”) takes your privacy seriously. This Privacy Policy explains what data IDEX collects and how it is used, and is part of the Terms of Use available at www.idexbiometrics.com/terms-of-use/. IDEX collects personal information from you that identifies or is able to identify you, or other natural persons in the organization that you represent, as (a) natural person(s) (“Personal Information”) through your use of IDEX’s web site IDEX.NO (the “Site”). The Site also includes versions designed for browsing on mobile devices and the use of such devices is governed by this Privacy Policy as well.

If you are acting on behalf of others, you must ensure any other users of the Site are made aware of this Privacy Policy. You and such other users are collectively referred to as “you”.

By using the Site, you agree to allow IDEX to collect and process information as described below, even if that includes sensitive data.
Except where otherwise expressly indicated herein or on the Site, this Privacy Policy applies only to information collected on the Site and does not apply to information collected outside of the Site. Before using or submitting information to the Site please review this Privacy Policy carefully.

2. DATA CONTOLLER AND DATA PROCESSOR

IDEX is the data controller for your Personal Information. The Marketing Assistant has the daily responsibility for the processing of Personal Information on the Site.

Digitalbyrået A2N AS is data processor, and is IDEX’ supplier of development, operation and maintenance of the Site. The supplier uses sub suppliers.

3. WHERE IDEX STORES AND PROCESSES PERSONAL INFORMATION

The Personal Information IDEX collects from you may be transferred to and computer processed on servers placed in Norway depending on your location.

The data is stored on servers belonging to and operated by the data processor or its sub suppliers.

You consent to the above described transfer and processing of Personal Information.

4. COLLECTION PURPOSES

The purpose of processing your Personal Information is to enable and enhance the use of the Site, including enabling additional services and functionality. What that means in terms of what data IDEX collects and processes, how and where IDEX processes it, and for how long, is described below in this Privacy Policy.

5. COLLECTED PERSONAL INFORMATION

If you register with IDEX through the Site, IDEX collects and processes the following information from you:

  • Company
  • Name
  • Position
  • E-mail
  • Country
  • Website

In addition, IDEX, through the Site, automatically collects and processes general data from your computer or mobile device, such as your web browser type and version, and operating system of your computer. In addition, IDEX collects data about how you use the Site, such as the time and date you visited the Site, the areas or pages of the Site that you visited.

Some of the above data may be collected by use of cookies.

IDEX may process this Personal Information for purposes of operating, debugging, maintaining, improving, and optimizing the Site, marketing, and/or to maintain customer relationships. IDEX performs analysis of the data, for the above purposes and also for the purpose of providing its business partners access to relevant data.

You consent to the above described collection and processing of Personal Information.

6. LEGAL BASIS FOR PROCESSING

The legal basis for the processing of Personal Information is your consent and applicable data protection law. IDEX is a Norwegian company and your Personal Information is processed in accordance with the Norwegian implementation of the European Union (EU) Directive on the Processing of Personal Data from 1995 (DIRECTIVE 95/46/EC). Pursuant to the law, you have the right to:

  • have your Personal Information deleted
  • have any incorrect Personal Information corrected
  • information from IDEX, as data controller, regarding the data processing

Any surrender of data is voluntary, but some basic information is needed to enable the Site to operate.

7. DATA SHARING

IDEX does not share Personal Information for any commercial or marketing purpose unrelated to the delivery of IDEX services without asking you first.

The following are the situations where we may share Personal Information:

  • With your explicit consent: IDEX may share Personal Information when IDEX has your consent. One example of this would be if you sign up for additional programs offered by IDEX’s partners. If you do this, IDEX may share certain information with the partner.
  • For external processing: In addition to the data processor, IDEX may use vendors, service providers, and partners who may help with some of IDEX’s data processing and storage, including customer support services at IDEX’s partners. They may also assist with monitoring IDEX’s servers for technical reasons. These vendors (as well as IDEX personnel) can access certain information about you and your account in order to carry out their work. Such vendors are not allowed to use this data for non-IDEX purposes.
  • As part of business transitions: Upon the sale or transfer of the company and/or all or part of its assets, your Personal Information may be among the items sold or transferred. IDEX will request a purchaser to treat IDEX’s data under the Privacy Policy in place at the time of its collection.
  • For legal reasons: IDEX may provide information to government agencies and law enforcement agencies to comply with law, for example, in judicial proceedings or by court order.
  • IDEX may share non-Personal Information (for example, aggregated or anonymized customer data) publicly and with IDEX’s partners. For example, IDEX may publish research, or help IDEX generally improve its system.

You consent to the above described sharing of Personal Information.

8. OPTING OUT

IDEX respects the privacy of your Personally Information. If you tell IDEX that you do not wish to have this information used as a basis for further contact with you, IDEX will respect your wishes. You also may choose not to provide IDEX with certain information, but that may result in you being unable to use certain features of the Site.

You may instruct IDEX to stop sending you certain promotional materials (e.g., e-mail messages and newsletters) by following the unsubscribe instructions provided in those materials. Please note that if you use more than one name or e-mail address when communicating with IDEX or participating on the Site, you may continue to receive communications from IDEX to any name and/or e-mail address which you have not specified in your opt-out request.

IDEX provides you with the following options for accessing or removing your Personally Information from IDEX’s database:

  • You can send an email to mailbox@idexbiometrics.com, or
  • You can send mail to the following postal address:
    IDEX ASA, Martin Linges vei 25, NO-1364 Fornebu, Norway

9. SECURITY

IDEX has implemented various physical, electronic and procedural safeguards to protect the confidentiality and security of Personal Information under IDEX’s control. For instance, IDEX limits access to IDEX systems that store such information to authorized personnel, and IDEX restricts its personnel from processing user data without authorization by IDEX. IDEX will impose appropriate contractual obligations upon its personnel, including relevant obligations regarding confidentiality, data protection and data security.

IDEX will maintain your Personal Information for as long as a business need exists, or as required by applicable laws, regulations, or government orders. When IDEX dispose of Personal Information, IDEX uses commercially reasonable procedures to erase or render it unreadable.

IDEX will not disclose any Personal Information to any government, except as necessary to comply with the law or a valid and binding order of a law enforcement agency.

10. GOVERNING LAW AND VENUE

This Privacy Policy is governed and interpreted in accordance with the laws of Norway, without giving effect to any choice of law or conflict of law provisions that would cause the application of any other nation’s laws. You agree to exclusive jurisdiction by the courts located in Oslo, Norway and waive any jurisdictional, venue or inconvenient forum objections to such courts.

11. CHANGES TO THIS POLICY

IDEX may from time to time update this Privacy Policy. IDEX encourages you to periodically review this Privacy Policy to be informed of the latest changes. Whenever a change to this policy is significant, IDEX will place a prominent notice on, at least 10 days before the effective date.

If you have any questions regarding the terms of this Privacy Policy, please contact IDEX by sending an email to mailbox@idexbiometrics.com or by writing to IDEX ASA, Martin Linges vei 25, NO-1364 Fornebu, Norway.