This privacy policy is valid for all of Borregaards Exilva web pages (for example:https://exilva.com/blog.exilva.com), and other related Exilva and Borregaard pages (hereafter called web pages).

Table of Content

  1. Collection of data: what type of personal data and personal information do we collect?
  2. How do we collect personal data and personal information (navigational information)?
  3. How do we use the personal data and personal information we collect?
  4. What choices do you have about your personal data and personal information?
  5. We never sell your personal data and personal information
  6. How do we make changes to this policy?
  7. How, and how long do we store personal data and personal information on you?
  8. Security of your personal data and personal information
  9. Cookies & Similar Technologies
  10. Disclosure of Data

1. Collection of data: what type of personal data and personal information do we collect?

When you give your active consent to us, we at Borregaard (data controller) will collect and analyze personal data to be able to;

  • Construct a profile of you with the goal of better understanding how we can send and show you marketing information that’s valuable to you
  • Improve and develop the marketing information and offers available for you at our web pages
  • Store personal data in order for us to understand a historical context relating to the business relationship
  • Construct profiles to be able to identify customers
  • Provide customer service’

The information we collect in forms (information you provide yourself) includes the following (personal data and personal information):

  • Basic personal data and personal information like your name, position and title, employer, and contact details (e-mail and phone)
  • Information on the customer relationship: marketing permissions, historical orders and contact with customer support
  • Position within the company

You are not forced to place personal data and personal information at our digital platforms, but if you do not you may find a reduced number of our services available to you.

The information we collect through cookies and tracking codes includes the following:

  • Information of your activity on our web pages, including web browser configuration and IP address, through cookies set on your web browser and computer (see chapter 9)
  • Information relating to your use of our technical platforms (all Exilva and Borregaard digital channels), like what device (PC/phone/tablet), IP address, operating system, web browser, screen size etc.)
2. How do we collect personal data and personal information (navigational information)?

Cookies

On our web pages, we collect personal data and personal information through the use of “cookies” if you give your consent. Cookies are small files of text placed on your computer when you enter our web pages, however, the only information we can retrieve with cookies is your IP address. (See more information on cookies in section 9).

Cookies are also collected, if you consent, by our third party providers (HubSpot and Google) to facilitate re-marketing (re-targeting). Re-marketing (re-targeting) is where advertisements are shown to you on third party web sites, based on what you have been viewing on Borregaards Exilva web platforms (Exilva.com or blog.exilva.com.)

Submission forms

Throughout the web platforms of Borregaard (data controller), the web pages, we also collect personal data and personal information based on submission forms. These forms are voluntary to fill out, but if you do not want to give a way personal data and personal information in these forms, your ability to download certain information from our web pages may be limited, but we may provide a service where we charge you for information and samples if you are not giving your consent.

Examples of these forms are:

  • Contact forms
  • Downloading documents
  • Signing up for webinars or other activities
  • Subscribing for our blog services and newsletters
  • Viewing videos (forms to get access to video material)
  • Log files

We may also collect personal data and personal information through log files. This is information related to your operating system, software, and your visit on our web sites. Examples of these are:

  • Web browser
  • IP address
  • Domain name
  • Internet provider
  • Set of files (HTML sites, graphics)
  • Operating system
  • Access time
  • The site in which you entered Borregaard Exilva web pages from
  • Type of media consumed (video, text, sound)

When collecting personal data and personal information, Borregaard use the following marketing (analysis) software systems:

  • HubSpot: Inbound marketing and analysis software - This software stores and analyses personal data
  • Google: Google Analytics and Google Analytics Advertising (“Google Ads”), Google Tag Manager, Youtube - Those software systems store and analyse anonymous data
3. How do we use the personal data and personal information we collect?

Borregaard use the collection of data with the purpose of storing it, construct a profile of you, and analyse your personal data to provide better services to you and make relevant marketing information available. In the process of doing so, we are sharing your personal data (see chapter 1) with the following business partners of Borregaard:

  • RED Performance (for the purpose of analyzing web page visitor behaviour, personalizing views and advertisements and conducting re-marketing/re-targeting).
  • Google, Inc. (for the purpose of analyzing web page visitor behaviour, conducting re-marketing/re-targeting, and analyzing video/podcast visitor behaviour)
  • HubSpot, Inc. (for the purpose of analyzing web page visitor behaviour, conducting market analysis, conducting inbound marketing (sending you marketing & sales material according to your consent given), and storing your personal data and personal information for our Customer Relation Management (CRM) system.
  • MarkedsPartner AS (for the purpose of consulting Borregaard on analyzing web statistics in HubSpot)
  • Distributors and other commercial partners of Borregaard


We deliver services to you

  • Delivering content when you have requisted it, for example through e-mail when you have signed up for our newsletters, product information or blog subscription
  • Delivering marketing to you, for instance through Google display networks (GDN) and Google Ads
  • E-mail newsletters
  • E-mail blog updates
  • E-mail webinar sign-up
  • E-mail news information
  • E-mail with downloads available
  • Web page downloads based on our analysis of your data
  • Identification of customers
  • Invoicing
  • Customer service
  • Development and analysis

We are processing your personal data to develop and improve our services and our digital channels.


We conduct Sales & Marketing

  • Creating target groups for marketing purposes
  • Personalizing your experience on our web pages through delivering targeted content at designated times on our web pages
  • Creating target groups for our marketing
  • Marketing activities, like blog post updates, newsletters and other direct marketing efforts when this is given an active consent to by you or allowed for by the applicable law. We are also using the personal data and personal information you have given to us to improve our services to you. This includes for example display of relevant marketing, and news in third party channels. The third party channels used by Borregaard is Google (using Google Analytics ads, Google Display Networks, and Google Analytics).
  • Remarketing (re-targeting) for you in media, based on your interests in the Exilva product and your data input on our web platforms
    • The advertising will be visible to you on third party platforms like newspapers, video web pages, industrial magazines etc.
    • Borregaard and its partners are matching their lists which may contain your personal data and personal information
  • Conduct analysis against social channels to be able to communicate with you on these channels
  • We conduct market and marketing analyses, as well as visitor behavior analyses


Compliance with law

  • We are processing personal data when required by applicable laws, for instance accounting and providing of information when required by authorities
  • We may process personal data to ensure the security in our digital channels. We may also process personal data to unveil misuse or misconduct
  • We may also use other data you have disclosed, provided you have consented.
4. What choices do you have about your personal data and personal information?

You have the following rights regarding your personal data and personal information:

  • Know what personal data we have stored on you
  • Require that wrong, unnecessary, lacking or out of date personal data and personal information is corrected or removed
  • Opt out and withdraw your consent (please note that this action may limit our ability to provide our full services to you)
  • Deactivate collection of data by Google Analytics

Our goal is to give you simple and meaningful choices over your personal data and personal information. If you have given us personal data and personal information, you can contact us at privacy@borregaard.com if you want to do one or more of the following:

  • Opt-out of any information update service from Borregaard
  • Erase your personal data stored within our system
  • Receive the personal data we have stored on you in our system

You can at all times enter Googles Ads setting page and change your settings and opt-out for Googles cookies tracking and ads personalization, as well as change your data storage.

You can also change and opt out on specific personalized ads by managing this at NAIs web page for managing this.

To change the settings, or opt-out of Exilva specific marketing information, to opt-out or unsubscribe.

You can also choose to send us a written notification by letter to:

Borregaard AS
Att: Mats Hjørnevik, Marketing Manager Cellulose Fibrils
P.O. Box 162
NO-1701 Sarpsborg
NORWAY 

5. We never sell your personal data and personal information

When you give your consent to this privacy policy, you give Borregaard (data controller) acceptance for sharing personal data and personal information with its business partners. The information shared are personal data and personal information you have given to us, for example, IP address, e-mail address, phone number, name, position and company, and the profiling we have constructed of you. This is to enable our business partners to provide better service to you, facilitate re-marketing/re-targeting and to better provide sufficient customer and customer prospect support.

Borregaard (data controller) will not share your personal data to a third party not being a business partner. Borregaard (data controller) will not sell the personal data and personal information to third parties, only store it for analytical, communication and marketing (including re-marketing/re-targeting) and profile building purposes.

6. How do we make changes to this policy?

If we change our privacy policy, we will notify you by e-mail or when you visit our pages for the first time after changes are active.

7. How, and how long do we store personal data and personal information on you?

Borregaard (data controller) collects, stores, and analyses (build profiles) within our HubSpot marketing automation system and Google Analytics (anonymous data). When you are consenting to our privacy policy, you also consent to the transferring of the personal data to HubSpot and Google servers in the United States of America, as well as storing data within the EU on servers in EU/EEA geographical locations. To make sure that we comply with legislation on storing on personal data of EU citizens outside of the EU, we take extraordinary measures through own agreements (data processing agreements).

We are storing the personal data for the period of time it takes to fulfill the tasks in section 3.

The data is stored as long as you have an active relation to us, meaning; being a customer, have agreed to receive marketing information from us, actively engaged with us on social channels, digital platforms or digital forms. The relationship is deemed active if it has been so within the last 24 months.

8. Security of your personal data and personal information

Our web pages are encrypted with SSL (Secure Socket Layer), ensuring that personal information you provide us with on these web pages are secured. The security measures also include protected software systems, protected hardware and offices and personnel. We are actively doing risk analyses with subsequent risk mitigations if necessary.

9. Cookies & Similar Technologies

Borregaard (data controller) may use cookies (small text files placed on a device's hard disk by a web service) or similar technologies. For example, cookies and similar technologies (such as “web beacons”) may be used to store a user’s preferences and settings, to gather web analytics, to authenticate users and to detect fraud. To learn more about how to control cookies and similar technologies, please see your Internet browser's documentation. You can always choose to accept or decline the use of cookies on our web pages. Choices you make regarding the use of cookies, may impact your use of our sites.

Cookies are also used and sent to our Google Analytics and HubSpot systems. We use the following cookies from Google:_ga, _gid, _gat.

Our web sites may contain links to external web sites. If you click these and manoeuvre external web sites (not Borregaard web sites), it is the privacy policy of the external web sites which is valid. Borregaard encourages you to familiarize yourself with such policies.

10.   Disclosure of Data

Borregaard (data controller) will not disclose your personal data outside of Borregaard (data controller) or its controlled subsidiaries and affiliates except (1) as to you direct, or (2) as required by law.

Upon receipt of any other third-party request for your personal data, Borregaard (data controller) will promptly notify you unless prohibited by law.  If Borregaard (data controller) is not required by law to disclose your personal data and personal information, Borregaard (data controller) will reject the request.  If Borregaard (data controller) is compelled to disclose the requested personal data and personal information, Borregaard (data controller) will attempt to redirect the third party to request your personal data from you.