Processing of personal information in NTB Mediebank.

NTB aims to process personal data with respect and care. All information stored electronically with us shall not be disclosed to other parties. Anyone can contact NTB for insight into what information is stored in accordance with their rights under the Norwegian Personal Data Act (Personopplysningsloven).

Personal data in the Mediebank has two levels. Personal data stored for users of the Mediebank, and personal data associated with assets (photos, video, etc.) stored in the Mediebank.

Below you will find more information about the personal data we collect, why we do it, and what rights you have in connection with the processing of the personal data.

Data controller

The data controller for the personal identifiable information we process is:
Norsk Telegrambyrå AS (organization number 914797497): Tina Mari Flem, CEO / Editor-in-Chief

If you have questions about NTB's processing of your personal information, please use the contact information below:
Business address: Skippergata 24, 0154 Oslo
Postal address: Postboks 6817 St. Olavs plass, 0130 Oslo
Email: kundesenter@ntb.no
Phone: +47 22 00 32 00

Basis for processing

General Data Protection Regulation (GDPR) art. 6 (1) a) consent of the person in the picture and f) legitimate interest. For news organizations: Public interest.

Personal data for Mediebank users

Personal data for Mediebank users is registered and stored in our user database by our customer center, and is deleted when the customer/user relation ends. Stored personal information includes: name, phone number (optional) and email address.

Personal information may also be stored in connection with support inquiries to our customer center. Personal data stored in relation to support inquiries includes: name, phone number, email and any personal information that may result from the inquiry.

Personal data in / for photos, video etc.

Personal data for assets stored in the Mediebank is added, and can be edited by the data controller. This information is deleted when the customer relationship ends or the data controller deletes the current asset in the system.

Categories of registered persons are public persons, as well as private persons who are involved in events of news value (news, sports, entertainment, etc.), and private persons who are depicted in illustration photos with consent.

Registered personal data: Faces in photos and videos with metadata such as personal name, position / title in general, political and religious, philosophical beliefs etc. for public persons, and for private individuals with the consent of the registered person.

Cookies used by NTB Mediebank

A cookie is a small text file that is downloaded and stored on the user's computer when the user opens a website.

Cookies can be useful for both the owner and the user of a website. The owner of the website can customize the service based on the information stored. For the user, the website can be perceived as more user-friendly.

When using the NTB mediebank Office Add-in only one unique identifier is stored on the user's session in a cookie. No user data is stored in the browser:
Required cookie:

auth0.<session-id>.is.authenticated - Used by Auth0 to know if it should attempt "silent authentication", or a full authentication.

Legal regulation - Electronic Communications Act:
§ 2-7b Use of cookies
The storage of information in the user's communication equipment, or access to such, is not permitted without the user being informed of what information is being processed, the purpose of the processing, who is processing the information, and has consented to this. The first point does not preclude technical storage of or access to information:

solely for the purpose of transmitting communications in an electronic communications network
which is necessary to provide an information society service at the express request of the user

Your control over our use of cookies:
You can restrict the use of cookies or delete them via your browser. However, this can affect the stability and usability of the website.

Disclosure of personal information to others

We do not pass on your personal information to others unless there is a legal basis for such disclosure. Examples of such a basis will typically be an agreement with you or a legal basis that requires us to publish the information.

NTB uses data processors to collect, store or otherwise process personal data on our behalf. In such cases, we have entered into agreements to ensure information security at all stages of the processing. We use the following data processors as of today:

Amazon Web Services EMEA SARL, 38 Avenue John F. Kennedy, L-1855, Luxembourg (AWS)
Redpill-Linpro AS, Vitaminveien 1A, 0485 Oslo, Norway
Cefalo AS, Møllergata 4, 0179 Oslo, Norway
Visma Software AS, Karenslyst allé 56, 0277 Oslo, Norway
Auth0, 10800 NE 8th ST, Suite 700, Bellevue, WA 98004, USA

Storage duration

We store your personal information with us for as long as is necessary for the purpose for which the personal information was collected.

This means, for example, that we delete personal data that we process on the basis of your consent, if you withdraw your consent. Personal data we process to fulfill an agreement with you is deleted up to three years after the agreement has been fulfilled and all obligations arising from the contractual relationship have been fulfilled.

Your rights when we process personal information about you

You have the right to demand access to and correction or deletion of the personal data we process about you. You also have the right to demand limited processing, direct objections to the processing and demand the right to data portability. You can read more about the content of these rights on the Norwegian Data Protection Authority's website: www.datatilsynet.no.

To exercise your rights, you must contact our customer service center. We respond to your inquiry as soon as possible, and no later than within 30 days.

We will ask you to confirm your identity or provide additional information before we allow you to exercise your rights against us. We do this to make sure that we only give access to your personal information to you, and not to anyone who pretends to be you.

You can withdraw your consent for the processing of personal data with us at any time. The easiest way to do this is to contact our customer service center.

Complaints

If you believe that our processing of personal data does not comply with what we have described here, or that we in any other way violate privacy legislation, we hope you will contact us. However, you also have the right to complain to the Norwegian Data Protection Authority.

You can find information on how to contact the Norwegian Data Protection Authority on their website: www.datatilsynet.no.

Changes

Should there be any changes in our services or in the regulations on the processing of personal data, it may lead to a change in the information you see here. If we have your contact information, we will notify you of these changes. Otherwise, you will always find updated information easily accessible on our website.

Veli-Pekka Säikkälä