Privacy Policy
NoveNorth Terms of Use
Version 1.0 – effective July 1, 2025
Privacy Policy – Business Customers
Here you can read how we at NoveNorth ApS handle your personal data as a business customer, effective from July 7, 2025 for both existing and new business customers.
At NoveNorth, we protect and respect your data and privacy. When you wish to become a customer at NoveNorth, we, as the data controller, process your personal data.
This Privacy Policy applies to you as a private individual associated with a company that has or is considering a customer relationship with NoveNorth ApS. You may, for example, be a subscriber, beneficial owner, director, employee, guarantor, surety, pledger or third party associated with our business customers.
The privacy policy describes how we process your personal data, e.g. when your company enters into an agreement with us.
1. What is personal data?
Personal data is any information that can be attributed to you. When your company becomes a customer with us, we record contact and identification information about management and beneficial owners – information that, individually or in combination, can be attributed to individuals associated with the company.
2. How do we process your personal data?
We process your personal data confidentially and in accordance with the Data Protection Act, the EU Data Protection Regulation (GDPR), the Danish Data Protection Agency’s guidelines and other relevant legislation.
We receive personal data, for example, when you fill out our contact form, send us information in correspondence, or when we obtain data from publicly available sources such as the CVR register (Virk.dk), the Central Register of Persons, the Danish Financial Supervisory Authority’s PEP list, Experian or credit information agencies.
We collect and process both general (non-sensitive) and, in some cases, sensitive personal data:
Examples of general information:
- Name, address, phone number, email
- Information about any status as a Politically Exposed Person (PEP) or close associate
- Financial information (e.g. for sole proprietorships)
We may also record sensitive information, for example if your PEP status results from political affiliation, or if we record publicly available information relating to criminal matters in connection with statutory procedures.
In addition, we process CPR numbers (and CVR numbers) in connection with identity checks (cf. the Money Laundering Act) and statutory reporting to SKAT (cf. the Tax Control Act).
3. Purpose and legal basis
We process your personal data for the following purposes:
- Creating customer relationships
- Credit rating
- Ongoing management of the customer relationship
- Marketing (only with your consent)
- Termination and termination of customer relationships
- Compliance with applicable legislation
The legal basis for the processing is:
- Fulfillment of contracts and agreements (GDPR Art. 6, para. 1, lit. b)
- Compliance with legal requirements, e.g. the Money Laundering Act, the Tax Control Act, the Accounting Act (GDPR art. 6, subsection 1, letter c)
- Your consent, e.g. for marketing (GDPR Art. 6, para. 1, letter a)
You can withdraw your consent at any time.
4. Storage
We will store your information as long as you are a customer with us. Upon termination, the information will be stored for 5 years plus the current year, cf. applicable legislation.
If you do not become a customer, we will keep your information for up to 6 months. If you have given consent to marketing, we will keep your contact information for 2 years or until consent is withdrawn.
5. Automated decisions
We do not use personal data for automated individual decisions.
6. Protection of your information
We have implemented appropriate technical and organizational measures to protect your information against, for example, unauthorized access, accidental deletion or misuse.
7. Your rights
You have the right to:
- Insight into what information we process about you
- Get incorrect information corrected
- Request deletion or restriction
- Object to certain processing
- Receive your information in a structured format (data portability)
We keep documentation of your use of the rights for 2 years.
You can exercise your rights by contacting our data protection officer.
8. Disclosure and transfer
We share your information with:
- Public authorities, e.g. SKAT or other authorities when required by law
- Data processors, e.g. IT suppliers who store or process data on our behalf
We only use data processors in the EU/EEA or in countries that can offer adequate protection.
9. Withdrawal of consent
You can always withdraw your consent to marketing by contacting us. Withdrawal does not affect previous processing.
10. Confidentiality
Our employees are bound by confidentiality. Your information will not be disclosed without justification.
11. Contact
If you have any questions or wish to exercise your rights, please contact us:
NoveNorth ApS
CVR No. 44335956
Amaliegade 6, 2 TVs
1256 Copenhagen K
Email: dataprotection@novenorth.com
12. Data Controller
NoveNorth ApS, CVR no. 44335956, is the data controller for the processing of your information.
13. Complaint
You can complain to the Danish Data Protection Agency if you are dissatisfied with our processing of your information. See more at www.datatilsynet.dk .
14. Changes
We may update this Privacy Policy. Changes will be communicated directly to you if they materially affect your rights.
Last updated: July 7, 2025.