Skip to content

Vend Marketplaces AS privacy policy for business customers, partners and advertisers in connection with product, service and sales (B2B)

1. The scope of this policy and information on the controller of personal data

Vend Marketplaces AS (hereinafter referred to as ‘Vend’) collects and processes personal information about the individuals we interact with in relation to our business to business (B2B) service offerings, including our customers, partners and employees of our advertisers. It is our responsibility to treat the data securely, both in terms of legal requirements and the expectations of our advertisers and other partners. This policy applies to business customers’ personal data that is collected in one of our markets namely Norway, Sweden, Denmark and Finland. In addition to our central advertising sales this policy also covers brands such as Finn.no, Blocket, Tori, and Oikotie, DBA, Bilbasen, Bytbil, Bilinfo, Carweb to the extent that personal data of business customers is processed. Vend is responsible for the processing of personal data described in the policy and acts as a controller of data.

The policy covers processing of personal data in connection with Vend’s B2B advertising and other product sales. However, it does not include the processing or collection of end user personal data relating to users of Vend services that we offer through our websites and apps. To learn more about how we collect and manage the user’s personal data, you can read more about this in our privacy portal, which you can find here.

2. Collection and processing of personal data in Vend's (B2B) services

The personal data Vend collects in connection with the B2B services, such as advertising, is mainly used to facilitate the sales process, fulfil agreements with customers, and to maintain communication with active customers. This may include storing names and phone numbers to follow up with the customer contact person after account creation in one of our pro tools, or a sales meeting. In addition,we process personal data for order tracking and invoicing. 

Moreover we process contact information of individuals working for companies that are Vend customers. Data is used to customise the user experience when using our products and b2b tools, such as by sending notifications about the performance of their listings or campaigns. Furthermore, Vend stores personal data to ensure compliance with local accounting regulations.

More detailed information on the purposes of processing personal data can be found in section 6 below.

How do we collect personal information?

We collect personal information in the following ways:

  1. When a person completes one of our contact forms on the internet 

  2. When a person is in contact with our sellers or partners to buy advertising or other products

  3. By gathering data on company contact persons from their websites or encyclopedias such as gulesider/eniro.

  4. When a person signs up to use our services, for example through FINN.no, Oikotie or EasyAd

  5. From a third-party provider of data, such as Vainu and Bisnode (data providers that collect business information from the public registries and enrich it with data from other public sources)

  6. When a person attends our events

  7. When a person visits our services that are directed to business users (like employer sections of marketplaces)

All business customers and contact persons are registered in our revenue platform (e.g. CRM system). 

4. Categories of personal data processed

The table below lists a complete overview of the personal data collected in connection with our b2b activities. The personal information collected will vary based on whether you are in contact with us as a private person (not covered in this policy) or whether you are acting on behalf of a company. Please note that while we, for transparency, list many data points that relate to a company in the below table we only consider data that is connected to a natural person to be personal data in the meaning of GDPR. 




5. Storage time

Personal data is stored for a certain period of time and then deleted. The data types stored and how long are described in the table below.




6. Purpose and legal basis for processing personal data

The table below describes the legal basis Vend relies on for each processing purpose when processing personal data of business customers and their contact persons. Also below is a general description of the different types of legal bases we rely on:

Contract: The data subject has entered into, or shall enter into, a contract with us. In cases where we rely on a contract as legal basis, the processing of personal data is necessary for us to fulfil the agreement, and the consequence of not collecting data means that we cannot enter into a contract. If you do not want us to process this information you will not be able to buy our products and services.

Legal obligation: In some contexts, we are required by law to process personal data. Typically, this refers to processing of data for finance and accounting purposes.

Legitimate interest: Personal data can be processed when we have a legitimate interest in processing such information, and the legitimate interest is not outweighed by the interests of the data subject. In cases where Vend uses legitimate interest we have carried out a legitimate interest assessment to ensure we have put into place measures to fairly balance Vend’s legitimate interests with the rights of users of our services.

The table below provides an overview of the personal information Vend collects, the purpose for which it is used, and the basis for the controller.


7. Sharing of data and international data transfers

We use suppliers that process information about companies and individuals on our behalf. Some of these providers will have access to personal information. For example, we use data storage capacity for our customer processing systems. The service providers are our so-called ‘data processors’ and Vend remains responsible for the processing of personal data. Our use of data processors is carefully considered, including the information security of the supplier, to ensure that the data is processed properly. We enter into data processing agreements regarding the processing of personal data with our suppliers in accordance with statutory requirements.

Where necessary, we may disclose the contact details and other materials related to customers to our advertising and marketing partners in order to deliver the agreed services.

Where Vend is the data controller and uses data processors that are located outside of the EU/EEA, we do this only in cases where the transfer location is found to provide adequate protection for personal data, or Vend (or the processor) has entered into EU commission standard contractual clauses with the processor (or sub-processor) and necessary supplementary measure to guarantee the level of protection of the personal data are implemented.

8. Rights and how they can be exercised

As our b2b contact, you have the right to access the data we have, and in some cases request that they be corrected or removed from our systems. Below you will find an overview of your rights. You may use these rights by contacting us as described in section 9 below or by contacting your Vend contact person (such as your account manager).

  • Your right to know which information we process about you (right of access). You have the right to see what information about you we process.

  • Your right to change incorrect information. You have the right to have incorrect information corrected.

  • Your right to have data deleted («right to erasure»). As a general rule, you have the right to have your personal data deleted. If such a request is made, we will ensure that the personal data that we store is either deleted or anonymised.

  • Your right to oppose and limit data processing. In some contexts, we may process personal data if the processing is necessary to fulfil our legitimate interests, provided that the data subject’s right to data privacy does not weigh more heavily. In such cases, as a data subject, you have the right to protest that we process personal data about you. As a general rule, we will then stop this processing of personal data, and this applies without exception if the purpose is direct marketing. In some contexts, you also have the opportunity to request that the processing of your personal data be stopped or restricted. If you exercise this right, your information may only be processed based on your consent or for some other purpose that is directly stated in the Personal Data Act.

  • Your right to obtain a copy of your data in digital format (right to data portability). You may, in certain circumstances, receive the information you have provided us in a digital format. If technically possible and justifiable, you also have the right to have information transferred to another company. This right applies only to information that is processed by automated methods and is based on your consent, or that is processed in order to fulfil an agreement with you. The right to data portability includes only information that you have provided to us, either directly through, for example, contact forms or generated through your use of our services.

You can see a complete overview of your rights on the Norwegian Data Protection Authority’s website. We would like to remind you that there are some exceptions to the rights we have described here. These exceptions are governed by the legislation and may, for example, mean that some information is not disclosed due to the rights and privacy of other persons, or that some personal data cannot be deleted because other legal requirements or considerations entail storage requirements.

9. How do you contact us with questions about privacy or to exercise your rights?

To exercise your rights or if you have any questions about our processing of personal data in accordance with these rules, please contact us on this contact form.

Vend Marketplaces AS
Org. nr 981 159 772
Postboks 747 Sentrum
0106 OSLO
Norge

One of our most important tasks is to process data in a safe, user-friendly and responsible manner. If you are dissatisfied, have suggestions on how we can improve or other input, please contact us via this form.

You also have the right to complain about our processing of your personal data to the Norwegian Data Protection Authority.