Privacy policy

In this privacy policy, we provide a thorough explanation of the types of personal data Nordlaks AS and its subsidiaries collect and store, how we process them, and how long we retain them. Our goal is to be transparent and clear so that you, as a user, understand how we safeguard your personal data.

CONTACT INFORMATION

Nordlaks AS and its subsidiary are responsible for the company’s processing of personal data. If you have any questions or comments about this statement or how we process personal data, you can contact us via the contact form on our websites, or send a letter to Nordlaks AS, Industriveien 14, 8450 Stokmarknes

TYPES OF PERSONAL DATA WE COLLECT AND PROCESS:

We collect and process the following categories of personal data:

Contact information: This includes name, email address, telephone number, and possibly company name.

Customer activity: Here, we collect reading and action history from apps, websites, or electronic communication we send out, as well as technical information about the devices you use.

These personal data are collected either directly from you, for example, when you purchase or register for our services, subscribe to our newsletters and blogs, fill out a form, or contact us.

Job Applicants

If you apply for a job with us, we need to process information about you to evaluate your application. The company uses the recruitment tool Webcruiter from Talentech to manage submitted applications for our vacancies. Data is stored in their systems, and you can read about their privacy policy here: Privacy Policy | Talentech

To evaluate submitted documentation, conduct interviews, and call references, the basis for processing is the General Data Protection Regulation (GDPR) Article 6(1)(b). This provision allows us to process personal data when it is necessary to take steps at the request of the job applicant before entering into a contract. By applying for the position and uploading documents, we consider that the job applicant asks us to evaluate the submitted documentation, conduct interviews, and call references with the aim of entering into an employment contract.

If we conduct our investigations beyond this, for example, contacting someone who has issued a certificate but is not listed as a reference, the basis for such investigations is the GDPR Article 6(1)(f), which allows us to process information necessary to pursue a legitimate interest that outweighs the interests or fundamental rights and freedoms of the individual. The legitimate interest is to find the right candidate for the position.

WEB ANALYSIS AND COOKIES

We use cookies on our websites for statistics, communication, and to improve the user experience. We use common Internet technologies, including Google Analytics, to collect information about users so that we can always provide the best possible functionality and further develop the information offer on the website. This information is collected from your computer’s browser and may include the operating system, browser software (such as “Microsoft Internet Explorer”), screen resolution, and referring website.

By using our websites, you consent to the use of cookies. We do not store information that can personally identify you through this. The most commonly used browsers (Google Chrome, Firefox, Internet Explorer, Safari, etc.) are set up to accept cookies automatically. If you do not want cookies to be stored, most browsers offer the option to block cookies in the “settings” menu. Please note that our websites will not function optimally if you do not accept the use of cookies.

HOW WE USE PERSONAL DATA:

Delivery of services: We use your personal data to deliver services you have registered for, such as our newsletter. The legal basis for processing personal data for this purpose is your consent. You can withdraw your consent at any time by unsubscribing from the newsletter.

Analysis, business development, and improvement of services: We continuously work to develop and improve our services and the information we provide you. This involves analyzing contact information and customer activity. The legal basis for processing personal data for this purpose is our legitimate interest.

Sales and marketing: We use personal data in connection with the sale and marketing of our products and services, by you receiving emails from us. The legal basis for processing personal data for this purpose is consent. You can withdraw your consent at any time by unsubscribing from the newsletter.

HOW LONG DO WE STORE YOUR PERSONAL DATA?

We also strive to ensure that personal data and other customer information are up-to-date and correct, and that we do not store information that is unnecessary in relation to the purposes of processing personal data.

If you no longer have an active relationship with us, your information will be deleted no later than 24 months after the last contact. The storage of anonymized information is not subject to such restrictions.

WHO HAS ACCESS TO YOUR PERSONAL DATA?

Within the Company, access to your personal data is limited to persons who have a legitimate need for them.

WE MAY ALSO PROVIDE PERSONAL DATA TO:

Data processors working as subcontractors for us and processing your information on our behalf. Such subcontractors may not use the personal data for any purpose other than to provide the service agreed with us and in accordance with our instructions. We take special precautions to ensure that subcontractors act in accordance with these terms and Norwegian privacy legislation. If the Company uses subcontractors established outside the EU/EEA, we will ensure that the processing is subject to protection equivalent to that within the EU/EEA, for example, the European Commission’s decisions on adequate protection level for the country, transfer with necessary guarantees, EU standard data protection clauses, or another equivalent arrangement.

We may also disclose information:

In statutory cases, for example, by order of the courts, police, or other public authorities, in accordance with strict predefined processes.

In connection with a business transfer, e.g., as part of a merger, acquisition, sale of our assets, or transfer of services to another company. In this case, you will be notified via email and/or see a notice on our digital channels about any changes in ownership, use of your personal information, and choices you may have regarding your personal information.

YOUR RIGHTS AS A REGISTERED USER:

Right to access your own information: You can request a copy of all information we process about you by contacting us at the email address mentioned earlier.

Right to correction of personal data: You have the right to ask us to correct or supplement information that is inaccurate or misleading.

The right to deletion of personal data: You have the right to have your personal data deleted without undue delay. You can therefore ask us to delete information about yourself at any time.

Limitation of processing of personal data: In certain situations, you can ask us to limit the processing of information about you. You can do this by managing consents or reservations in our solutions.

Object to a processing of personal data: If we process information about you based on our tasks or an interest balancing, you have the right to object to our processing of information about you.

Data portability: You have the right to have your personal data provided in a structured, commonly used, and machine-readable format. Contact us at the email address mentioned earlier to have your personal data delivered.

Complaint about our processing of personal data: We want you to speak up if you believe we are not complying with the rules in the Personal Data Act. Please let us know through the contact or channel you have already established with us. You can also complain about our processing of personal data to the Data Protection Authority.

By providing a more comprehensive privacy policy, we aim to ensure that you as a user have a clear and complete understanding of how we collect, process, and store your personal data. We are committed to safeguarding your privacy and complying with applicable laws, and we will continuously work to maintain and improve our policies and practices.