Privacy policy for Håndverksgruppen AS
Processing of your personal data at Håndverksgruppen AS
Håndverksgruppen AS, organization number 998 003 326, (hereinafter "the Company"), is the data controller for the processing of personal data in the business.
This privacy policy provides you with information about how we process your personal data and what rights you have in this regard. This Privacy Policy applies to you as:
- Is a customer of ours
- work at one of our client companies
- work with our suppliers
- are applying for a job with us
- are otherwise in contact with us, such as people attending seminars, people receiving newsletters, journalists contacting us or other visitors.
"Personal data" means information that can be linked to a natural person. "Processing" of personal data means any use of personal data, both automated and manual, such as collection, structuring, storage and deletion.
We use cookies (see cookie statement) on the website. Read more about what information is collected when using our website here.
Contact information for the data controller:
Name: Gjermund Söder Vegge
Address: Østensjøveien 34, 0667 Oslo, Norway
E-mail: gjermund.soder.vegge@handverksgruppen.com
Phone number: + 47 905 00 815
Org.no.: 998 003 326
1. Why we collect personal data and what kind of information we collect
1.1 Collaboration with external parties
For cooperation with and follow-up of our customers, suppliers and other partners, it is necessary to store information in order to fulfill our contractual obligations and to plan and carry out assignments and projects. The personal data processed may typically be name, e-mail address, telephone number and any other personal data required for the specific assignment or customer/supplier relationship. Most of this personal data will be necessary for us to process in order to fulfill our agreement with you, cf. GDPR article 6 (b). In some cases, the processing is necessary to safeguard our legitimate interest in the proper operation and organization of our own business, cf. GDPR article 6 (f). In the latter case, we have considered that our interest in carrying out the processing outweighs the participant's need for protection of their interests or fundamental rights and liberties.
1.2 Processing of personal data in connection with inquiries received via the website or other channels
If you contact us via our website or other channels, we process your personal data. The personal data processed will typically be your name, telephone number, email address, employer, organization number and any personal data that may result from the inquiry. The data is collected via contact forms, by email, when filling in applications/forms or when you contact us in any other way. The processing of personal data is based on a balancing of interests, cf. GDPR Article 6 (f). We have assessed that it is necessary for us to store this personal data in order to follow up your inquiry in a good way.
1.3 Processing of personal data for events
In connection with the organization of seminars, courses and similar events for our customers, suppliers, partners and others, personal data is processed. This includes name, contact details, position, employer and organization number. The legal basis for this processing is Article 6(f) of the GDPR. In order to organize such events, we have assessed that our interest in carrying out the processing outweighs the participant's need for protection of their interests or fundamental rights and freedoms.
1.4 Processing of personal data in connection with recruitment
In connection with the recruitment of employees, we collect personal data about job seekers applying for a job with us: Name, contact details, photo, CV, application, diplomas, certificates, statements from references, interview summaries and other information that job applicants provide to us. The legal basis is GDPR article 6 (a) and (f). The company has a legitimate interest in collecting information about the candidate for recruitment purposes. This information is deleted after the recruitment process is completed unless the candidate consents to the data being retained by the data controller. In that case, the legal basis is Article 6(a) of the GDPR. The data is retained for one year after consent is given or until consent is withdrawn.
1.5 Newsletters and other marketing
For people who have consented to this, we send out newsletters by email. We also send newsletters and other marketing to those with whom we have an existing customer relationship. In connection with the newsletter and other marketing, we process personal data. This is name, contact information (email, address, telephone number, if applicable) and possibly information about the employer for this purpose.
Consent to receive such marketing can be withdrawn at any time. This can be done by contacting us. The legal basis for the processing is Article 6(f) of the GDPR. The processing is necessary for purposes related to our legitimate interests, which override the need to protect the interests or fundamental rights and freedoms of data subjects.
The personal data related to marketing is processed until the consent is withdrawn or if the existing customer relationship ceases.
2. Disclosure of personal data to others
We do not disclose your personal data to others unless there are grounds for such disclosure. Examples of such grounds will typically be because you have consented to it, because the disclosure is necessary to fulfill an agreement with you or there is a legal basis that requires us to disclose the information.
The controller uses data processors to collect, store or otherwise process personal data on our behalf. In such cases, we have entered into agreements to ensure the information security of the processing. Such data processors may be accountants, recruitment systems, personnel systems, payroll systems, IT systems, HSE systems, etc.
All processing of personal data that we undertake takes place within the EU/EEA area.
3. Storage time
We store your personal data with us for as long as it is necessary for the purpose for which the personal data was collected, unless we are legally obliged to continue storage.
4. Your rights when we process personal data about you
The data protection regulations give you a number of rights related to the processing of your personal data. You have the right to request access to your personal data, correction of any errors or deletion of the personal data we process about you. You also have the right to demand restricted processing, object to the processing and demand the right to data portability. You can read more about the content of these rights on the Norwegian Data Protection Authority's website: www.datatilsynet.no.
To exercise your rights, please contact us by email. We will respond to your request as soon as possible, and within 30 days at the latest. You can also contact us if you would like more information about the way we process your personal data.
We will ask you to verify your identity or to provide additional information before we allow you to exercise your rights towards us. We do this to ensure that we only provide access to your personal data to you and not someone pretending to be you.
5. Complaints
If you believe that our processing of personal data does not comply with what we have described here or that we are otherwise in breach of data protection legislation, you can complain to the Norwegian Data Protection Authority. You can find information on how to contact the Data Inspectorate on the Data Inspectorate's website: www.datatilsynet.no.