About the Privacy Policy

This privacy policy applies to Procano AS (hereinafter referred to as "we" or "us"). We act as the data controller with respect to the processing of personal data described in this statement.

Contact information for Procano AS regarding questions or inquiries related to privacy can be found in section 9.

Categories of Registered Personal Data

The privacy policy describes our processing of personal data related to the following categories of registered data:

• Contacts and employees of our corporate clients.

• Contacts and other private individuals who have consented to direct

marketing communications.

• Other private individuals who use the services offered by Procano.

• Job applicants.

Purpose, Types of Personal Data, and Legal Basis

Below, we have listed the purposes for our processing of personal data, which personal data we process, and the legal basis for such processing.

Direct Marketing

After obtaining active consent from our customers and contacts, we will collect personal data in connection with the distribution of our newsletter and other relevant marketing communications. Newsletters or other mailings to customers and contacts will include information about our products, services, professional articles, seminars, webinars, events, and courses. In this context, we will process the following personal data:

• Contact name

• Email

• Phone number

• Employer

• Title

The processing of personal data in connection with our distribution of marketing communications is based on contact consent and follows the General Data Protection Regulation Article 6(1)(a).

Processing of Personal Data in Connection with Registration for Our Seminars, Webinars, Events, and Courses

To fulfill our contractual obligations in connection with your registration for our seminars, webinars, events, and courses, it is necessary for us to process some of your personal data. In this context, we will process the following data:

• Contact name

• Email

• Phone number

• Employer

• Title

• Dietary preferences

The processing of the aforementioned personal data is necessary to participate in the relevant seminar, webinar, event, or course. We only process personal data provided by you in the registration form. The processing is necessary for us to fulfill our agreement with you as a customer, see the General Data Protection Regulation Article 6(1)(b) and also serves a legitimate purpose, see the General Data Protection Regulation Article 6(1)(f).

Processing of Personal Data When We Communicate Directly with You

We will also process personal data about you in connection with daily case management. This is necessary to provide you with a satisfactory customer experience regarding our products, services, seminars, webinars, events, and courses. In this context, we will process the following personal data:

• Contact name

• Email

• Phone number

• Employer

• Title

Job Applicants

We process personal data about you in connection with job postings and your job application. Job applicants receive direct information about which processes they will participate in and where/how the personal data is processed.

• Name

• Address

• Email

• Phone number

• Application/CV

• References/certificates

• Statements from references

• Background checks

• Internal assessments/interview notes

• Personality and ability tests

• Presentation videos

Service deliveries

Procano delivers digital services where the company will actively contribute to reducing and managing risks related to digitalization. Procano may, in this context, collect and process information related to devices, users, or services to the extent necessary to deliver services according to the service agreement entered into. Management of personal data is governed by the legal terms and the associated data processing agreement with Procano as the data processor.

Cookies

We use cookies to gain insights into user interactions on our websites. A cookie is a text file that is stored on the user's computer when the user opens a webpage. Cookies are used, among other things, to recognize the websites the user visits, improve the websites, and customize offers on products and services.

When you as a user visit our websites, you will be asked to either accept or decline the use of cookies. You can withdraw your consent related to the use of cookies at any time. You can also delete existing cookies.

The use of cookies is regulated by the Electronic Communications Act § 2-7b and associated regulations.

Partners with whom we share personal data

We do not sell, trade, or otherwise transfer your personal data to third parties. Exceptions are trusted third parties who help operate our websites and business, to deliver ordered goods, provide service or assistance. Access to personal data is then limited to personnel who need access to perform their tasks. Data processing agreements have been entered into that require our partners, for example, IT service providers, to operate in a structured, risk-based manner, with continuous improvement and to maintain an adequate level of privacy and information security.

Storage of Personal Data

Personal data for which Procano is responsible will not be stored in our systems longer than necessary to fulfill the purpose of the processing or statutory obligations to which Procano is subject.

Your Rights

As a registered individual, you have the right to request access to the personal data we have registered about you for which Procano is the data controller. You can also request correction, deletion, and restrictions on the processing of personal data in accordance with privacy@procano.com.

If you are still dissatisfied, you also have the right to submit a complaint to the Data Protection Authority as the supervisory authority. The processing of personal data related to the exercise of registered individuals' rights follows the General Data Protection Regulation Articles 15-22 and 77.

Information Security

Procano's management system is certified according to the quality and security standard ISO 27001. Procano has implemented organizational and technical measures to ensure that your personal data is processed securely and in accordance with the requirements of integrity, confidentiality, and availability in applicable privacy legislation. The information security of our IT systems is regularly assessed through risk management, internal and external audits. Evaluations related to the level of privacy protection are conducted if personal data can be transferred to countries outside the EU/EEA. Where our processing involves transferring personal data outside the EU/EEA, we ensure measures to protect the personal data.

Changes to the Privacy Policy

We may make adjustments to this privacy policy. The latest version is available on our websites.

Contact Information

For questions or inquiries related to privacy, please contact us at:

Email: privacy@procano.com

Phone: +47 22 52 50 20