Privacy Statement for Malthe Winje Group

Malthe Winje respects your privacy

It is very important to us to guarantee the protection of your privacy when processing personal data and to secure all business data. We take this into account in our business processes. We handle the personal data collected when you visit our websites confidentially and only in accordance with legal regulations.

Privacy and information security are part of our company policy.

Data Controller

The general manager of the individual companies in the group is, on behalf of the company, the data controller for the company’s processing of personal data.

Personal Data Processed

We process your personal data within the framework of applicable law and this privacy statement. Personal data is collected when necessary for us to perform the tasks and services we are required to perform by law and/or agreement or when you otherwise provide personal data to us. Personal data includes information and assessments that can be directly or indirectly linked to an individual. Examples of typical personal data we process are name, address, personal identification number, phone number, and email address.

When we use the term “processing” of personal data, it means any use of personal data, such as collection, registration, compilation, storage, and disclosure or a combination of such use. All processing of personal data requires a legal basis for the processing. If there is no other legal basis, such as an agreement that necessitates the processing of certain personal data, that we can process the personal data in accordance with the law, or that we have a legitimate interest in carrying out the processing, we will always ask for your consent before we process your personal data.

We generally process information about companies but will sometimes also process personal data due to the role a person has in a company. Information stored mainly includes contact details, such as name, address, phone number, and email address. We also process purchase history and behavior patterns on our website, but this information is linked to companies or organizations and not to individuals.

Purpose of Processing

The purpose of our processing of your personal data is primarily to manage and fulfill the customer relationship and any other processing necessary to fulfill the obligations we have undertaken to you as a customer and/or user of our services. We also process personal data to the extent required or permitted by law or in cases where you have consented to the relevant processing.

Basis for Processing

Under the current regulations, we are authorized to process personal data according to the Personal Data Act of April 14, 2000, no. 31 § 8 (Personal Data Act). Under the upcoming GDPR regulations, information such as name, address, phone number, and email address will be used to fulfill the purchase agreement. The basis for this processing is Article 6 (b) of the GDPR. Where you have consented, the information is also used to provide you and the company or organization you work for with product support, track shipments, give you offers, provide advice, send you invitations to events, and send you information in connection with the customer relationship.

The basis for this processing is Article 6 (a) of the GDPR. You can opt-out of receiving such information from us at any time. We will also store and process information that we are required to do by law or regulation. The basis for this processing is Article 6 (c) of the GDPR.

Collection of Information

We store the personal data you have provided on our websites in connection with your purchase and to our employees regarding your customer relationship.

Recipients of Personal Data

Authorities

If there is a legal obligation to disclose information to public authorities, the relevant personal data will be provided in accordance with the authority’s requirements.

Data Processors

We use third parties who process personal data on our behalf (“data processor”). Before we grant such data processors access to your personal data, we always enter into agreements that, among other things, describe what the data processor should do for us. We have entered into data processor agreements with the relevant suppliers. For security reasons, these suppliers are not specified in this privacy statement.

Transfer to Third Countries

Relevant personal data may also be disclosed to companies/organizations we collaborate with both within and outside the EU/EEA area to enable us to perform the tasks and services we are required to perform by law or agreement. Your personal data will not be transferred without the necessary agreements ensuring that your rights are protected. If we use subcontractors to assist in processing personal data and they are located outside the EU/EEA, we will ensure that data processor agreements and a valid transfer basis are established that provide adequate protection for personal data.

Others

In some cases, your personal data may be transferred to or collected by third parties who have an independent responsibility for their further processing of your personal data, for example, when you visit our pages on services such as Facebook or LinkedIn. These services usually collect your personal data by placing cookies on the device(s) you use. You can read more about cookies further down in the privacy statement. The information collected includes, among other things, when you use the service and associated services. You can read more about what personal data is collected and how it is processed in the privacy statement for the relevant service.

We will never transfer your personal data to any other third parties without having a legal basis for it or you have requested it or otherwise approved it. We may make links to other websites available in our digital channels. If you click on such a link, the website may register personal data about you. That website is responsible for processing your personal data. We encourage you to familiarize yourself with how the website processes your personal data, for example by reading their privacy statement.

Purpose and Types of Information

Where we base our processing of personal data on your consent, it will be clearly stated in the consent declaration for what purpose or purposes the consent has been obtained (for example, marketing of our various services where consent is required). Unless otherwise stated in the consent declaration, we will use the following personal data about you when sending marketing based on your consent:

• Name
• Company
• Email
• Mobile number
• Any interests or preferences you have specified
• Geography
• Position (applies only to the business market)
• Which other of our services you use

Consent is voluntary. You are free to decide whether you want to consent or not and can withdraw your consent at any time.

Retention and Deletion

We delete your personal data that is no longer necessary for the purpose for which it was stored. We store personal data in accordance with applicable laws.

Access and Correction

Under the Personal Data Act, you have the right to access the information we have registered about you. If the registered information is incorrect or incomplete, you can request that the information be updated. Contact customer service if you wish to exercise any of these rights. See contact information below.

Use of Cookies

We use cookies on our websites to ensure that visitor statistics are reliable and to increase the functionality of our sites. You can read more about our use of cookies and how you can manage the use here: [link to cookies policy].

Information Security

We have established both physical and virtual security measures to protect your personal data. Malthe Winje Group take security seriously and strive to follow the best industry standards in the area. We have established rules and routines for the protection of data and privacy in accordance with the rules of the Personal Data Act and the GDPR. We will use all reasonable precautions to ensure that our employees, data processors, and third parties who have access to data have adequate information to ensure that they only process personal data in accordance with this statement and our legal obligations.

Contact Information

Inquiries about what information is registered, correction, and deletion can be sent in writing to the following address:

Email: firmapost@mwg.no

Malthe Winje Group
P.O. Box 531
1411 Kolbotn

Questions or Complaints

If you have questions about our processing of personal data or believe that we are not fulfilling our obligations to you regarding how we process your personal data, we encourage you to contact us (see contact information above). You also have the right to complain to the Data Protection Authority: https://www.datatilsynet.no/, but we encourage you to contact us first.

Email: postkasse@datatilsynet.no
P.O. Box 458 Sentrum
0105 Oslo