Version dated: June 2023

Part I

This Cookie Policy informs you about how we process your personal information collected through our use of cookies on the Conscia websites conscia.com and nil.com

For a cookie declaration according to the cookie-regulation, please see Part II below.

This Cookie Policy does not include information on how we process personal data in relation to other services or activities provided by Conscia. Please refer to our general Privacy Policy for general information or reference to specific processing activities.

We are bound by Regulation (EU) 2016/679 of the European Parliament and of the Council of 27 April 2016 on the protection of natural persons with regard to the processing of personal data and on the free movement of such data, and repealing Directive 95/46/EC (General Data Protection Regulation) («GDPR») even in cases where we process personal data of individuals who are permanently residing outside Denmark.

To some extent, we may also be bound by national legislation of other countries.

We are the data controller – How to contact us?

Being an international organization with legal entities in several countries, the Conscia Group presents a group website for the entire group. For this reason, the Conscia entities listed below are joint controllers for the processing of your personal data collected through cookies.

You can reach us at the following addresses:

Country	Company name	Address HQ
Denmark	Conscia A/S Conscia Danmark A/S	Kirkebjerg Parkvej 9, 2. Sal DK-2605 Brøndby Phone: +45 70207780
Germany	Conscia Deutschland GmbH	Otto-Hahn-Str. 18 76275 Ettlingen Phone: +49 7243 5054-4
Norway	Conscia Norge AS	Lakkegata 23 0187 Oslo Phone: +47 24 07 74 44
The Netherlands	Conscia Nederland B.V.	Kampenringweg 47 2803 PE Gouda Phone: +31 88 522 88 22
Slovenia	NIL Ltd.	Baragova ulica 5 SI – 1000 Ljubljana Phone: +386 1 4746 500
Sweden	Conscia Sverige AB	Rålambsvägen 17, 16tr 112 59 Stockholm Phone: +46 (0)8 765 53 00
United Kingdom	ITGL Limited	Trafalgar House, 223 Southampton Road, Portsmouth, PO6 4PY Phone: +44 333 666 5777

For inquiries, our opening hours are Monday – Friday at 8 – 16.

Data Protection Officer, point of contact

Our Data Protection Officer is your point of contact for all matters relating to data protection. Please direct your enquiries to: [email protected]

If you wish to exercise your rights, please contact our DPO directly. For more information about your rights, please see the section ‘Your rights as data subject’ below.

Description of our data processing

Part II below provides you with a description of the data processing relating to the individual cookie we use on the website.

Our basis for processing information about you

The basis for our processing of your information is the Data Protection Regulation art. 6 (1) (f) (legitimate interests). The legitimate interest we pursue is to understand our customer’s journeys, and their needs, and to gain more detailed knowledge of (potential) customers, to determine the trends related to an individual’s interests, establish marketing relevant traits of web page visitors.

Transfers of data to third countries

The legal basis for the transfer is the EU standard contract clauses 2010 in accordance with Article 46 (2) (c) GDPR in conjunction with the decision of the EU Commission of February 5, 2010 (2010/87 / EU). Additional measures to ensure greater protection of personal data and effective legal protection for data subjects are currently in preparation.

We use the following services:

Google LCC
We use Google Analytics, a web analytics service provided by Google LLC («Google») for statistics on our websites. Data is only collected if you have consented to ‘Statistical’ cookies when you visit one of our websites.

The data protection declaration for Google LLC with more detailed information on the collection and use of your data by Google can be found at https://business.safety.google/privacy/

Recipient of the data:
Google LLC[SK20], 1600 Amphitheater Parkway, Mountain View, CA 94043, USA.

Facebook
We use Facebook for online advertising and for posting news. Facebook’s service uses cookies to store and process information about your behavior and activity on our websites for statistics, optimization, and targeted marketing on their own platform. Data is only collected if you have consented to ‘Marketing’ cookies when you visit one of our websites.

The data protection declaration for Facebook with more detailed information on the collection and use of your data by Facebook can be found at https://www.facebook.com/privacy/explanation

Recipient of the data:
Meta Platforms Ireland Limited, 4 Grand Canal Square, Grand Canal Harbour, Dublin 2, Ireland. Meta Platforms Inc, Menlo Park, CA. 512374, USA

Recipients of the data:
HubSpot, Inc., 25 First Street, 2nd Floor, Cambridge, MA 02141, USA

Leadfeeder
We use Leadfeeder’s service to better understand who visits our website and to identify existing and potential customers. Leadfeeder maps a company’s IP address from visitors on our website with other publicly accessible information, such as LinkedIn accounts. Leadfeeder only processes company data and does not collect or track personal data. Data is partly collected using cookies, but only if you have consented to ‘Marketing’ cookies when you visit one of our websites. Leadfeeder uses sub-processors in countries outside the EU, and therefore your personal data may be transferred to third countries.

The data protection declaration for Leadfeeder with more detailed information on the collection and use of your data by Leadfeeder can be found at https://www.leadfeeder.com/privacy/.

Recipient of the data:
Liidio Oy / Leadfeeder, Keskuskatu 6 E, 00100 Helsinki, Finland

LinkedIn
We use Linkedin for online advertising and for news and job postings. LinkedIn’s service uses cookies to store and process information about your behavior and activity on our websites for statistics and optimization. Data is only collected if you have consented to ‘Marketing’ cookies when you visit one of our websites.

The data protection declaration for LinkedIn with more detailed information on the collection and use of your data by LinkedIn can be found at https://www.linkedin.com/legal/privacy-policy.

Recipient of the data:
LinkedIn Corporation, 1000 W. Maude Avenue Sunnyvale, CA 94085 USA

Marketo

We use Adobe Marketo for online forms, registrations, sending out emails, collecting information about user activity, and for our chatbot service, Adobe Marketo’s Dynamic Chat. For these purposes, we use cookies, but only if a user has consented to the use of marketing cookies. We have entered into a written data processor agreement with Adobe regarding their processing of personal data for us as a data processor to ensure that your personal data is processed according to our instructions, confidentially, and that the necessary security measures have been taken against your information being compromised or misused.

Adobe Marketo’s Dynamic Chat collects data about your interactions with the chatbot, including the content of the conversation and any contact information you choose to provide. This data is used to respond to your inquiries, improve our customer support, and enhance user experience. Data collected through the chatbot may also be used for marketing purposes if you have given the appropriate consent.

Adobe Marketo uses sub-processors in countries outside the EU; therefore, your personal data may be transferred to third countries. The countries where transfers can take place can be found on Marketo’s website: https://documents.marketo.com/legal/sub-processor-list. The transfers are made based on the standard contractual provisions of the Commission. By using our contact form or engaging with our chatbot, you expressly agree that your personal information provided to contact you or to respond to your inquiries may be transferred to and stored in countries outside the EU in connection with our use by Adobe Marketo.

The data protection declaration for Marketo, with more detailed information on the collection and use of your data by Marketo, can be found at https://documents.marketo.com/toutapp/privacy.

Recipients of the data:
Marketo EMEA Ltd., Red Oak North, South County Business Park, Leopardstown, Dublin 18, Ireland

Microsoft Clarity
We use Microsoft Clarity to understand better how visitors interact with our website and to improve the overall user experience. Microsoft Clarity collects data about user interactions, such as clicks, scrolls, and navigation patterns, as well as session replays and heatmaps to represent user behavior visually. Clarity also captures technical information, such as your device and browser details. Data is collected using cookies, but only if you have consented to the use of analytics cookies when visiting our website.

Microsoft Clarity stores and processes data on servers within the Microsoft Azure cloud service. For customers in the European Union, data is processed in compliance with the General Data Protection Regulation (GDPR).

More detailed information on your data collection and use by Microsoft Clarity can be found in their privacy statement at https://privacy.microsoft.com.

OptinMonster, Retyp LLC
We use OptinMonster’s service to promote relevant content to our visitors on our own websites. Data is partly collected using cookies, but only if you have consented to ‘Statistic’ cookies when you visit one of our websites.

The data protection declaration for OptinMonster with more detailed information on the collection and use of your data by Hotjar can be found at https://optinmonster.com/privacy

Recipient of the data:
OptinMonster, Retyp LLC, H7732 Maywood Crest Dr, West Palm Beach, Florida, 33412, United States

Vimeo
We use Vimeo for streaming video content. Vimeo’s service uses cookies to store and process information about your behaviour and activity on our websites for statistic and optimization. Data is only collected if you have consented to ‘Marketing’ cookies when you visit one of our websites.

The data protection declaration for Vimeo with more detailed information on the collection and use of your data by Vimeo can be found at http://vimeo.com/privacy

By pressing the start button on the video or filling out any form presented in a video, you consent to the transmission of the data to Vimeo.

Recipient of the data:
Vimeo, Inc., 555 West 18th Street, New York, New York 10011, USA

Wistia
We use Wistia for streaming video content. To protect your privacy, we have integrated the service in a way where data is collected anonymously if you have not consented to marketing cookies. Read more about Wistia Privacy Mode here: https://wistia.com/support/account-and-billing/privacy-and-data-protection

The data protection declaration for Wistia with more detailed information on the collection and use of your data by Wistia can be found at https://wistia.com/privacy.

By pressing the start button on the video or filling out any form presented in a video, you consent to the transmission of the data to Wistia.

Recipient of the data:
Wistia, Inc., 120 Brookline Street, Cambridge, Massachusetts, 02139 USA

We do not pass on your information

We do not pass on your information to others for commercial purposes. We will only disclose information about you if we are required to do so by law or if we are required to do so by a court order.

Retention period

We only store your information for as long as it is relevant but no longer than 12 months after the last registered activity (interaction with the web page, filling out a web form, taking part in a web seminar, etc.), or if there are specific legal reasons, and/or a legal requirement that stipulates a longer storage period like:

• There are statutory retention requirements (accounting or financial requirements).
• The data are still required to assert and exercise legal claims or to defend against legal claims, e.g., due to technological and forensic reasons.
• Requirements to defend against attacks on our web servers and to track them.
• The deletion would be contrary to the legitimate interests of the data subjects.
• Another exception according to Art. 17 Para. 3 GDPR applies.

We keep the documentation for your consent and/or revoke of consent for up to two years after the consent was last used or revoked.

Your rights as data subject

Under the GDPR, you have several rights in relation to our processing of information about you. You can read more about your rights as data subject here: https://eur-lex.europa.eu/legal-content/EN/TXT/HTML/?uri=CELEX:32016R0679&from=EN#d1e2161-1-1

If you want to exercise any of your rights, please contact us. Our contact information is provided above.

Your rights include the following:

• Right of access by the data subject You have the right to access the personal data we process about you and a number of additional information.
• Right to rectification You have the right to obtain rectification of inaccurate personal data concerning you.
• Right to erasure In very special cases, you have the right to have information about you deleted before the time of our general deletion occurs.
• Right to restriction of processing In certain cases, you have the right to have the processing of your personal data restricted. If you have the right to have the processing restricted, we may in future only process the information – apart from storage – with your consent, or for the purpose for the establishment, exercise or defence of legal claims or for the protection of the rights of another natural or legal person or for reasons of important public interest of the EU or for a Member State.
• Right to object In certain cases, you have the right to object to our otherwise lawful processing of your personal data.
• Right to lodge a complaint with a supervisory authority You also have the right to lodge a complaint with a supervisory authority or another competent data protection authority about our processing of your data. This can, for example, be the data protection authority in your country of residence.

A list of all data protection authorities in the European Union and the European Economic Area can be found here: https://ec.europa.eu/justice/article-29/structure/data-protection-authorities/index_en.htm.

Part II

Why do we use cookies?

This Part II provides you with a description of the data processing relating to the individual cookie we use on the website.

By using cookies on conscia.com and nil.com we provide you with content like videos and contact forms. We also improve user experience and security, and they help us analyze how our web page is used and how successful our marketing activities are. Our cookies are divided into these categories: “Strictly necessary”, “Functional”, “Statistical”, and “Marketing”. “Strictly necessary» is non-optional, while you have the option to give individual consent to the remaining categories.

Profiling

If you consent to the use of Marketing cookies, we will use the collected data to create a user profile in Adobe Marketo with the intention of further optimize our web pages and services based on your interests and for the general purpose of marketing.

If you agree to the terms and engage in other activities on our website (for instance, registration for events, reading and clicking links in newsletter send by us, whitepaper downloads), information about such activities and interactions with our marketing activities will also become part of you user-profile and such information will be used in connection with your information collected via cookies for the general purpose of marketing and for statistical purposes.

We do this to understand our customer’s journeys, and their needs, and to gain more detailed knowledge of (potential) customers, to determine the trends related to an individual’s interests, establish marketing relevant traits of web page visitors, statistical analysis of web page traffic and marketing campaigns, and contacting potential clients.

Conscia does not use profiling for adopting decisions based solely on automated processing, including profiling, which would produce legal effects concerning you or similarly significantly affect you.