Our processing of your personal data

 Last updated: March 31, 2025

You have been referred here because Junglemap AS or affiliated entities (”Junglemap”, ”we” or ”us”), as data controller, process personal data about you. As a website visitor, webinar attendee, customer or supplier representative, newsletter subscriber, job applicant, or via other channels show interest in Junglemap, you accept to the processing of personal data described in this privacy notice. We do this because you are an important person for us and we respect your privacy rights. The processing takes place in accordance with applicable regulations, including the general data protection regulation (”GDPR”), and as described further below. If you have questions or queries concerning how we process your personal data or want to have advice on data protection and privacy issues, you are welcome to contact us, see contact details below.

Besides ensuring that our processing of your personal data is correct and transparent in relation to you, we always endeavour to maintain a high level of security in all processing of personal data where we continuously assess and take into account both technical and organisational risks in order to optimally protect your personal data from unauthorised access, use, change and deletion.

Junglemap operates as a data processor within the scope of processing activities connected to the services we provide to the customers in our operations. Information about these specific processing activities that Junglemap undertakes on behalf of the customer within the scope of the company's services are outlined in the Data Processing Agreement (“DPA”) with the customer.

Our processing of your data is described below in three different sections, one or several use-cases of which may affect you depending on the relationship you have with us, followed by a general description of our processing of your personal data, our security measures, which rights you have as an individual, changes to this notice and how you can contact us.

1. Networking, marketing and exchange of knowledge, describes the personal data processing which takes place in connection with our communication with and maintenance of our network of contacts for marketing and exchange of knowledge, as well as for processing of our suppliers.

2. Job applicants, is targeted at those who have submitted or plan to submit a job application to Junglemap.

3. Customer representatives, describes how we process personal data regarding you as a customer representative for a company or other legal entity in connection with acceptance of a service agreement or assignment as well in execution of the agreement.

1. Networking, marketing and exchange of knowledge

Why we process (Purpose): We process your personal data in order to maintain our contacts and network to keep our knowledge and information about you up-to-date, and also to market our services and maintain the relationship with our suppliers.

We also process for the purpose of complying with accounting requirements in relation to suppliers and in connection with representation activities.

How we process: We collect the data and compile it, including on the basis of which products or services you may be interested in. We use third parties within the framework of the purpose stated above, such as dispatch of mails and processing of registrations for webinars or newsletters.

What we process: We primarily process your contact details, your role in your organisation and information about which type of products or services we feel is of the most relevance to you.

Legal basis - Legitimate interest: In the processing detailed above we take into account and weigh up your interest and privacy rights in relation to our interest and purposes (as indicated above) in performing the processing. By balancing these interests, taking into account both positive and negative effects, we then draw the conclusion that our interest is legitimate.

Legal obligation: The Book-keeping Act places requirements on us in relation to accounting and invoicing.

Collection and distribution: The data we have about you is primarily collected from you. We share the data solely with third parties that are needed for execution of the processing, and within the framework of the purposes indicated above. For example:

- Payment solutions (card companies, banks and other payment service providers).

- Marketing (via advertising agencies, online/media agencies and distribution linked thereto, as well as social media).

- IT services (companies which handle necessary operations, technical support and maintenance of our IT solutions).

Storage period: We only keep your data for as long as we judge to be legitimate, taking into account what is stated above regarding legal basis and purpose, in this case, two years from the last time you interacted with us.

2. Job applicants

Why we process (Purpose): We process your personal data in order to manage your application and to be able to evaluate, compare and match with the needs we have for resources.

We store your data as indicated below so that we can contact you if a new need should arise within the storage period.

How we process: We compile the information you submitted and compare with other candidates as well as with our needs. We check the information verbally with the references you provided, and also supplement the information with whatever data that we receive from these references.

What we process: We primarily process such information that you submitted to us in your application, i.e. your resumé and your personal letter.

We supplement this information with data from the references you have provided in order to obtain as useful picture as possible of you as a candidate.

Legal basis - Legitimate interest: In the processing detailed above we take into account and weigh up your interest and privacy rights in relation to our interest and purpose (as indicated above) in performing the processing. By balancing these interests, taking into account both positive and negative effects, we then draw the conclusion that our interest is legitimate.

Collection and distribution: The data we have about you is primarily collected from you. In connection with the application we may collect data from the references you give to us in the application. We do not share your application unless it has been specifically agreed between us and you.

Storage period: We only keep your data for as long as we judge to be legitimate, taking into account what is indicated above regarding legal basis and purpose, in this case, 12 months from the time of your application (unless you request otherwise, which we of course will respect). If you are subsequently employed by us, the data in your application will be stored and processed in accordance with that stated in our policy for processing of employees' personal data, which is provided solely to our employees.

3. Customer representatives

Why we process (Purpose): We process your personal data in order to perform new customer financial checks, to execute and administer the service agreement or other assignments, to safeguard your interests, and for accounting and invoicing purposes.

The data can also be used for business and organisational development, market analysis, statistics, operational, security and privacy management.

How we process: We collect the data, check it against our registers and store it in our systems for customer relationship and invoice management.

We also compile the data in our systems for customer support if a service ticket is opened.

What we process: The data we process about you is the data you provide to us that is of relevance for the issue in question, your role in the organisation you represent and in the respective matter. Where appropriate (for example in signed agreements), we need your national identity number (NIN) to correctly identify you.

Legal obligation: The Book-keeping Act requires us to process some personal data in relation to accounting and invoicing.

Legal basis - Legitimate interest: Besides the processing that is necessary to meet our statutory obligations, some processing also takes place by virtue of a legitimate interest. In that respect, we take into account and balance your interest and privacy rights in relation to our interest and purposes (as indicated above) in performing the processing. By balancing these interests, taking into account both positive and negative effects, we then draw the conclusion that our interest is legitimate.

Collection and potential distribution: The data we have about you is primarily collected directly from you. In connection with acceptance of new customers, we may need to collect data from public registers such as proff.no, allabolag.se or equivalent in order to supplement and confirm the data we have received from you about the activity you represent, and also about you as a person and other representatives for the organisation.

We will not share personal data with third parties other than in cases where (i) it has been specifically agreed between us and you, (ii) when it is necessary within the framework of a particular assignment to safeguard your rights, (iii) if it is necessary to enable us to perform our statutory obligation or comply with an official decision or a decision of a court, or (iv) in the event that we engage outside service providers to perform the assignment on our behalf.

Storage period: We store your data only for as long as we judge it to be legitimate, taking into account that indicated above regarding legal basis and purpose; according to applicable national and EU/EEA guidelines, or the longer period demanded by the nature of our relationship, for example, with continued customer service or assignment.

General information and your rights

Where do we process your personal data?

We always strive to process your personal data within the EU/EEA. However, in cases such as technical support or similar, we may need to transfer the information outside the EU/EEA. Regardless of the country where your personal data is processed, we take appropriate technical and organizational measures to ensure that the level of protection is equivalent to that provided by us. In cases where Junglemap uses or will use third parties established outside the EU/EEA, Junglemap is responsible for ensuring that these entities can guarantee a level of privacy protection equivalent to that maintained within the EU/EEA.

To ensure adequate protection for your personal data when transferring to countries outside the EU/EEA where there is no decision on adequate level of protection from the EU Commission, Junglemap, where applicable, has entered into agreements with the respective recipients of personal data containing standard contractual clauses or data privacy framework approved by the EU Commission.

Furthermore, when the level of protection in the recipient country cannot be considered equivalent to that within the EU/EEA, Junglemap implements additional protective measures such as pseudonymization, IP anonymization, and encryption relevant to the risks posed.

We will never, ever provide or sell personal data to organizations not recognised as a third party, or otherwise connected to helping us deliver operations essential to the purposes (as indicated above).

Security

We are committed to ensuring that your personal data is processed securely. To prevent unauthorized use or exposure of your personal data, we employ appropriate and reasonable physical, technical, and organizational security measures relative to the quantity and sensitivity of the personal data to ensure an appropriate level of security. Read more about our security practices at Junglemap’s Trust Center: https://trust.junglemap.com

Cookies

If you consent to cookies and other similar technologies when visiting our website, information about how you use the website may be collected using cookies and other similar technologies. This information is used for segmentation and for marketing and advertising on the website. For the purposes outlined above, this information may be shared with third parties for social media, advertising, and analysis to the extent necessary for the purpose.

Your rights

In accordance with applicable data protection legislation, you are entitled at any time to request access to the personal data that is processed about you. You are also entitled to have incorrect personal data about you amended, to request deletion of your personal data or restriction of our processing of your personal data, exercise your right to data portability and object to processing of your personal data.

If processing is based on consent, you are entitled at any time to withdraw your consent to processing.

If you wish to exercise any of your rights, please contact us via the contact details below.

If you experience anything you think is a violation of applicable data protection legislation by us, you may submit a written complaint to the Norwegian Data Protection Authorities postal address: Datatilsynet, PO Box 458 Sentrum, 0105 Oslo, Norway.

Changes

Junglemap reserves the right to make changes to this privacy notice at any time to the extent necessary. All changes will be published on the Website. Therefore, you should review this notice periodically to ensure that you are satisfied with the changes. However, in the event of material changes, we will notify you via email, if you have provided us with your email address, to alert you to the changes. If the changes affect the processing of personal data that we undertake with your consent, we will provide you with the opportunity to provide your consent again.

Contact information

If you have any questions related to this privacy notice, suspect a breach thereof, or wish to contact us regarding our processing of your personal data, please contact Junglemap's data protection officer by sending an email to privacy@junglemap.com