What kind of business partner personal data does Nilfisk process and why do we process that data?

Customers, consultants, advisors, agents and vendors, including their advisors and other representatives, e.g. attorneys:

• Types of persons whose data we process (Data Subjects (Art. 4.1)): Employees, board members.
• Types of personal data Nifisk processes involving their employees:
  
  • Names,job titles and job functions
  • IP addresses
  • Business address and other contact details, e.g. telephone numbers and e-mail addresses
  • Credit Card information - commercial customer contact persons
  • Passwords and usernames

GDPR processing legal basis – legitimate business interests (Art. 6.1(f)):

Nilfisk processes this personal data to communicate with business partners in order for Nilfisk, as a vendor or customer/client, to:

• Negotiate and communicate regarding business relationships,
• Comply with its contractual obligations and exercise its contractual rights;
• Comply with applicable regulatory requirements, e.g. reporting to tax authorities, Customs, health and safety agencies, environmental authorities, enforcement agencies,
• Address legal issues arising from its business relationships,
• Develop and enhance commercial relations with business partners,
• Obtain advice and services, and;
• Evaluate goods and services offered by current or prospective vendors.

Further, Nilfisk processes this data because of its legitimate interests as a vendor (Art. 6.1(f)) in:

• maintaining and enhancing its relationships with customers, in order to provide them with its products and services, including repair, service and maintenance;
• providing current or prospective customers with information about Nilfisk’s products and services, e.g. in newsletters and other marketing information, subject to any required opt-in and opt-out options;
• enhancing Nilfisk’s website’s functionality and user experience using Cookies,
• unsolicited commercial contacts and direct marketing communications, e.g., providing information on similar products when someone browses products on our websites or purchases a product, subject to opt-out options,
• requesting and processing your reviews of our products and services, and;
• generating statistics and other anonymized information to enhance products and service.

Nilfisk retains your data for as long as operationally or legally necessary (Arts. 5.1(e), 6.1(f)), including:

• Up to ten (10) years after we are in contact about our business relationship;
  • To provide service and maintenance and maintain relevant business related data;
  • In case legal claims, disputes or other legal disagreements between us arise;
• Until you instruct us to delete your data, which we will do subject to retaining data necessary for relevant business purposes, e.g. accounting, service, legal requirements and legal claims, or;
• Up to 10 years after an actual or potential legal dispute or claim involving a business partner ends.
• Longer periods as required by applicable laws and regulations, e.g., health and safety. ​

Nilfisk obtains personal data from business partners themselves (Art. 13) and from Nilfisk employees and relevant third parties, including directories other business partners (Art. 14).