Privacy policy

This privacy policy describes how Bård ("the Solution") collects and processes personal data. Bård Styreportal AS, represented by its General Manager, is the data controller for the company’s processing of personal data.

Please note that when our customers (end customers) store personal data relating to their board members, shareholders, members or similar individuals in the Solution, the customer is the data controller for such data, while Bård Styreportal AS acts solely as a data processor. A separate Data Processing Agreement governs this processing on behalf of the customer.

This policy contains information you are entitled to receive when personal data is collected through the Solution, as well as information about how we process personal data.

Bård Styreportal AS is a Norwegian company delivering software and services to private and public organizations in Norway. The company’s headquarters are located on Karmøy, Norway, and the company is subject to Norwegian and European data protection legislation, including the General Data Protection Regulation (GDPR).

By using the website or the Solution, you consent to this privacy policy.

What Personal Data We Store

The Solution collects and stores information necessary to provide you as a user with the best possible solution for board work, and to improve, protect and market our services.

Norwegian companies are subject to statutory documentation obligations that may apply for many years after data has been registered. Certain information must therefore be retained in order to comply with such legal obligations.

The following categories of personal data may be registered in the Solution:

• Names, email addresses, telephone numbers and board positions for board members
• Names and email addresses of meeting participants
• Names and email addresses of individuals granted access to files through sharing
• Names and email addresses related to subscription invoicing
• Names and email addresses related to support inquiries
• Names and email addresses of contacts registered as shareholders
• Names, email addresses, telephone numbers and postal addresses for members registered in membership registers
• Names, email addresses and dates of birth for individuals who sign documents electronically
• Technical data related to use of the Solution in order to monitor uptime and detect error situations

To enable document search functionality, the Solution may process uploaded PDF files using optical character recognition (OCR). This content is not stored in a structured format, but may in some cases contain personal data.

How We Use the Information

The information registered is used to operate and manage the Solution for our customers, as well as to improve and further develop the Solution.

Depending on your selected preferences, the information may also be used to send newsletters, notifications from the Solution, and information related to support requests or other inquiries.

Cookies

Cookies are small text files placed on your computer or mobile device when you visit a website. The Solution uses the following cookies:

• Google Analytics Used to collect statistics about website visits.
• Google reCAPTCHA v3 Protects against spam by analyzing user behavior to assess whether visitors are human or automated bots.
• Intercom Used for chat, support, help articles and product updates.
• LinkedIn Used to collect data for advertising on the LinkedIn network.
• Meta Used to collect data for advertising on Meta’s platforms.
• Microsoft Azure The website is hosted on Microsoft’s cloud platform Azure, which uses cookies to ensure efficient website performance.
• Microsoft Bing Used to collect data for advertising on Bing.
• Mux Used to analyze and optimize video playback.

Google API Services

Bård’s use and transfer of information received from Google APIs will comply with the Google API Services User Data Policy, including the Limited Use requirements.

Sharing of Personal Data

Personal data is only shared with third parties where necessary to deliver the Solution, such as for email distribution, hosting, or backup services. Separate data processing agreements regulate which personal data is shared with such third parties.

We use external service providers (sub-processors) for the operation of the Solution, including cloud hosting and email distribution services. An updated overview of our sub-processors is available in our Sub-processor Overview. These sub-processors process personal data solely on our behalf and in accordance with data processing agreements and our documented instructions.

In certain circumstances, Bård Styreportal AS may be required to disclose personal data pursuant to a court decision, law or regulation.

Customers of the Solution may create additional users who are granted access to information registered by the customer. The customer is responsible for ensuring that individuals granted access have the legal right to view such information.

Storage and Transfer of Data

Personal data is primarily stored on servers located within the EU/EEA.

In certain cases, we use service providers established outside the EU/EEA (for example in the United States) in order to deliver the Solution. In such cases, we ensure appropriate safeguards in accordance with applicable data protection legislation, such as the use of the European Commission’s Standard Contractual Clauses (SCCs) or other valid transfer mechanisms. These measures ensure that your rights are safeguarded regardless of where your data is processed.

Your Rights

You have the right to access your personal data by requesting an overview of the personal data we process about you, and you may have the right to data portability. You also have the right to request correction of inaccurate personal data.

Furthermore, you have the right to request deletion of personal data, and to restrict or object to the processing of your personal data in accordance with this privacy policy or other service-specific terms.

Please note that in certain cases you may not be entitled to have these rights fulfilled. In such instances, Bård Styreportal AS will explain the legal basis for the decision.

Requests related to your rights may be sent to support@brd.no.

You also have the right to lodge a complaint with the Norwegian Data Protection Authority (Datatilsynet) concerning our processing of your personal data.

Contact Information

Inquiries regarding privacy matters relating to Bård may be directed to:

support@brd.no

This translation is provided for informational purposes only. In the event of any disagreement, the current Norwegian version shall be legally applicable.