Privacy Notice for N.Rich Technologies Suppliers

Last updated on June, 30, 2025


General Information

This privacy notice explains how we collect and use personal data concerning third parties operating as suppliers, service providers, contractors, subcontractors or similar (hereinafter "Supplier") in relation to both N.Rich Technologies Oy (our EU entity) and N.Rich US Inc. (our US entity), collectively referred to as "N.Rich", "we", "us", or "our".

The specific entity you engage with as a Supplier will be clearly identified in your contract and will serve as the data controller for your personal information.

Data Controllers

Depending on which N.Rich entity you are contracting with, the data controller for your personal information will be:

For EU operations:
  • N.Rich Technologies Oy
  • c/o Kuopion Tilitieto Oy, Kirkkokatu 1, 70100 Kuopio, Finland
  • Email: privacy@n.rich
For US operations:
  • N.Rich US Inc.
  • 169 Madison Ave STE 15643, New York, NY 10016, USA
  • Email: privacy-us@n.rich

Purposes of Processing Personal Data

We may use the personal data we collect about you for the following purposes:

  • To correspond with you
  • To send you personalized information on current open assignments
  • To assess your application for the open assignment for N.Rich ABM Platform and to communicate with you within the contractor on-boarding process
  • To enter into contract negotiations
  • To make payments to you
  • To maintain our own accounts and records
  • For internal reporting
  • General administrative purposes and ensuring compliance with legal and regulatory requirements

Legal Bases of Processing Personal Data

For suppliers to N.Rich Technologies Oy (EU):

  • Performance of a contract between you and us
  • Compliance with our legal obligations, such as data retention obligations related to accounting and taxation
  • Our legitimate interests to conduct and develop our business. This is the legal basis we mainly rely on for activities not covered by the above-mentioned legal bases, such as for managing our customer relationships as well as developing and marketing our products and services. In individual cases, and where legally required, we may also rely on your separate consent.
  • In individual cases, and where legally required, your separate consent. You may later revoke your consent at any time.)

For suppliers to N.Rich US Inc. (US):

  • Performance of a contract between you and us
  • To comply with legal obligations
  • For our legitimate business purposes
  • In individual cases, your consent where applicable under US state privacy laws

You may revoke any consent provided at any time by contacting us.

Categories and Sources of Data

The types of information we may collect and use for the purposes detailed above are the following:

  • Full name
  • Telephone number
  • E-mail address(es)
  • Social media contacts
  • Date of birth
  • Nationality
  • Image
  • Educational and professional qualifications
  • Government-issued identification
  • Tax identification number
  • Bank details
  • Specimen signatures
  • Computer specifications
  • Character references
  • Tax registration documentation

Disclosure and Transfer

Where necessary for the purposes detailed above, your personal data may be disclosed to the following categories of recipients:

  • Our group companies
  • Other third party services providers who assist us in providing you with our products and services
  • Other service providers for the purposes of accounting, financial, ICT, legal and other services provided to us
  • Potential buyers (and their agents and advisers) in connection with any proposed purchase, merger or acquisition of any part of our business, provided that the buyer is informed that it must use your personal data only for the purposes set out in this notice
  • Competent courts, law enforcement bodies, or other authorities or third parties where we deem that disclosing your personal data is necessary for compliance with laws or regulations, or to exercise, establish or defend our legal rights, or to protect your vital interests or those of any other person
  • Any other person – but only with your separate consent

Cross-border transfers

For suppliers to N.Rich Technologies Oy (EU): Your personal data will not be transferred to countries outside the European Union or the European Economic Area, except where the European Commission has held that the country ensures an adequate level of protection for personal data, or where we have taken appropriate safeguards to require that your personal data remains protected in accordance with this notice, such as by implementing the European Commission’s Standard Contractual Clauses for transfers of personal data. You may contact us for more information on the safeguards in place. In individual cases, such transfers may also take place based on your separate consent or in order to provide you with a service you have specifically requested, or where otherwise allowed by applicable data protection laws.

For suppliers to N.Rich USA Inc. (US): Your personal data may be processed in the United States and stored on secure servers located in Canada or in the EU/EEA.


Automated Decisions

We do not use your personal data for any automated decision making.

Data Retention

We keep your personal data only as long as we have a legitimate business need to retain it for the purposes described above. We will regularly assess the existence of such need against the data we keep, and where we have no such ongoing business need, we will either erase or anonymize your personal data or, if this is not possible – for example, for information stored in backup archives – we will store your personal data securely and block any further processing until deletion is possible.

Personal data related to a Supplier relationship will be usually retained only for the duration of the ongoing Supplier relationship and for a reasonable period thereafter in order for us to be able to answer inquiries related to the relationship. However, some data may be retained for longer where we believe retention is necessary for compliance with laws or regulations (such as in the fields of accounting and taxation), or to exercise, establish or defend our legal rights or those of our customers, affiliates or partners.

Security

To protect your personal data, we use appropriate technical and organizational measures designed to provide a level of security appropriate to the risk of processing.

Data Subject Rights

For suppliers to N.Rich Technologies Oy (EU): Under the GDPR, you have the right to: You have the right to obtain from us confirmation as to whether or not personal data concerning you is being processed by us, and where that is the case, access to that personal data as well as to have any inaccurate or incomplete personal data rectified or completed. In certain circumstances, you may also have the right to request the erasure, or the restriction of processing, of your personal data or parts of it, to object to the processing and/or to receive the data in a structured, commonly used and machine-readable format. Please contact us for any inquiries related to exercising the above rights. If you consider our processing activities of your personal data to be inconsistent with applicable data protection laws, you may lodge a complaint with the responsible supervisory authority. Contact information for the supervisory authority in Finland can be found here: www.tietosuoja.fi

For suppliers to N.Rich USA Inc. (US): Depending on your state of residence, you may have rights to: Know what personal information is collected, access your personal information, request deletion of your personal information, correct inaccuracies, opt-out of certain processing activities or non-discrimination for exercising these rights. Complaints may be directed to the appropriate state attorney general's office, depending on your state of residence.

Please contact us for any inquiries related to exercising these rights.

Changes

We may update this notice from time to time in response to changing legal, technical or business developments. When we update this notice, we will strive to inform you in a manner consistent with the significance of the changes we make.

Contact Us

If you have any questions about this Privacy Notice or our data practices, please contact us at:

  • EU/EEA/CH/UK and rest of the world inquiries: privacy@n.rich, referencing N.Rich Technologies Oy
  • US inquiries: privacy-us@n.rich, referencing N.Rich US Inc.