Privacy policy
How Nordvik Regnskap AS collects, uses and protects personal data, in line with the GDPR and the Norwegian Personal Data Act.
Last updated: 1 January 2026.
1. Data controller
Nordvik Regnskap AS, org.nr 914 256 798, Dronning Eufemias gate 16, 0191 Oslo, Norway, is the data controller for personal data collected through this website and in our client relationships. Questions about privacy can be sent to post@nordvikregnskap.no or by telephone on +47 21 09 44 30.
2. What data we collect
- Data you give us: name, telephone number, e-mail address, company name and organisation number, and the information you enter in the company check or the contact form.
- Client data: in the course of an engagement we process accounting material, payroll data and identification documents required under the Anti-Money Laundering Act.
- Technical data: IP address, browser, device type and pages visited — only where you have consented to analytics cookies.
3. Purpose and legal basis
| Purpose | Legal basis (GDPR) | Retention |
|---|---|---|
| Answering enquiries and preparing quotes | Art. 6(1)(b) — steps prior to a contract | 12 months from last contact |
| Delivering accounting and advisory services | Art. 6(1)(b) — performance of a contract | Duration of the engagement |
| Statutory bookkeeping and reporting duties | Art. 6(1)(c) — legal obligation | As required by the Bookkeeping Act (generally 5 years) |
| Client due diligence (anti-money laundering) | Art. 6(1)(c) — legal obligation | 5 years after the engagement ends |
| Website analytics | Art. 6(1)(a) — consent | Up to 24 months |
| Marketing to existing clients | Art. 6(1)(f) — legitimate interest | Until you object |
4. Who we share data with
We share personal data only where it is necessary: with our accounting and payroll system providers, our IT and hosting providers, our partner audit firm where an audit engagement requires it, and with public authorities such as Skatteetaten, NAV and Brønnøysundregistrene when we file on your behalf. All processors are bound by data processing agreements and process data within the EU/EEA.
We never sell personal data.
5. Your rights
You have the right to access the personal data we hold about you, to have inaccurate data corrected, to have data erased where we have no legal obligation to keep it, to restrict or object to processing, and to receive your data in a portable format. Where processing is based on consent, you may withdraw that consent at any time.
Requests are answered within 30 days. If you believe we process your data unlawfully, you may complain to the Norwegian Data Protection Authority (Datatilsynet), postboks 458 Sentrum, 0105 Oslo.
6. Security
We use two-factor authentication on all systems that hold client data, encrypt data in transit and at rest, and limit access to the advisers assigned to your engagement. Personnel are bound by a statutory duty of confidentiality that continues after the engagement ends.
7. Cookies
The website uses cookies as described in our cookie policy. You can change your choice at any time via cookie settings.
8. Changes
We may update this policy. The current version is always available on this page, with the date of the last update shown at the top.