Language

Privacy Policy for Identum

Last updated: January 7th, 2025

Introduction

The Privacy Statement helps you understand what personal data Identum AS collects and why we collect it, and how we handle, protect, store, export, and delete your personal data.

Personal data is any information relating to an identified or identifiable natural person, such as an email address, street address, phone number, etc.

Contact Us

If you have any comments or questions about our Privacy Statement, or any privacy concerns, including regarding a possible breach of your privacy, please contact us by sending an email to salg@identum.no or by using the privacy request form. 

You can also contact our office at:
Identum AS
Strandkaien 16
5013 Bergen
Norway

Telephone number for privacy related requests: +47 901 901 32

Processing Activities

Identum AS processes your personal data for the processing activities as described below.

Marketing newsletters

Identum AS uses email as a tool to distribute marketing communication, however only if you have consented in accordance with national marketing legislation (if needed). The personal data processed for this purpose is name and email address. 

Our legal basis for this processing of personal data is our legitimate interests to provide interested individuals with marketing communications, cf. GDPR article 6 nr. 1 f). 

The personal data will be deleted when you decide to opt out of receiving marketing communications from Identum AS. This can be done in the following ways:

  • Following the instructions for opt-out in the relevant marketing communication
  • Changing preferences under the relevant account settings if you have an account with Identum AS
  • Contacting us via e-mail at salg@identum.no
  • Contacting us via this form

Please note that when opting out from receiving marketing communications, you may still receive communications from Identum AS, such as order confirmations and notifications necessary to manage your account or the services provided to Customers.

Profiling

When you interact with Identum AS e.g. by visiting our web pages, downloading content, attending webinars, and as part of using our services, Identum AS will be processing your personal data to provide relevant content to you through direct marketing on social media platforms and emails, webpages or in a service, based on your preferences. 

The purpose of this profiling is to deliver customized marketing to you, improve your user experience with our services / websites and deliver products that our customers are satisfied with. The personal data processed are aggregated details about you such as IP address, interests (where you have clicked, etc.), username and device. This is done through technologies like cookies. See our Cookie Policy for a complete list of cookies that we use on our website, storage time for each cookie, recipient of cookie-data, and purpose for using said cookie-data. 

Our legal basis for this processing of personal data is our legitimate interests to provide relevant content to you, cf. GDPR article 6 nr. 1 f). Identum AS’s services are generally used as tools for work-related purposes, and your behaviour in these tools says little about your personal life. No sensitive data is processed. Your personal data is processed from a business perspective in a way that we believe does not conflict with your freedoms and rights as an individual.

The personal data will be deleted when you opt out of being subject to profiling by contacting us via e-mail at salg@identum.no or by using this form. Cookies are also subject to different retention policies. You will also always have the option to change cookie settings, and to use your right to protest cf. GDPR article 21. This can be done by clicking on “Cookies Settings” at the bottom of the webpage. In general, the personal data is only stored as long as necessary to fulfil the purpose of processing, and no longer than 3 years after the last registered activity.

Recruitment

Identum AS processes personal data during recruitment to effectively manage recruitment processes, handle job applications, evaluate submitted documentation, conduct interviews, and contact references. The personal data processed for this purpose is contact information such as name, address, telephone number, and email, as well as CV, application and other submitted documents, as well as personality and ability tests conducted during the application process.

Our legal basis for this processing of personal data is our legitimate interests to find the right candidate, cf. GDPR article 6 nr. 1 f). For candidates that we elect to move forward with and offer a job, we will process certain personal data, including your contact information and other specific personal data you request us to process, for the purpose of entering into a contract pursuant to GDPR article 6 nr.1 b), which relates to processing necessary to perform a contract or to take steps at your requests, before entering a contract.

The personal data will be deleted when the recruitment process concludes. Typically, this occurs no later than six months after the application deadline, unless an alternative arrangement is agreed upon with you.

Security

Identum AS processes personal data in order to detect, mitigate, and prevent security threats and abuse, as well as perform necessary maintenance and debugging. The personal data involved includes your name, email address, user and web traffic data such as login ID, username, IP address, and device information.

Our legal basis for this processing of personal data is our legitimate interests, cf. GDPR article 6 nr. 1 f). The legitimate interest is to maintain a secure environment for our customers and operations. 

 We will only store your personal information for as long as necessary to fulfil the purpose of processing, and your personal data will be deleted after 3 years.

Deliver products and services to customers

Identum AS processes personal data to manage customer orders, agreements, and payments for the products and services we provide. The data processed includes basic personal details, such as name, address, telephone number, and email, along with invoice-related information.

Our legal basis for this processing of personal data is our legitimate interests, cf. GDPR article 6 nr. 1 f). The legitimate interest is to facilitate the delivery of products and services to the customers’ contact person.

We will only store your personal information for as long as necessary to fulfil the purpose of processing, but in most cases never longer than 3 years after your last registered activity.

Registration for webinars and courses

When registering for webinars and courses, we collect personal data, which is also used for follow-up after the course, such as issuing course certificates. The personal data processed is contact information such as name and email, billing details, and details of the registered course.

Our legal basis for this processing of personal data is our legitimate interests, cf. GDPR article 6 nr. 1 f). The legitimate interest is to provide webinars and courses to interested individuals.

We will only store your personal information for as long as necessary to fulfil the purpose of processing, and your personal data will be deleted after 3 years.

Service improvement 

Identum AS continuously strives to improve and develop the quality, functionality, and user experience of our products, services, and websites. The personal data we process includes your name, email address, user and web traffic information such as login ID, username, and IP address. Additionally, we process statistics that indicate how you use our software and engage with content on our website.

Our legal basis for processing your personal data is our legitimate interest, cf. GDPR article 6 nr. 1 f). The legitimate interest is to ensure that we meet our customers' expectations and fulfills all contractual commitments.

We will process your personal data only as long as necessary to fulfill the purpose. After three years, the personal data is deleted or anonymized for statistical use.

Handling requests and providing support

The purpose of handling questions and concerns raised through a contact form, chatbot or similar on our website is to facilitate communication and support for users interacting with us. If you contact us via such channels, we will process the personal data that you include in the request. This will at minimum include contact details. 

Our legal basis for this processing of personal data is our legitimate interests, cf. GDPR article 6 nr. 1 f). The legitimate interest is to respond to questions and concerns raised by visitors on our website.

Requests and related correspondence are only stored as long as necessary to fulfil the purpose of processing, and no longer than 3 years after the last correspondence in relation to the request.

How your personal data may be shared

Within the Visma Group
Identum AS is a part of the Visma Group, which consists of several subsidiaries. In order to maintain an overview and insight, we may share your personal data across companies in the Visma Group.

Outside of the Visma Group
Identum AS may also share your personal data with external third parties in the following contexts:

Processors 
Identum AS uses processors to process personal data. These processors are typically vendors of cloud-based services or other IT services. When using processors, Identum AS will enter into a data processing agreement in order to safeguard your privacy rights. If processors are located outside the EU/EEA, we ensure legal grounds for such international transfers on your behalf, hereunder by using the EU Model Clauses. You are welcome to request more detailed information on our processors by contacting us as described in the section “Contact us”. 

User communities
If you make a post, comment or similar on user communities or other forums or sites, such information can be read and used by anyone with access to such forums. Identum AS is not responsible for any information you submit on such forums or sites.

Business partners
Identum AS may share your personal information with partners in the event this is legitimate from a business perspective and according to applicable privacy legislation.

Public authorities
The police and other authorities may request access to personal information from Identum AS . In these cases, we will only provide the data if there is a court order etc. to do so.

Your rights

You can invoke the following rights in relation to our processing of your personal data:

  • Access. You have the right to request a copy of personal data we process about you. 
  • Rectification. You also have the right to request rectification of inaccurate personal data concerning you. If you have an account for our sites or services, this can usually be done through the appropriate "your account" or "your profile" sections on the applicable site or service.
  • Deletion. You can request deletion of personal data relating to you. 
  • Restriction. You may ask us to restrict the processing of your personal data
  • Portability.  You may ask us to provide you or others with your personal data in a structured, commonly used and machine-readable format.
  • Object. You have the right to object to our processing of your personal data on the basis of legitimate interests or for direct marketing purposes. You also have the right to object to our processing of your personal data for the performance of tasks carried out in the public interests or in the exercise of official authority or based on legitimate interests. 

Please note that there may be certain exceptions or limitations to the above mentioned rights which could apply depending on the specific circumstances of your situation. In such cases, we will provide you with detailed information about the applicable exception or limitation and help you exercise your rights to the fullest extent possible, in accordance with applicable laws and regulations.

Please send an email to salg@identum.no or use this privacy request form to file requests as mentioned in this section.

Finally, you also have a right to file a complaint to the data protection authorities with regards to our processing of your personal data.

Third-Party Privacy Policies

www.identum.no's Privacy Policy does not apply to other advertisers or websites. Thus, we are advising you to consult the respective Privacy Policies of these third-party ad servers for more detailed information. It may include their practices and instructions about how to opt-out of certain options.

You may consult this list to find the Privacy Policy for each of the advertising partners of www.identum.no.

Third-party ad servers or ad networks use technologies like cookies, JavaScript, or Web Beacons that are used in their respective advertisements and links that appear on www.identum.no, which are sent directly to users' browser. They automatically receive your IP address when this occurs. These technologies are used to measure the effectiveness of their advertising campaigns and/or to personalise the advertising content that you see on websites that you visit.

Note that www.identum.no has no access to or control over these cookies that are used by third-party advertisers.

Consent

By using our website, you hereby consent to our Privacy Policy and agree to its Terms and Conditions.

To change, revoke or give additional cookie consent you can click the banner above the top menu on this page. This will open the cookie consent options pop-up window at the bottom of your screen.

Changes to This Privacy Policy

We encourage you to review the Privacy Statement regularly. If we make significant changes to the Privacy Statement that materially alter our privacy practices, we will notify you of this. 

The Privacy Statement was last updated: 2025-01-07.