Privacy Policy of Norsk Gjenvinning

Data controller

The CEO of Norsk Gjenvinning Norge AS is responsible for the processing of the personal data performed by the company. Responsibility for the day-to-day monitoring of our compliance with the Privacy Policy has been delegated to the director of organisational development and compliance.

This Privacy Policy applies to Norsk Gjenvinning Norge AS and all subsidiary companies in which Norsk Gjenvinning Norge AS is data controller in respect of the Management Policy of subsidiaries.

Our processing of personal data 

Norsk Gjenvinning processes personal data in connection with customer and supplier relations. Below is an overview of our processing of personal data related to customers and suppliers. Norsk Gjenvinning has its own Privacy Policy for employees.

Customer data

Norsk Gjenvinning processes the personal data of our customers in connection with the delivery of goods and services.

How do we use your personal data?
We use data that we store about you for the following purposes:

• Supplying products and services: We process personal data in order to supply and deliver products and services to you. Your data is, for example, processed in connection with
  • delivery of the products and services you order from us
  • delivery of content when you have requested it. For example, e-mail to recipients who have subscribed to a newsletter or blog updates
  • identification of customers
  • billing and payment tracking
  • error correction, customer service, complaint handling and control measures
• Development and analysis: We process personal data to improve and develop our products, services and digital channels 
• Sales and marketing: We use both anonymised data and personal data for marketing purposes. These activities include marketing, i.e.
  • creating target audiences for marketing
  • adapting and targeting marketing, e.g. by providing recommendations or targeted content in our digital channels
  • the sending of e-mail newsletters and other forms of direct marketing when permitted
  • market analyses, customer satisfaction surveys, etc.
  • “washing” contact information for the registers of Facebook, Google and other digital players so that we can communicate with you and other users like you through these channels
• Information security and misuse of services: We want to be able to process personal data to provide a high level of security in our digital channels. We also want to be able to process personal data to expose or prevent various types of misuse
• Compliance with statutory provisions: We process personal data in order to fulfil our statutory duties, e.g. in connection with accounting practices and to provide information to competent authorities when so required in accordance with Norwegian legislation
• Other purposes you have consented to: We want to be able to process your personal data for any other purpose for which you have specifically given us your consent

We process your personal data in order to fulfil agreements/contracts with our customers. We also process personal data based on your consent. When the data processing is based on your consent, you can withdraw your consent at any time by written request.

How do we collect personal data?
The information we collect about you depends on the communication channels you use and the information you give us when making purchases, during registration or in other relevant contexts.

We collect personal data that:

• you provide when, for example, you purchase or sign up for our services, subscribe to our newsletters and blogs, fill out a form, or contact us
• is automatically registered when you use our digital channels

You are under no obligation to disclose your personal data to us, but if you choose not to, we may not be able provide you with our services because, for example, we cannot invoice you for the services or send you the information you request.

We have profiles/pages on the social media. When you visit those pages, such as our company page on Facebook, the social medium concerned will process your personal data and use cookies. More information about how the social media process personal data and how they use cookies can be found in the respective social media, such as Facebook's privacy pages and cookies. In some cases we can use the such data via the social media to show you targeted advertisements.

What personal data do we process?
We may process personal data in the following categories:

• Basic information such as your name, employer, job title and contact details
• Demographic information, such as your date of birth
• Information about the customer relationship, such as order information, payment information and contact with customer support
• Information generated in connection with the use of our digital channels, such as technical information about the device that you use while visiting our digital channels (including the date and time, what kind of PC/mobile phone, operating system and browser you are using, IP addresses, screen size, etc.). Read more under “Navigation information”, which describes this in greater detail
• Information relating to identification and registration of a customer or user, such as information about the user’s identity and password
• Any other information stored on the basis of your consent. In this case, you will receive specific information about the information we store and what it is used for when we request your consent

Our digital channels are not meant for, or aimed at, children under the age of 13. We do not knowingly store information about children under the age of 13. If you believe that we have stored information about a child under the age of 13, please contact us in writing so that we may delete the information.

Navigation information

Cookies
We use cookies and similar technologies in our digital channels. Cookies help us determine what sections of our digital channels are the most popular, including which pages users visit and for how long. This information is used, for example, for the development and analysis of services and targeting of ads on the internet.

You can find the latest information about how we use cookies here.
We may combine information from cookies with other information we have registered about you and your customer relationship to the extent permitted by applicable law or in relation to the consent you have given us.

By using our digital channels with a web browser where the settings allow the storage of cookies on your device, you consent to our use of cookies.
Our sites may contain links to third party websites, products and services, including social media (such as Facebook’s social plugins). Third party services or third party applications available on our sites are subject to the Privacy Policy of that third party. We encourage you to familiarise yourself with these third-party privacy practices.

Log files
Information about your device’s specifications, software and your visit is automatically collected by us. This information may include your IP address, type of browser, domain name, internet service provider, files (HTML pages, graphics, etc.), operating system, access time and how you arrived at our digital channels.

Tracking pixels (e.g. Clear gifs, Web beacons, web bugs)
We use tracking pixels (also known as Clear gifs, Web beacons, web bugs), which help us improve our digital channels by telling us what content is being displayed. Tracking pixels are small graphic elements with a unique identifier, similar to the functionality of cookies, and are used to track user behaviour online. Unlike cookies, which are stored on the user’s hard drive, tracking pixels are invisibly baked into our digital channels or in e-mails. This allows us to measure the impact of our marketing. We link the information we collect from e-mails to the customer's personal information.

Advertising
We may use third-party companies when we advertise online. These companies use cookies and tracking pixels to collect information about your activities on this and other websites in order to provide you with targeted advertisements based on your interests. If you no longer wish to receive such information aimed at providing you with targeted ads, you may unregister via this site: http://www.youronlinechoices.eu/.
Bear in mind that this does not shield you from every kind of advertising. You will still be exposed to generic advertising.

Supplier information

Norsk Gjenvinning also processes the personal data of our suppliers in connection with the purchase of goods and services. The processing is required to enter into or fulfil agreements/contracts with our suppliers. The information may also be used in connection with control measures.

The personal data processed in this regard includes the contact details of people at our suppliers, including basic information such as name, employer, job title and contact details. When purchasing services from a recruitment agency, personal data about those hired, such as personal data, education, skills, evaluations and next-of-kin is also processed. In such cases, a data processing agreement is entered into with the recruitment agency.

How long do we store your personal data for?

Personal data will not be stored for any longer than necessary in order to fulfil the purpose of the processing or statutory obligations we are subject to.

Your personal data is stored as long as you have an active relationship with us or our digital channels, or until you ask us to forget about you and delete the information stored about you. We define a relationship with us or our digital channels as (i) being a customer or supplier of ours, (ii) having consented to receive promotional information from us, (iii) actively requesting contact with us via social media, telephone, messaging or electronic forms, (iv) being active in our digital channels after having given your consent. The relationship is defined as active if it has been exercised during the last 24 months. Storage of anonymised information is not subject to such limitations or requirements.

In addition, we endeavour to ensure that your personal data and other customer information is updated and correct, and that we do not store unnecessary information in relation to the purposes of processing personal data.
Furthermore, we will delete personal data about you if you ask us to unless we have a legal basis or statutory obligation to store your personal data for longer.

Do others have access your personal data?

In some cases, personal data is exchanged between companies in the Norsk Gjenvinning Group.
We may also disclose personal data to:

• data managers working as sub-contractors for us and processing your information on our behalf. Such sub-contractors may not use your personal data for any purpose other than providing the service agreed with us. We take special precautions to ensure that the sub-contractors comply with these terms and Norwegian privacy legislation, particularly if the data manager is located in a country outside Norway or the EU/EEA
• other parties with your consent

We may also disclose information:

• In statutory cases, for example by order of the courts, police or other public authorities, pursuant to stringent predefined processes
• In connection with the transfer of business, e.g. as part of a merger, acquisition, sale of our assets or the transfer of services to another company. In this case, you will be notified by e-mail and/or see a notice in our digital channels regarding any changes in ownership, use of your personal data and choices you have regarding your personal data

How do we protect your data?

Protecting your personal data is a high priority for us, and we constantly work to protect your personal data and other confidential information. The security work encompasses physical, technical and administrative measures, including the protection of personnel, information, IT infrastructure, internal and public networks as well as office buildings and technical facilities.
The security work also entails the performance of regular risk assessments, revision of sub-contractors and reviewing various factors such as available technology, business needs and regulatory requirements. This is to ensure that we have sufficient security measures in place at all times to prevent personal data from going astray.

Your rights

Within the limits laid down in the Norwegian Personal Data Act and other legislation, you are entitled to:

• know what information we have recorded about you
• demand that incorrect, unnecessary, deficient or outdated personal data be corrected or deleted
• withdraw or restrict any consent to the processing of personal data that you have given us. Please note, however, that this may mean that we are no longer able to provide some of our services to you

Norsk Gjenvinning does not have its own privacy ombudsman. Any questions, objections or requests for access to information registered about you can be addressed to personvern@ngn.no.
If you believe that we process personal data in violation of the law, you can file a complaint with the Norwegian Data Protection Authority (post@datatilsynet.no).

Amendments:

If we make amendments to this Privacy Policy, the amendments will be posted on nggroup.no.