The Nilfisk group of companies stores (retains) and uses contact information about our consumer customers purchasing online, including through our Webshop, and persons accessing our websites to browse products.

The European Union’s (EU) General Data Protection Regulation 2016/679 (GDPR) governs how Nilfisk uses this information. References to Art. are to GDPR articles. Under the GDPR, information about individuals is called personal data (Art. 4(1)), and covers anything that can be used to identify an individual – a name, a bank account number, a photograph. Collecting, using, retaining and sharing information is data processing (Art. 4(2)).

The GDPR applies to any Nilfisk company based in the European Economic Association (EEA)¹ and the United Kingdom (UK), by UK law, processing the personal data of persons residing anywhere globally. It also applies to Nilfisk companies located outside the EU if, in the course of doing business in the EU, they process the personal data of persons residing in the EU. The GDPR does not apply when a Nilfisk company outside the EU processes personal data of persons residing outside the EEA.

Individuals who provide personal data to us are Data Subjects (Art. 4(1)), and Nilfisk as a vendor is the Data Controller of their data (Art. 4(7)), because Nilfisk determines how your data is used in our customer systems

^{1 The EEA comprises Norway, Iceland, Lichtenstein and all EU countries: Austria, Belgium, Bulgaria, Croatia, Cyprus, Czech Republic, Denmark, Estonia, Finland, France, Germany, Greece, Hungary, Ireland, Italy, Latvia, Lithuania, Luxemburg, Malta, Netherlands, Poland, Portugal, Romania, Slovakia, Slovenia, Spain and Sweden. Countries where Nilfisk is located are in italics.}

What kind of personal data does Nilfisk process and why do we process it?

• Types of persons whose data we process (Data Subjects): Customers visiting our websites to browse or buy products.
• Types of personal data Nilfisk processes:
  • Names, and billing addresses
  • E-mail or IP addresses
  • Credit Card and bank account details
  • Passwords and usernames

Processing legal basis – Nilfisk’s legitimate business interests (Art. 6.1(f)) based on your purchase:

Nilfisk processes this personal data to:

• Sell, deliver, maintain and service the products we sell,
• Track and communicate regarding purchase orders, including delivery to your address;
• Invoice and process your payments,
• Communicate with you to provide service and maintenance of the products you buy,
• Comply with applicable regulatory requirements, e.g. reporting to tax authorities, Customs, health and safety agencies, environmental authorities, enforcement agencies,
• Address complaints, legal issues and claims involving our products,
• Provide current or prospective customers with information about Nilfisk’s products and services, e.g. in newsletters and other marketing information, subject to any required opt-in and opt-out options (Your consent to receive such information (Art. 6.1(a));
• Enhance Nilfisk’s website’s functionality and user experience using Cookies,
• Unsolicited commercial contacts and direct marketing communications, e.g., providing information on similar products when someone browses products on our websites or purchases a product, subject to opt-out options,
• Request and process your reviews of our products and services, and;
• Generate statistics and other anonymized information to enhance products and service.

Nilfisk retains your data for as long as operationally or legally necessary (Art. 5.1(e)), including:

• Up to ten (10) years after we are in contact about our business relationship;
  • To provide service and maintenance and maintain relevant business related data;
  • In case legal claims, disputes or other legal disagreements between us arise;
• Until you instruct us to delete your data, which we will do subject to retaining data necessary for relevant business purposes, e.g. accounting, service, legal requirements and legal claims, or;
• Up to 10 years after an actual or potential legal dispute or claim involving a business partner ends.
• Longer periods as required by applicable laws and regulations, e.g., health and safety. ​

Nilfisk obtains personal data from you (Art. 13).​

If you want to learn more about requesting and receiving newsletters or direct marketing communications, click https://shop.nilfisk.com/r (bottom of the page)​

Sharing and transfer of your personal data:

Nilfisk shares your data, on a need-to-know basis, within the Nilfisk organization, and with certain third parties providing services involving delivery, invoicing, payment processing, requesting and processing your reviews of Nilfisk’s products and services, and repairs, service and maintenance of products (sub-processors - Art. 28). Nilfisk does this due to its legitimate interests in selling products and providing services to its customers. (Art. 6.1(f))

Your data will generally be available in the following places within Nilfisk and where its sub-processors are located:

• Your own country
• The EEA
• Canada
• The United Kingdom
• India

Nilfisk transfers and/or makes data accessible outside the EEA and UK under EU adequacy decisions or standard EU data transfer agreements (Standard Contractual Clauses) with the data recipients, on an as needed basis, to global Nilfisk companies, data processors and companies providing communications and other services (Arts. 28, 45 and 46)).

Your rights regarding your personal data.

The GDPR, when applicable, grants certain rights regarding Nilfisk’s processing of their data. Contact Nilfisk’s global compliance team at compliance.com@nilfisk.com if you wish to exercise the following rights, if applicable, regarding your data, or if you wish to complain about its processing:

• Request right of access to the personal data Nilfisk has about you and receive a copy of it, subject to the data privacy rights of others. (Art. 15)
• Ask Nilfisk to correct or update your data if our information is inaccurate. (Art. 16)
• Request Nilfisk to stop or limit processing your data to the extent feasible while correcting errors, subject to Nilfisk’s rights to continue processing certain personal data. (Art. 18)
  • Including for customers: stopping unsolicited contacts or direct marketing communications.
• Under certain circumstances, request data portability, e.g. to provide your personal data in a PDF (machine readable) format to you or transmit such data to another data controller, if technically feasible. (Art. 20)
• Request erasure of your personal data if specific conditions are met, and subject to Nilfisk’s rights to refuse the request in order to protect its legal rights and interests. (Art. 17)
• Withdraw your consent to processing of personal data which will be effective from the time of withdrawal, subject to Nilfisk’s rights under GDPR to retain certain data. (Art. 7.3).
• Object to the processing of personal data. (Art. 21)

Nilfisk will comply with your requests to the extent possible, subject to:

• its obligations under laws and agreements,
• its recordkeeping practices, including retaining necessary business documents
• its legal interests, including those related to possible legal claims,

all of which may limit Nilfisk’s ability to fully comply with your request. You can also contact your national data protection agency with questions or complaints about Nilfisk’s processing of your personal data.

If you have questions:

• The Nilfisk company collecting and processing your data is the Data Controller
  • The list of relevant Nilfisk companies is found in Appendix 2.
• If you have questions about deleting your personal data at Nilfisk, please click here.
• If you have other questions about your personal data at Nilfisk, please click here.
• Denmark’s Data Protection Agency (Datatilsynet) with questions or if you wish to lodge a complaint: https://www.datatilsynet.dk/
  • Or other EU data protection agencies, please click here.
• With other questions, please contact the Vice President of Global Compliance: Nilfisk A/S, Marmorvej 8, DK-2100 Copenhagen, Denmark: compliance.com@nilfisk.com

Cookies Policy

Last updated July 2024.

Appendix 2: