Privacy policy

1. Our responsibility and your rights

The entity responsible for collecting and using your personal data - Data Controller - is

Gress Gruppen AS, represented by CEO Tor Tennvassås.

Contact info:

• Address: Brynsveien 18C, N-0667 Oslo

• Compenys register: 978 678 947

• Email: post@gress.no

• Phone: +47 477 02 500

2. Collection, processing, and use of personal data

Gress collects personal data from members, suppliers, and other business contacts. These generally include names, emails, and phone numbers of contact persons. Data is stored as long as necessary or legally required.

2.1 Member Login on Gress.net
Members need to log in to see supplier agreements and make purchases. Personal data is stored to ensure access. Data like name, company, email, and phone number is used for placing orders and communication.

2.2 Supplier Login on Gress.net
Suppliers log in with email and password and receive contact details for new members. Gress stores supplier name and email to manage agreements.

2.3 Informational Emails
Members receive emails about agreements, bonuses, and other updates. You can opt out anytime by emailing post@gress.no.

2.4 Invitations
Members receive invitations to events like the Gress Exhibition. You can decline by emailing post@gress.no.

3. Sharing data with third parties

Suppliers need contact info to fulfill agreements and deliver goods. Member data is shared with suppliers and partners who sign data processing agreements. Current processors include:

• Millum AS & Horecamarket AS – Operate Gress.net and may contact members directly.

• Visma Software – Handles invoices and credits; accounting firm Smea Consult AS has access.

• Serit IT partner AS – Provides it infrastructure and may access data for support.

• Fraktal AS – Develops analytics tools and accesses relevant data.

 
All data is processed within the EU/EEA.

4. Your rights
You can request to view, change, or delete your data unless required by law to retain it. You may also request data portability, object to processing, or withdraw your consent at any time. Learn more atwww.datatilsynet.no.
Requests can be sent to post@gress.no or mailed to the address above.

5. Changes to This Declaration
If the policy changes, a revised version will be posted here. Significant updates will be communicated.