Privacy Policy - ITS Nordic Plus

ITS Nordic+

Last updated: 4 November 2026

1. Introduction

ITS Nordic+ is committed to protecting your privacy and processing personal data responsibly, transparently and securely.

This Privacy Policy explains how ITS Nordic+ collects, uses, stores and protects personal data in connection with its website, newsletters, events, webinars, conferences, network activities and communications.

We process personal data in accordance with the EU General Data Protection Regulation (GDPR), as incorporated into Norwegian law, and other applicable data protection legislation.

This Privacy Policy also applies to the Nordic+ CrossBorder website (https://cross-border.itsnordicplus.com/) and related event registration, participation and communications activities.

2. Data Controller and Contact Information

The data controller responsible for the processing described in this Privacy Policy is:

ITS Nordic+
Organisation number: 936 513 719
c/o Tekna
Dronning Mauds gate 15
0250 Oslo, Norway

Email: info@itsnordicplus.com
Website: https://itsnordicplus.com/

For questions about this Privacy Policy or the processing of your personal data, please contact us using the email address above.

3. Personal Data We Collect

Depending on your interaction with ITS Nordic+, we may collect and process the following categories of personal data:

Contact information: Name, email address, telephone number, organisation and job title.
Membership and network information: Professional affiliation, organisation details and information relevant to Nordic+ cooperation.
Event information: Registrations, ticket details, attendance records, dietary requirements where provided, and other information necessary for organising events.
Newsletter information: Email addresses, subscription preferences and related communication records.
Correspondence: Information you provide when contacting ITS Nordic+.
Financial information: Invoicing and payment-related information where applicable.
Website usage information: Technical information, such as IP addresses, browser information and website usage data collected through cookies and Google Analytics, subject to applicable consent requirements.
Photographs and recordings: Images, videos and recordings produced during ITS Nordic+ events and activities.

We collect personal data directly from you, through event registration and communication services, or from cooperating organisations where appropriate and legally permitted.

We aim to collect only personal data necessary for the relevant purpose.

4. Purposes and Legal Bases for Processing

ITS Nordic+ processes personal data for the following purposes and on the following legal bases under Article 6 of the GDPR.

Purpose	Legal basis
Managing event registrations, participation and related services	Performance of a contract (Art. 6(1)(b)) or legitimate interests (Art. 6(1)(f)), as applicable
Managing membership and network cooperation	Performance of a contract or legitimate interests, as applicable
Responding to enquiries and maintaining professional communications	Legitimate interests (Art. 6(1)(f))
Sending newsletters and promotional communications	Consent (Art. 6(1)(a)) or another applicable legal basis where permitted by law
Processing payments and maintaining statutory accounting records	Legal obligation (Art. 6(1)(c))
Documenting and communicating ITS Nordic+ activities	Legitimate interests (Art. 6(1)(f)) or consent where required
Website analytics using Google Analytics	Consent (Art. 6(1)(a)) where required
Maintaining website functionality and security	Legitimate interests (Art. 6(1)(f))

Where processing is based on legitimate interests, we balance our organisational interests against the rights and freedoms of individuals.

Where consent is required, it is requested separately and may be withdrawn at any time.

We do not treat registration for an event as automatic consent to unrelated marketing.

5. Nordic+ Network Cooperation

ITS Nordic+ promotes cooperation between national Intelligent Transport Systems (ITS) associations in the Nordic and Baltic region.

In connection with joint activities, projects and events, relevant personal data may be shared with participating national ITS associations where necessary and legally permitted.

National ITS associations generally act as independent data controllers for their own membership administration, communications and activities.

Where ITS Nordic+ and another organisation jointly determine the purposes and means of processing personal data, the parties will establish appropriate arrangements in accordance with Article 26 of the GDPR and make the essential information available to the individuals concerned.

Personal data is not automatically transferred between the membership databases of participating associations.

6. Events, Webinars and Conferences

ITS Nordic+ organises and participates in international events, webinars, conferences, workshops and networking activities.

When you register for an event, we may process personal data necessary to:

Manage registrations and participation.
Provide event information and practical instructions.
Arrange event services and logistics.
Process payments and invoicing where applicable.
Communicate with participants before, during and after the event about matters related to their participation.
Fulfil applicable legal and administrative obligations.

For jointly organised events, necessary participant information may be shared with co-organisers, venues and relevant service providers, subject to appropriate data protection arrangements.

Participant contact information will not be provided to event partners or sponsors for their independent marketing purposes without an appropriate legal basis.

If an event requires additional personal information, such as dietary requirements or accessibility arrangements, we will process such information only where necessary and in accordance with applicable data protection requirements.

Where event-specific processing differs materially from this Privacy Policy, additional information will be provided during registration.

7. Photography, Video and Event Recordings

Photographs, videos and recordings may be produced during ITS Nordic+ events and activities.

Such material may be used to document and communicate ITS Nordic+ activities through:

ITS Nordic+ websites and digital channels.
News articles and event reports.
Social media publications.
Presentations and promotional materials relating to ITS Nordic+ activities and future events.

We distinguish between general event photography, such as images of audiences or event environments, and close-up portraits or promotional images featuring identifiable individuals.

General event photography may be processed on the basis of legitimate interests where appropriate and permitted by law. Where consent is required, particularly for identifiable portraits or promotional use, we will seek it before publication.

Participants may inform event organisers or photographers if they prefer not to be photographed or filmed.

You may also contact us to request a review or removal of published material featuring you.

We will assess such requests in accordance with applicable legislation and remove or discontinue the use of material where there is no valid legal basis for continued processing.

Recordings of online events will be communicated to participants in advance where applicable.

8. Newsletters and Communications

ITS Nordic+ maintains its own newsletter and professional communications services.

ITS Nordic+ is the data controller for its newsletter subscriber information. Tekna acts as a service provider supporting the technical administration and distribution of newsletters.

When subscribing to our newsletter, we process your email address and any other information voluntarily provided for the purpose of delivering relevant news, event announcements and information about Nordic+ activities.

You may unsubscribe at any time using the unsubscribe link included in newsletter communications or by contacting info@itsnordicplus.com.

Where newsletter communications are based on consent, withdrawal of consent does not affect the lawfulness of processing carried out before withdrawal.

We do not sell subscriber information or provide newsletter mailing lists to third parties for their independent marketing purposes.

9. Sharing Personal Data and Service Providers

ITS Nordic+ may share personal data with authorised representatives, cooperating organisations and service providers where necessary for the purposes described in this Privacy Policy.

These may include:

Tekna, providing newsletter-related technical services.
Event registration and administration providers.
Event venues and co-organisers.
Website hosting and technical maintenance providers.
Email and communication service providers.
Payment and accounting service providers.
Google, in connection with Google Analytics, subject to applicable privacy settings and consent requirements.

Where service providers process personal data on behalf of ITS Nordic+, we require appropriate contractual and organisational safeguards in accordance with applicable data protection legislation.

We do not sell personal data.

Links or embedded content associated with the websites of ITS Finland and ITS Norway may lead to services operated by those organisations. Their own privacy policies apply when they independently collect or process personal data.

10. International Data Transfers

ITS Nordic+ primarily processes personal data within Norway and the European Economic Area (EEA).

We do not intentionally transfer personal data outside the EEA unless necessary for a specific service or activity.

Where a service provider or technical solution involves the transfer of personal data outside the EEA, ITS Nordic+ will ensure that the transfer complies with applicable data protection legislation.

Such transfers will take place only where a valid transfer mechanism applies, such as an adequacy decision or appropriate safeguards under Chapter V of the GDPR.

Information about applicable transfer safeguards may be requested by contacting ITS Nordic+.

11. Data Retention and Deletion

ITS Nordic+ retains personal data only for as long as necessary to fulfil the purposes for which it was collected or to comply with applicable legal obligations.

We apply the following general retention principles:

Event registration data: Retained for the period necessary to administer the event, complete related follow-up activities and meet applicable administrative or legal obligations.
Newsletter subscriptions: Retained while the subscription remains active. Following unsubscription, personal data is deleted or anonymised unless limited retention is necessary to document consent, respect the opt-out or comply with legal obligations.
Membership and network records: Retained while relevant to ongoing membership or professional cooperation and reviewed when the relationship ends.
Financial and accounting records: Retained for the periods required under applicable Norwegian accounting and tax legislation.
Correspondence: Retained for as long as necessary to handle the matter and any related legitimate administrative requirements.
Photographs and recordings: Retained while relevant for legitimate documentation, historical records or communication purposes, subject to periodic review and applicable individual rights.
Website analytics data: Retained according to the configured retention settings of Google Analytics and applicable consent requirements.

Personal data that is no longer necessary will be securely deleted or anonymised, unless continued retention is required or otherwise permitted by law.

12. Cookies and Website Analytics

The ITS Nordic+ website uses cookies and similar technologies to support website functionality and understand how visitors use the site.

We use Google Analytics to analyse website traffic and improve the content and usability of our website.
Google Analytics may process technical information, including device information, browser details, online identifiers and information about interactions with the website.
Non-essential analytics cookies and similar technologies are used only where the necessary consent has been obtained.
Visitors can manage their cookie preferences through the cookie management functionality available on the website.
Consent may be withdrawn or changed at any time through the same functionality.
Necessary cookies may be used without consent where permitted by applicable law.
Further details about individual cookies, their purposes and retention periods are provided through the website’s cookie management functionality.

13. Data Security

ITS Nordic+ implements appropriate technical and organisational measures to protect personal data against unauthorised access, accidental loss, alteration, disclosure or destruction.

Access to personal data is limited to authorised individuals and service providers who require the information for legitimate operational purposes.

We review our data protection practices and security arrangements as appropriate.

14. Your Data Protection Rights

Under the GDPR, you have rights relating to the processing of your personal data.

Depending on the circumstances, these include:

Right of access: Request information about personal data we process concerning you.
Right to rectification: Request correction of inaccurate or incomplete information.
Right to erasure: Request deletion of personal data where the applicable conditions are met.
Right to restriction: Request that processing be restricted in certain circumstances.
Right to data portability: Receive certain personal data in a structured, commonly used and machine-readable format where the legal conditions apply.
Right to object: Object to processing based on legitimate interests and object at any time to processing for direct marketing.
Right to withdraw consent: Withdraw consent at any time where processing is based on consent.
Right to lodge a complaint: Submit a complaint to the competent data protection supervisory authority.

To exercise your rights, please contact:

info@itsnordicplus.com

We will respond to requests in accordance with the GDPR, normally within one month of receipt. Where permitted by law, this period may be extended, and we will inform you accordingly.

You also have the right to lodge a complaint with the Norwegian Data Protection Authority:

Datatilsynet
Website: https://www.datatilsynet.no/

15. Changes to This Privacy Policy

ITS Nordic+ may update this Privacy Policy to reflect changes in our activities, services, technical solutions or applicable legislation.

The latest version will always be available on the ITS Nordic+ website.

Where changes materially affect the processing of personal data, we will provide additional information where required by law.

Last updated: 4 November 2026