1.Introduction
When using Taki, personal data about you is processed. This Privacy Statement helps you understand what personal data Mandora AS collects and why we collect it, and how we handle, protect, store, export, and delete your personal data.
Personal data is any information relating to an identified or identifiable natural person, such as an email address, street address, phone number, etc.
2.Contact us
If you have any comments or questions about this Privacy Statement, or any privacy concerns, including regarding a possible breach of your privacy, please contact us by sending an email to privacy@mandora.no.
You can also contact our office at:
Mandora AS
Office: Karenslyst allé 56, Oslo, Norway 0277
Telephone number: +47 902 26 738
3.Mandora AS as Processor
For the personal data processed in the Taki, your employer is the Controller. Mandora AS does in such cases act as a Processor and processes the personal data on behalf of and according to instructions given by your employer. For more information regarding this, please contact customer support for the specific service.
If you want to invoke your rights in relation to the processing of your personal data in the Taki, you should direct this to your employer.
4.Mandora AS as Controller
In some cases, Mandora AS will be the Controller for your personal data processed in the application. This is when Mandora AS determines the purposes and means of the processing of personal data. When Mandora AS is the Controller for your personal data processed in the application, this section 4 applies. If you want to learn more about Mandora AS’s general processing of personal data and the specifics of data collected via the company's website, please see Mandora AS’s general privacy statement.
4.1.Processing activities
Mandora AS processes your personal data in Taki for the processing activities as described below.
Use of cookies
When you interact with Mandora AS as part of using our services, Mandora AS will be processing your personal data to provide relevant content to you through direct marketing on social media platforms and emails, webpages or in a service, based on your preferences.
The purpose is to deliver customized marketing to you, improve your user experience with our services / websites and deliver products that our customers are satisfied with. The personal data processed are aggregated details about you such as IP address, interests (where you have clicked, etc.), username and device. This is done through technologies like cookies.
Our legal basis for this processing of personal data is our legitimate interests to provide relevant content to you, cf. GDPR article 6 nr. 1 a). Mandora AS’s services are generally used as tools for work-related purposes, and your behaviour in these tools says little about your personal life. No sensitive data is processed. Your personal data is processed from a business perspective in a way that we believe does not conflict with your freedoms and rights as an individual.
The personal data will be deleted when you opt out by contacting us via e-mail at privacy@mandora.no. Cookies are also subject to different retention policies.
Security
Mandora AS processes personal data in order to detect, mitigate, and prevent security threats and abuse, as well as perform necessary maintenance and debugging. The personal data involved includes your name, email address, user and web traffic data such as login ID, username, IP address, and device information.
Our legal basis for this processing of personal data is our legitimate interests, cf. GDPR article 6 nr. 1 f). The legitimate interest is to maintain a secure environment for our customers and operations.
We will only store your personal information for as long as necessary to fulfil the purpose of processing, and your personal data will normally be deleted after 21 years.
Service improvement
Mandora AS continuously strives to improve and develop the quality, functionality, and user experience of our products and services. The personal data we process includes your name, email address, user and web traffic information such as login ID, username, and IP address. Additionally, we process statistics that indicate how you use our software.
Our legal basis for processing your personal data is our legitimate interest, cf. GDPR article 6 nr. 1 f). The legitimate interest is to ensure that we meet our customers' expectations and fulfills all contractual commitments.
We will process your personal data only as long as necessary to fulfill the purpose. After three years, the personal data is deleted or anonymized for statistical use.
4.2.How your personal data may be shared
Mandora AS is a part of the Visma Group, which consists of several subsidiaries. In order to maintain an overview and insight, we may share your personal data across companies in the Visma Group.
Mandora AS may also share your personal data with external third parties in the following contexts:
- Mandora AS has a partnership agreement with Contér Services AS, which provides accounting services to Taki customers. To facilitate and maintain these services, we may share your personal data with Contér Services AS.
Processors
Mandora AS uses processors to process personal data. These processors are typically vendors of cloud-based services or other IT services. When using processors, Mandora AS will enter into a data processing agreement in order to safeguard your privacy rights. If processors are located outside the EU/EEA, we ensure legal grounds for such international transfers on your behalf, hereunder by using the EU Model Clauses. You are welcome to request more detailed information on our processors by contacting us as described in the section “Contact us”.
Business partners
Mandora AS may share your personal information with partners in the event this is legitimate from a business perspective and according to applicable privacy legislation.
Public authorities
The police and other authorities may request access to personal information from Mandora AS. In these cases, we will only provide the data if there is a court order etc. to do so.
4.3.Your rights
You can invoke the following rights in relation to our processing of your personal data:
- Access. You have the right to request a copy of personal data we process about you.
- Rectification.You also have the right to request rectification of inaccurate personal data concerning you. If you have an account for our sites or services, this can usually be done through the appropriate "your account" or "your profile" sections on the applicable site or service.
- Deletion. You can request deletion of personal data relating to you.
- Restriction. You may ask us to restrict the processing of your personal data
- Portability. You may ask us to provide you or others with your personal data in a structured, commonly used and machine-readable format.
- Object. You have the right to object to our processing of your personal data on the basis of legitimate interests or for direct marketing purposes.
Please note that there may be certain exceptions or limitations to the abovementioned rights which could apply depending on the specific circumstances of your situation. In such cases, we will provide you with detailed information about the applicable exception or limitation and help you exercise your rights to the fullest extent possible, in accordance with applicable laws and regulations.
Please send an email to privacy@mandora.no to file requests as mentioned in this section.
Finally, you also have a right to file a complaint to the data protection authorities with regards to our processing of your personal data.
5.Changes
We encourage you to review the Privacy Statement regularly. If we make significant changes to the Privacy Statement that materially alter our privacy practices, we will notify you of this.
The Privacy Statement was last updated: 2026-02-10.