Privacy Notice for Website Users

1. Introduction

This Privacy Notice for Website Users (hereinafter referred to as the "Notice") applies to the processing of personal data of website users in connection with their use of 24SevenOffice's website. When 24SevenOffice processes personal data about its website users, we will do so in accordance with applicable data protection laws, including the General Data Protection Regulation (GDPR) and national laws implementing these instruments as and when applicable. 

The 24SevenOffice company, whose website you are visiting, is the Data Controller for the processing of personal data that takes place in connection with your use of the website. When this Notice refers to "we", "us", or "Company", this should be understood as the Data Controller responsible for the lawfulness of the processing according to applicable data protection regulations. 

Please read this Notice before or while you visit our website. 

 

2. Collection of Personal Data from different sources

We collect your personal data through different means. Primarily, we collect and process data which:  

• is provided when you communicate with us, e.g. via chat, or do business with us like subscribe to our newsletter, contact us requesting an offer, or provide information to us through forms available at the website; 
  
  
• is generated when you visit our website or use our services provided therein, e.g. when browsing, downloading brochures, or searching information; and
  
  
• is obtained from publicly available sources or third parties, where permitted by applicable law, e.g. public registries or technical data from analytics providers, advertising networks, and search information providers.  

 

We may combine the data collected about you from publicly available sources and from our different interactions with you e.g. via e-mail or website activity. You may decide not to provide any personal data, but that may affect the functionally of our website or we will not be able to execute certain activities you have requested from us.  

 

3. Categories of Personal Data

The personal data we collect and process from our website users includes the following categories of data: 

• basic information, such as name, your title and relation to a company you represent and contact details (email, address and phone), or other identifiers;
  
  
• marketing and communication data e.g. your interests and preferences, selections, marketing permissions and prohibitions;
  
  
• your interaction with our customer support or chat tool and related records such as correspondence, your comments or responses to our surveys; 
  
  
• personal data generated or collected while visiting our website through cookies or other means, such as in connection with the logging into website with credentials (e.g. user IDs, passwords, authentication details), website activities (e.g., page views and time spent on the website), and other data related to how you use the website or our services; 
  
  
• technical data on browsing the website e.g. login information, language, device ID and type, internet protocol (IP) address, operating system, application settings, as well as other data collected by means of cookies and similar technologies; and
   
• other data, which is based on your consent and defined in detail on a case-by-case basis.

We may collect and use for any purpose aggregated data, where no natural person may be identified. Examples of such data are statistical data collected in connection with the use of our website. 

4. Purpose and Legal Basis for Processing Personal Data

Your personal data is processed for the following purposes:  

• To manage the relationship between us and you, or a company you represent, including managing and responding to your activities or communicating with you. For this purpose, we process various categories of personal data, including but not limited to: basic information, marketing and communication data, your interactions and related records, personal data generated or collected while visiting our website through cookies or other means, and technical data on browsing the website. The legal basis for processing for this purpose is our legitimate interest in providing you your requested services and ensure appropriate user experience.
  
  
• To market and inform you about our services, and for market research and customer surveys. This includes providing information about our services and us as a company, activities for promoting selling of our services and products as well as seeking your feedback. For this purpose, we process various categories of personal data, including but not limited to: basic information, marketing and communication data, your interactions and related records, personal data generated or collected while visiting our website through cookies or other means, and technical data on browsing the website. The legal basis for processing for this purpose is our legitimate interest in promoting our services and gaining insights of and serving better our website users.  
  
  
• To create personalised ads profile and deliver relevant content at the website, and to measure the effectiveness of the advertising. For this purpose, we process various categories of personal data, including but not limited to: marketing and communication data, personal data generated in connection with the use of our services or collected while visiting our website through cookies or other means, and technical data on browsing the website. The legal basis for processing for this purpose is your consent if you have provided us with it. 
  
  We also use different re-targeting tools to show you relevant advertisements about the services e.g. social media services, search platforms, and other third-party websites. By using cookies and equivalent technologies, these tools can show you advertisements that you might be interested in, based on your behaviour on websites.
  
  For more information on our use of cookies visit our cookie policy. 
  
  
• To develop and improve the website or for developing our own or our partner services. This includes analysing the use of our website and improving the site. For this purpose, we process various categories of personal data, including but not limited to:, your interaction and related records, personal data generated in connection with the use of our services or collected while visiting our website through cookies or other means, and technical data browsing the website. The legal basis for processing for this purpose is our legitimate interest in improving our website and developing our services.  
  
  
• To administer and maintain the website, including its security. This includes hosting and content delivery, fault prevention, repairs and generating internal reports. For this purpose, we process various categories of personal data, including but not limited to: technical data on browsing the website. The legal basis for processing for this purpose is our legitimate interest to ensure that the website runs correctly, efficiently, and securely for all users.  
  
  
• To recognise a return visitor to website and their activities. For this purpose, we use different digital marketing automation tools to collect information about website activities including, but not limited to page views and time spent on a website. Tools may show you advertisements about our services on other websites after leaving our website. This information is used to give you relevant advertisements based on your behaviour on our website.  
  
  Further information is available in our cookie policy. 
  
  For the purposes described herein, we process various categories of personal data, including but not limited to: personal data generated in connection with the use of our services or collected while visiting our website through cookies or other means and technical data browsing the website. The legal basis for processing for this purpose is your consent if you have provided us with it.  
  
  
• To enforce our legal rights and ensure compliance with the law. For this purpose, we may process all categories of personal data listed above in section 3. The legal basis for processing for this purpose is our legal obligations or our legitimate interest being able to demonstrate compliance of our operations and protect our rights in an appropriate manner.  

 

5. Disclosure and Transfers of Personal Data

Company may disclose personal data about website users to third parties acting as data processors or independent data controllers in the following situations: 

• When they are engaged for the provision of services to us or to assist us in the operation of our business and website.  
  
  
• When you have given your consent for placing third party cookies. Further information is available in our cookie policy. 
  
  
• When a government authority or law enforcement make a lawful request for personal data or any other data processed by the Company.  

To ensure that your personal data is processed in line with data protection regulations, we always enter into the necessary data processing agreements (DPA) with all companies that process personal data on our behalf. If a third party that processes personal data on our behalf use your personal data for their own purposes, the service provider in question becomes responsible for the lawfulness of the processing. If possible, we will strive to ensure that further processing of your personal data is not incompatible with the original purposes which it was collected for.  

The personal data is processed primarily in the EU/EEA. We may, however, transfer your personal data outside these areas if our service provider or partner, who processes personal data, is located fully or partly (e.g., for technical administration) in a third country. Third parties may transfer data collected via cookies outside the EU/EEA. 

To the extent that we are transferring your personal data to countries outside the EU/EEA, we will put in place appropriate safeguards to ensure that the personal data is subject to an equivalent level of protection as within the EU/EEA, including by entering into agreements based on the European Commission's standard data protection clauses or other approved transfer mechanisms. You may contact us for more information on such transfers, see contact information in section 9. 

 

6. Retention of Personal Data

We will process your personal data for as long as it is necessary to fulfil the purposes defined in this Notice. Your personal data will be deleted in accordance with applicable retention schedules in the Company.  Personal data that needs to be retained for a longer period of time in accordance with legal requirements will be deleted after the expiry of the statutory retention periods. 

For information regarding applicable retention periods, you may contact us, see contact information in section 9. 

 

7. Your Rights as a Data Subject

When we process your personal data, you have the following rights as a data subject:  

• Right of access and information:
  You can request a copy of all information about you, information about the purpose of the processing, where we have obtained the information from, disclosures of the information, retention period, and information about your rights as a data subject.
  
  
• Right to rectification:
  If you believe the data we have registered is inaccurate or incomplete, you can request that it be corrected or supplemented. 
  
  
• Right to erasure:
  In certain cases, you can request that some information about you be deleted. 
  
  
• Right to restriction:
  In certain cases, you can request that we temporarily restrict the way we process your personal data. 
  
  
• Right to object:
  You can object to the processing of your data, if our processing of your personal data is based on our legitimate interest. 
  
  
• Right to data portability:
  You may request to receive data collected on the basis of consent or for the fulfilment of an agreement in a machine-readable and commonly used file format. 
  
  
• Right to withdraw consent:
  If our processing of your personal data is based on consent, you may withdraw your consent at any time. Withdrawal does not affect the lawfulness of the processing that has already taken place.

Please note that the rights above are not absolute, and certain rights are subject to exceptions and conditions as set out in applicable data protection laws.  

You also have the right to file a complaint with a supervisory authority if you believe your personal data has been processed in violation of applicable data protection regulation. 

National supervisory authorities are:  

• In Norway:     Datatilsynet  
  
  
• In Sweden:     Integritetsskyddsmyndigheten  
  
  
• In Finland:     Tietosuojavaltuutettu 

 

8. Changes to this Privacy Notice

We will update this Notice as and when required to reflect any changes to our processing of personal data and/or changes to data protection regulations. You are encouraged to revisit this Notice from time to time.     

9. Contacts to this Privacy Notice

If you have any questions regarding this Notice, the personal data we process about you, or details of the data controller in your specific situation, please contact us at privacy@24SevenOffice.com. 

 

Last review

Reviews

07 May 2025

 

Change log

Edited: May 07, 2025
-  New version of the Privacy Notice for Website User published

Edited: June 07, 2024
- Update paragraph about EU-US Data Privacy Framework

Edited: April 14, 2023
- Updated definition about Data Processor and Data Controller

Edited: February 17, 2023
- Removed dubble sentence in paragraph about "Storage and Transfer"

Edited: May 3, 2022
- Included paragraph covering compliance to California Consumer Privacy Act ("CCPA").

Edited: March 7, 2022
- Updated information about cookies as a consequence of the implementation of the new cookie policy. Removed information that no longer is relevant under "How 24SevenOffice collects your personal data". Updated information about sub-processors and ownership of supplier that falls under the Schrems II verdict. Move some parts to other sections where they are more natural.

Edited: April 23, 2021
- In connection with the introduction of 24SevenOffice Payroll module, a new section under 1. What data do 24SevenOffice process is included. This section regulates what type of data that 24SevenOffice process to deliver payroll functionality to its customers.

Edited: October 2, 2020
- Contact information email adress is updated

Edited: May 3, 2018
- First edition of revised Privacy Notice after the changes in the laws and regulation regarding processing of personal data, known as General Data Protection Regulation (GDPR)