Privacy policy for suppliers and business partners
Here we describe how we in Tibber process your personal data when you work for an organization that we purchase from, sell to or that we have a business collaboration with.
Controller and contact details
Tibber AS, Hafstadvegen 23, 6800 Førde, reg.no: 916 276 338 (Norway) E-mail: hello@tibber.com
Categories of personal information
Depending on the purpose, we may process the following personal information.
| Category of personal data | Example of personal information |
|---|---|
| Contact | e-mail, phone number |
| Identification | first name, last name |
| Organizational | company you work for, positon, role |
| Competence | work experience, CV |
| Communication | information you provide in communication with us |
For what purposes do we process your personal information
To handle application to be supplier or partner
We may process identification, contact and organizational information.
Legal basis: Legitimate interests. We have to process this information when we handle the application to become a supplier or a business partner.
Retention time: As long as the application is handled.
To procure a new supplier
We collect information about you as the contact person for the company that we want to start a procurement process with, and then also when we continue with the procurement. We will process identification, contact, organizational and competence information.
Legal basis: Legitimate interests. We have an interest to procure new suppliers and the processing is necessary for this purpose.
Retention time: During the procurement process.
To manage the supplier/partner relationship
We process your personal information when we manage the supplier/partner relationship, for example to register the company and your contact details in our databases, administrate invoices and financial settlements, contract management, etc. We will process identification, contact and organizational information for this purpose.
Legal basis: Legitimate interests. We have an interest in managing the business relationship with suppliers and business partners and the processing is necessary for this purpose.
Retention time: During the period when you are a contact person for the supplier/partner.
To manage orders of products and services
We process your personal information when we order a product or a service from the company you work for. We also process information when we receive an order from and deliver to the company you work for. It may be for order confirmations, delivery process and associated complaints. We will process identification, contact, organization and communication information.
Legal basis: Legitimate interests. We have an interest in managing our orders from you as a supplier or your orders if you are a partner. The processing is necessary for this purpose.
Retention time: During the period necessary to handle the order.
To follow up and evaluate the relationship and agreements
We will follow up and evaluate the agreements we have with suppliers and partners. We may, where applicable, process your personal data (identification, contact and organizational information) for this purpose. We could for example follow up on our code of conduct, relevant certifications, etc.
Legal basis: Legitimate interests. We have an interest in following up and evaluating our supplier and partner agreements and the processing is necessary for this purpose.
Retention time: During the follow up/evaluation process.
To communicate with regard to the business relationship
Being a contact person for our collaboration, we may process your information for us (including other colleagues and external business partners) to communicate with you with regard to our business relationship. We may process identification, contact, organizational, competence and communication information for this purpose.
Legal basis: Legitimate interests. We have an interest to make communication between us and our colleagues with you as a partner possible.
Retention time: During the period when you are a contact person for the supplier/partner.
To maintain, protect and develop our products and services
For this purpose we may troubleshoot, update, log, develop and test our systems and services. We may, where applicable, process all information listed in the table above.
Legal basis: Legitimate interests. We have an interest to maintain, protect and develop our products and services and the processing is necessary for this purpose.
Retention time: Personal data in log files related to troubleshooting is stored for required time from closure of troubleshooting, depending on the type of problem. Anonymized and aggregated data, no longer possible to associate to a specific person, will be stored for the time being.
To handle and meet legal claims
We will process personal information to handle and meet any legal claims. It can be a dispute or legal process to which we are a party. We may process all information listed in the table above for this purpose.
Legal basis: Legitimate interests. We have an interest to handle and meet legal claims and the processing is necessary for this purpose.
Retention time: Relevant personal data is stored as long as necessary to fulfill this purpose, including a sufficient period after the closure of a legal process.
To comply with legal obligations
We may use your Information for the purpose of complying with our legal obligations, including accounting rules, responding to Individual Rights Requests and responding to requests from regulators, judicial authorities and law enforcement or governmental bodies. We may process all information listed in the table above for this purpose.
Legal basis: Compliance with a legal obligation
Retention time: According to the time required by the legal obligation.
How we collect the personal information
We may collect the personal information from different sources:
Directly from you - when you provide us with the information, for example in communication with us
From your organization - information provided by the organization you work for when we procure a service or make an order
Third persons - information provided by a third person that recommend us to contact you and your company
Public sources - we may use public records or published contact details (LinkedIn for example) to reach out to you.
Tibber group - we collaborate within the Tibber group and may share information between Tibber companies for a procurement purpose etc.
How we share information
We may have to share your personal information with other recipients.
Service providers - examples are IT-service providers to Tibber. These companies will be data processors to us and may only process the information on our behalf.
Your organization - we may share your personal information with the organizations you work for.
Tibber companies - we collaborate within the Tibber group and may share information between the different companies for business purposes.
External partners - when we see possibilities to common benefits between us and partners, we may share information to investigate such opportunities.
Other recipients - we may share your personal information with third parties if it is necessary, for example to fulfill a legal obligation, meet a claim, sell or merge business, etc. Recipients for these purposes may be external advisers, law enforcement agencies, possible investors, etc.
Rights related to personal data
When we are processing your personal data, you have some rights. You can read more about your rights and how you do when you want to exercise any of your rights here.