Privatlivspolitik

Sprog

Dokumentet er kun tilgængeligt på engelsk. Nodavios juridiske dokumenter foreligger i en engelsk udgave, som er den gældende. En dansk oversættelse er under udarbejdelse. Spørgsmål kan sendes til legal@nodavio.dk.

Privatlivspolitik

Nodavio respects your privacy. This Privacy Policy explains how personal data is processed when you visit the Nodavio website, contact us, sign up for information about Nodavio, or use Nodavio as a user.

Nodavio is currently operated by the founder of Nodavio as a sole proprietor and is not presently registered as a separate legal entity.

For privacy related questions, please contact:

Nodavio
Kaj Munks Vej 11
7400 Herning
Denmark

Email: legal@nodavio.dk

1. Scope

This Privacy Policy applies to personal data that Nodavio processes for its own purposes in connection with the Nodavio website, the Nodavio application, customer and user administration, support, communications, security, billing and related business activities.

It does not govern personal data that a customer stores in Nodavio where Nodavio processes that data solely on the customer's behalf. In that situation, the customer is normally the data controller and Nodavio acts as the customer's data processor. Such processing is governed by the Data Processing Agreement between Nodavio and the customer.

2. Personal data we process

Depending on how you interact with Nodavio, we may process the following categories of personal data:

Website visitors

We may process technical information about your visit, including IP address, browser and device information, information about how you interact with the website, and information generated through necessary or consent based cookies and similar technologies.

People who contact us

If you contact Nodavio by email, telephone or another communication channel, we may process your name, contact details, the contents of your communication and information necessary to respond to you.

Prospective customers

If you contact Nodavio about the service before subscribing, we process the information you provide, such as your email address and, where provided, your name and organisation, in order to respond to you.

If you begin a subscription, the email address you enter is passed to our payment processor to create the subscription and is used to send you your login details once payment completes.

Nodavio users

If you use the Nodavio application on behalf of a customer, we may process information such as your name, email address, account status, role, authentication information, login activity, security events and records of actions performed through your account.

Customer and business contacts

If you represent a customer, supplier or prospective customer, we may process your name, professional contact details, organisation, correspondence and information relating to the business relationship.

Billing

We may process information necessary to administer subscriptions and payments, including customer identity, subscription information, usage relevant to billing and payment related records.

3. Information contained in customer accounts

Nodavio is designed to allow organisations to manage information about computers and other IT equipment.

Customer administrators and users may enter information such as names, email addresses, departments, locations, asset information, serial numbers, maintenance history, repair information, notes, operating system information, hardware information, IP addresses and other information relating to IT equipment.

Where Nodavio processes this information solely on behalf of a customer, the customer determines the purposes and means of that processing and is responsible for ensuring that the processing is lawful.

Nodavio does not use customer account data for its own unrelated purposes.

Customers should not use free text fields to store sensitive personal information unless such processing is necessary, lawful and appropriate for the customer's purpose.

4. AutoDiscovery

Nodavio may provide an optional Windows agent that automatically reports technical information about enrolled computers.

Depending on the configuration and functionality of the service, this may include information such as hardware information, operating system information, device information and IP address.

The agent is intended to collect information relating to the enrolled device. It is not intended to collect documents, the contents of files, browser history or unrelated information from the device.

The customer is responsible for determining which devices are enrolled and ensuring that the use of the agent is lawful in its organisation.

5. Purposes of processing

Nodavio processes personal data where necessary for purposes including:

1. providing and operating the Nodavio service;
2. creating and administering user accounts;
3. authenticating users and protecting accounts;
4. providing customer support;
5. communicating with customers and prospective customers;
6. administering subscriptions and payments;
7. maintaining security and preventing misuse;
8. maintaining logs and audit records;
9. diagnosing technical problems and improving the reliability of the service;
10. complying with legal obligations; and
11. establishing, exercising or defending legal claims.

6. Legal bases

Depending on the circumstances, Nodavio relies on one or more of the following legal bases under the GDPR:

Performance of a contract, where processing is necessary to provide a service or otherwise perform an agreement.

Legitimate interests, where processing is necessary for purposes such as operating and securing our services, communicating with business contacts, preventing abuse, maintaining records and improving the service, provided that our interests are not overridden by the individual's rights and interests.

Legal obligations, where processing is necessary to comply with applicable law.

Consent, where consent is required or is the appropriate legal basis, including for certain cookies or marketing communications.

Where processing is based on consent, consent may be withdrawn at any time. Withdrawal does not affect the lawfulness of processing carried out before withdrawal.

7. Cookies and similar technologies

Nodavio uses only technically necessary cookies and similar technologies: those required to maintain a secure session, keep you signed in, and remember necessary technical preferences such as your chosen language and display theme.

Nodavio does not currently use analytics, advertising or other tracking technologies on its website or in its application, and therefore does not operate a cookie consent banner. Danish data protection authorities state that technically necessary technologies may be used without consent, while consent is generally required before non essential technologies are placed or accessed.

If Nodavio introduces non essential technologies in future, consent will be requested before they are placed or accessed, and this Policy and the Cookie Policy will be updated before that happens.

The exact technologies used may change as the service develops, so this section should be read together with Nodavio's Cookie Policy.

8. Service providers and processors

Nodavio uses selected suppliers to operate the service and its business.

These may include providers of:

1. hosting and infrastructure;
2. databases and storage;
3. email delivery;
4. authentication and two factor authentication;
5. backups;
6. logging and monitoring;
7. analytics; and
8. other technical services necessary to operate Nodavio.

Where a supplier processes personal data on behalf of Nodavio, Nodavio will require appropriate contractual safeguards.

Where Nodavio processes customer data on behalf of a customer, the relevant relationship is governed by the Data Processing Agreement.

9. International transfers

Nodavio's intention is to keep customer data within the European Economic Area where the relevant infrastructure permits this.

If personal data is transferred outside the EEA, Nodavio will ensure that an appropriate transfer mechanism and safeguards are in place as required by applicable data protection law.

10. Security

Nodavio uses technical and organisational measures intended to protect personal data against unauthorised access, alteration, loss, destruction and other unlawful processing.

Depending on the relevant system and data, these measures include encryption, password hashing, two factor authentication, role based access controls, tenant isolation, rate limiting, access logging, action logging and backups.

No internet based service can guarantee absolute security. Nodavio therefore cannot guarantee that a security incident will never occur.

11. Retention

We retain personal data only for as long as reasonably necessary for the purposes for which it was collected, including to fulfil contractual, accounting, legal and security requirements.

Account and customer data is generally retained for the duration of the customer relationship and subsequently handled in accordance with the applicable agreement.

Records deleted inside a customer account are soft deleted and permanently removed after 90 days, as described in the Terms of Service and the Data Processing Agreement.

Security and audit records may be retained for an appropriate period where necessary to protect the service, investigate incidents or establish and defend legal claims.

12. Your rights

Subject to applicable law, you may have the right to:

1. request access to your personal data;
2. request correction of inaccurate personal data;
3. request deletion of personal data;
4. request restriction of processing;
5. object to certain processing;
6. request data portability where applicable; and
7. withdraw consent where processing is based on consent.

You may exercise your rights by contacting legal@nodavio.dk.

We may need to verify your identity before fulfilling a request.

You also have the right to lodge a complaint with the Danish Data Protection Agency (Datatilsynet) if you believe that your personal data is being processed unlawfully.

13. Marketing communications

Where required by applicable law, Nodavio will obtain consent before sending electronic marketing communications.

You may unsubscribe from marketing communications at any time.

Service related communications, including information necessary to administer an account or provide the service, are not treated as marketing communications merely because they are sent electronically.

14. Changes to this Privacy Policy

Nodavio may update this Privacy Policy when necessary to reflect changes to the service, applicable law or our processing activities.

The latest version will be published on the Nodavio website.

15. Contact

Questions concerning this Privacy Policy or the processing of personal data may be sent to:

Nodavio
Kaj Munks Vej 11
7400 Herning
Denmark

Email: legal@nodavio.dk