Privacy Policy

Introduction

At Xeris AS, we value your privacy and are committed to protecting your personal data based the Privacy Policy in accordance to The EU’s General Data Protection Regulation (GDPR) and Datatilsynet The Norwegian Data Protection Authority (DPA) latest rules.

Contact information

Nordre Gate 7
7011 TRONDHEIM
Email: support@xeris.no

1. Which sites and services are covered?

This privacy policy applies to the following web pages:
‍https://xeris.no/
‍https://xtrade.no/

2. Personal Information we collect and use

‍This section describes the various types of information that we collect and how we use it.

Xeris Website

Our websites offer ways to communicate with you about us, our products, and services. The information that we collect on websites is used to provide you with access to the website, to operate the website, to improve your experience, and to personalize the way that information is provided to you.

X-Trade

Our cloud and online services include “as-a-service” and desktop applications and mobile applications (or apps). We collect information about the use of these services, such as pages you view or your interactions on that page, to improve and develop our services and to generate technical and market insights.

Marketing

We use the information that we collect to communicate with you about relevant products, services, and offerings. We also use this information to personalize your experience with our content and advertisements, and to develop internal marketing and business intelligence. To set or update your marketing communications preferences, you may submit an opt-out request to support@xeris.no or select "Unsubscribe" at the bottom of a marketing email. 

Contractual Relationships

A contractual relationship is created when you order a trial, or a product or service from us. While we mainly provide our products and services to businesses, individuals may also enter into an agreement with us directly as a client. We may collect any information that is reasonably necessary to prepare for, enter, and fulfill, the contractual agreement. 

Support Services

‍When you contact us to request support, we collect your contact information, problem description, and possible resolutions. We record the information that is provided to handle the support query, for administrative purposes, to foster our relationship with you, for staff training, and for quality assurance purposes.

Recruitment and Former Employees

We are constantly searching for new talent for our organization, and we collect information about job applicants or prospective candidates from several sources. When an employee leaves Xeris, we continue to process information that is related to them for any remaining business, contractual, employment, legal, and fiscal purposes.

Cookies

We use cookies to help us better understand usage patterns on the website, and to provide the best possible service and user experience. Visitors to our websites can consent to us using cookies. This consent is obtained directly in your browser. You can turn off this setting yourself.

3. Types of data processed by Xeris

You can create an account with Xeris by creating an account in XTrade.no and provides Xeris with your name, email address and mobile number. We may also store your details from business contact information that you provide to us, or that we collect from your organization and our Business Partners. We use data processors to process personal data on our behalf. This mainly applies to our Suppliers of IT Services, who will have access to the personal information in order to be able to deliver the IT Services to us. The processing of your personal data on our behalf is ensured by data processor agreements. 

We use the following data processors as of today:

Amazon Web Services

‍Email address - stored to enable access to the service. Stored in Amazon's databases. IP address - stored for security reasons against our customers and our customers' data, stored in Amazon's databases. Telephone number (optional) - stored to be able to contact the person for sales purposes, stored in Amazon's databases.

Squarespace Analytics

‍IP address - stored to view activity on our websites, stored in Squarespace's databases.

4. Sharing personal information

We may share your personal information internally and externally with suppliers, advisors, or Business Partners for Xeris’ legitimate business purposes, and only on a need-to-know basis. 

How we share personal information.
When sharing personal information, we implement appropriate checks and controls to confirm that the information can be shared. If we decide to sell, buy, merge, or otherwise reorganize businesses in some countries, such a transaction may involve disclosing some personal information to prospective or actual business purchasers, or the collection of personal information from those selling such businesses.

5. Information security and retention

To protect your personal information from unauthorized access, use, and disclosure, we implement reasonable physical, administrative, and technical safeguards. These safeguards include role-based access controls and encryption to keep personal information private while in transit. We also require our Business Partners, suppliers, and third parties to implement appropriate safeguards, such as contract terms and access restrictions, to protect information from unauthorized access, use, and disclosure. 

We only retain personal information as long as necessary to fulfill the purposes for which it is processed, or to comply with legal and regulatory retention requirements. Legal and regulatory retention requirements may include retaining information for:

We retain any contractual relationship information for administrative purposes, legal and regulatory retention requirements, defending Xeris rights, and to manage Xeris’ relationship with you. The information that is provided in a supplementary privacy notice may provide more detailed information on applicable retention terms.

When personal information is no longer needed, we have processes in place to securely delete it, for example by erasing electronic files.

6. Your rights

You have the right to access, correction, and in some cases deletion of your personal data processed by us. You may also have the right to restrict or object to the processing, as well as the right to data portability. You can read more about the extent of your rights on the web pages of the Norwegian Data Protection Authority: www.datatilsynet.no, or on the webpages of other EEA/EU data protection authorities.

When it comes to the handling of your personal information, the Contact Us form in www.xeris.no website can be used to:

7. Changes to Privacy Policy

Xeris will review this privacy statement to ensure that it complies with our processing of personal data and update the privacy statement. All changes are published on our website and by continuing to use our websites and services after a revision takes effect, it is considered that users have read and understand the changes.