Privacy statement

Processing of Personal Data at NTB AS

If you use our websites or are otherwise in contact with us, for example by receiving our newsletter or ordering images/services, we, NTB AS (hereinafter referred to as NTB), will process personal data about you. NTB aims to process personal data with respect and caution. All information stored electronically with us shall not be disclosed to third parties. Any individual may contact NTB for access to information stored in accordance with rights under the GDPR. Below you will therefore find more information about the personal data we collect, why we do so, and what rights you have in relation to the processing of personal data.

The data controller for the personal data we process is:

NTB AS (org. no. 914797497): Tina Mari Flem, Chief Executive Officer / Editor-in-Chief

If you have questions about NTB's processing of your personal data, you may contact us at:

Business address: Skippergata 24, 0154 Oslo

Postal address: P.O. Box 6817 St. Olavs plass, 0130 Oslo

Email: kundesenter@ntb.no (customer centre)

Telephone: +47 22 00 32 00

1. Why Do We Collect Personal Data and What Kind of Information Do We Collect?

We collect and use your personal data for various purposes depending on who you are and how we come into contact with you. If you use our websites and/or purchase images or services from us, we process the information you provide.

As a Customer

If you are our customer, our processing of your personal data can be summarised as follows, depending on the type of customer relationship we have with you.

To fulfil contractual obligations, including administration

In these instances, we store personal details and the following contact information: name, email, address, position, and job title pursuant to Article 6(1)(b) of the General Data Protection Regulation.

To fulfil Article 32 of the GDPR, Security of Processing, we will also store your IP address for a limited period in application and system logs for certain services, with the legal basis in Article 6(1)(f) of the GDPR.

To deliver anniversary tributes and lists in accordance with agreements with newspapers and anniversary celebrants

In these instances, we store information about anniversary celebrants: name, position, date of birth, income/assets/tax, and photograph pursuant to Article 6(1)(a) and (b) of the GDPR.

To respond to inquiries submitted to us

In these instances, we store name, telephone number, email address, and any personal data that may follow from the inquiry, pursuant to Article 6(1)(a) and (f) of the GDPR.

Marketing via newsletter

In these instances, we store name, email address, job title, place of employment, and any products about which you wish to receive information. For existing customers, processing is carried out pursuant to Article 6(1)(f) of the GDPR. Outside existing customer relationships, it is carried out pursuant to Section 15 of the Marketing Act and Article 6(1)(a) of the GDPR.

Operation of sports results services

In these instances, we typically store information such as player information, performance data, nationality, date of birth, club affiliation, photographs, and vital statistics, pursuant to Section 3 of the GDPR.

Advertisement management through cookies

We use third-party cookies to provide you with more relevant advertisements in third-party channels. The legal basis is Article 6(1)(f) of the GDPR; our legitimate interest in marketing our services to potential customers. Read more about this in Section 2.

2. Cookies and Use of Google Analytics

To obtain information about the use of our websites, we use cookies.

Cookies can be useful to both the website owner and the website user. The owner of the website can customise the service based on the information stored. The user experiences the website as more user-friendly and customised. We safeguard your privacy by using the information only for statistics, and it is not possible to identify you as an individual.

NTB uses Google Analytics to analyse the use of our website. Google Analytics is provided by Google Inc. and provides us with statistical reports that we use to analyse and improve the website through such cookies. Google Analytics cookies provide us with information, including which browser you used, how you arrived at our website, and how you used the website (which pages you visited, how long you visited the website, etc.).

Most browsers, such as Opera, Internet Explorer, Firefox, and Safari, accept cookies automatically. If you do not wish to accept cookies, you must therefore choose to change the settings in your browser so that cookies are not accepted.

In addition, we recommend that you review Google Analytics' own opt-out options.

What Are Cookies?

A cookie is a small text file that is downloaded and stored on the user's computer when the user opens a website. Cookies are used, for example, to store login details, remember the shopping cart in an online store, or record where the user moves around on the website.

Cookies can be useful to both the website owner and the website user. The website owner can customise the service based on the information stored. For the user, the website may be experienced as more user-friendly and customised.

Third-Party Cookies and Advertisement Management

We use third-party cookies to provide you with more relevant advertisements and offers in channels other than ntb.no. The tools we use for this are Facebook, LinkedIn, and Google. These tools are used to display our advertisements on external websites (such as on Facebook) to audiences who have already shown interest in our services (for example, by having visited our website). The information we receive from third-party providers is only in aggregated form and is used to keep track of which advertisements are displayed, count the number of impressions, clicks, etc. We may use information we have about you to show you relevant advertising from us on third-party websites (such as Facebook, Google, and LinkedIn).

For further information about these tools, please refer to the privacy policies from Facebook, LinkedIn, and Google:

Facebook: https://www.facebook.com/policies/cookies/

LinkedIn: https://www.linkedin.com/legal/privacy-policy

Google: https://policies.google.com/privacy?hl=no

If you do not wish to be shown targeted advertising from NTB, some third-party websites may give you the option to opt out of receiving further information from specific advertisers. How to opt out of targeted advertising from various third-party providers is described here:

Opt-out from Facebook: https://www.facebook.com/ads/preferences/?entry_product=ad_settings_screen

Opt-out from Google: https://support.google.com/ads/answer/2662922?hl=no

Opt-out from LinkedIn: https://www.linkedin.com/help/linkedin/answer/65455/administrere-annonsepreferanser?lang=no

Legal Regulation – Electronic Communications Act

Section 2-7b Use of Cookies

Storage of information in the user's communication equipment, or obtaining access thereto, is not permitted unless the user is informed about which information is processed, the purpose of the processing, who processes the information, and has consented thereto. The first paragraph shall not prevent technical storage of or access to information:

• Solely for the purpose of transmitting communication over an electronic communications network
• That is necessary to provide an information society service at the user's express request

Overview of Cookies

A complete overview of cookies used on www.ntb.no and third-party solutions connected to our website can be found by clicking on "Informasjonskapsler" (Cookies) at the bottom right of this page, in the footer. Here you can choose which cookies you wish to consent to.

Your Control Over Our Use of Cookies

You can limit the use of cookies or delete them via your browser. However, this may affect the website's stability and user-friendliness.

For Google Chrome users, follow this guide:https://support.google.com/chrome/answer/95647?co=GENIE.Platform%3DDesktop&hl=no

For Internet Explorer users, follow this guide:https://support.microsoft.com/nb-no/help/17442/windows-internet-explorer-delete-manage-cookies

For Microsoft Edge users, follow this guide:https://support.microsoft.com/en-us/help/4027947/microsoft-edge-delete-cookies

For Safari users, follow this guide:https://support.apple.com/en-gb/guide/safari/sfri11471/mac

For Firefox users, follow this guide:https://support.mozilla.org/en-US/kb/enable-and-disable-cookies-website-preferences

3. Disclosure of Personal Data to Others

We do not disclose your personal data to others unless there is a lawful basis for such disclosure. Examples of such a basis would typically be an agreement with you or a legal basis that requires us to disclose the information.

NTB uses data processors to collect, store, or otherwise process personal data on our behalf. In such cases, we have entered into agreements to safeguard information security at all stages of processing. We currently use the following data processors:

Websites: Sanity.io, Thorvald Meyers gate 49, 0555 Oslo, Norway

User Database: Crayon AS, Gullhaug Torg 5, 0484 Oslo, Norway

User Authentication: Auth0, 10800 NE 8th ST, Suite 700, Bellevue, WA 98004, USA

Newsletter, Customer Service Chat, Customer Register and Follow-up:SFDC Norway A/S, Dronning Eufemias gate 71, 0194 Oslo, Norway

Invoice Distribution: Visma Software AS, Karenslyst allé 56, 0277 Oslo, Norway

All processing of personal data that we carry out takes place within the EU/EEA area.

4. Services That Allow You to Post Content on Facebook

We facilitate the ability for users to post or share content on Facebook via certain of our services, for the purpose of posting content to their own or their employer's Facebook page. In these cases, a connection is established between our service and the relevant Facebook account.

The following data about the Facebook connection is stored in encrypted form with us:

• Name of Facebook page
• Name of Facebook user
• Facebook Page Access Token
• Facebook User Access Token

How users can delete data stored with us:

1. Log in to NTB Kommunikasjon
2. Go to Settings and then Distribution to Social Media
3. Select Disconnect from Facebook to delete the data stored with us

5. Retention Period

We store your personal data with us for as long as necessary for the purpose for which the personal data was collected.

This means, for example, that we delete personal data that we process based on your consent if you withdraw your consent. Personal data we process to fulfill an agreement with you is deleted up to three years after the agreement has been fulfilled and all obligations arising from the contractual relationship have been fulfilled.

6. Your Rights When We Process Personal Data About You

You have the right to request access to and rectification or erasure of personal data we process about you. You also have the right to request restricted processing, object to processing, and request the right to data portability. You can read more about the content of these rights on the Norwegian Data Protection Authority's website: www.datatilsynet.no.

To exercise your rights, you must contact our customer service centre. We will respond to your inquiry as soon as possible, and no later than within 30 days.

We will ask you to confirm your identity or provide additional information before we allow you to exercise your rights with us. We do this to ensure that we only provide access to your personal data to you, and not to anyone pretending to be you.

You may at any time withdraw your consent to the processing of personal data with us. The easiest way to do this is to contact our customer service center.

7. Complaints

If you believe that our processing of personal data does not comply with what we have described here, or that we otherwise violate data protection legislation, we hope you will contact us. However, you also have the right to complain to the Norwegian Data Protection Authority.

You will find information on how to contact the Data Protection Authority on the Authority's website: www.datatilsynet.no.

8. Changes

If changes occur in our services or in the regulations on the processing of personal data, this may result in changes to the information you have received here. If we have your contact information, we will notify you of these changes. Otherwise, you will always find updated information readily available on our website.