Privacy statement
This privacy statement applies to Snøhetta AS and its subsidiaries Snøhetta Oslo AS and Snøhetta Design AS (collectively referred to as "Snøhetta").
Snøhetta is committed to handling personal data in a safe and secure way. This privacy statement is designed to ensure that you receive the information we are required to provide to you regarding our processing of your personal data and that is necessary for you to exercise your rights under applicable privacy legislation. The privacy statement gives you information about the purpose of the processing and what the basis for the processing we perform. In addition, we describe the rights you have under applicable privacy legislation and how you can proceed if you wish to exercise those rights.
1. Snøhetta processes the following personal data
1.1 Customers
In order to fulfill our legal and financial obligations pursuant to agreements with our customers, we process names, postal addresses, telephone numbers and email addresses, organization numbers, invoice references, orders and necessary information related to correspondence with public authorities. This is performed with legal basis in Article 6 (1) letter (b) (necessary for the performance of a contract) of the General Data Protection Regulation where the customer is a natural person and Article 6 (1) letter (f) (legitimate interest) where the customer is a legal person and we record data about the physical persons acting on behalf of the customer. The legitimate interest lies in being able to implement the agreement and follow up on the customer relationship.
The data remains stored for as long as necessary to fulfill the purpose of the agreement in each case.
In addition to data provided by customers themselves in correspondence with Snøhetta, we will, in some cases, and with the same legal basis for processing, collect the above data from public pages on the internet, for example the Brønnøysund Register Centre or customers' websites.
1.2 Persons representing organizations that receive applications and offers from us
In order to keep track of historical contact with potential customers, we process names, postal addresses, telephone numbers and email addresses, organization numbers, invoice references, orders and necessary information related to correspondence with public authorities. This is performed with legal basis in Article 6 (1) letter f of the General Data Protection Regulation regarding legitimate interests. Snøhetta's interest in this particular processing is to maintain an overview of the company's contacts.
The data remains stored for as long as necessary to fulfill the relevant legitimate interest in maintaining this overview.
In addition to the data provided by the customers themselves in correspondence with Snøhetta, we will in some cases, and with the same legal basis, retrieve the above data from tender announcements or public pages on the internet, for example the Brønnøysund Register Centre or customers' websites.
1.3 Persons representing our project partners
In order to keep a historical record of contact with partners and to implement our legal and financial agreements, we process names, postal addresses, telephone numbers and email addresses, organization numbers, invoice references, orders and necessary information related to correspondence with public authorities. This is performed with legal basis in Article 6 (1) letter f of the General Data Protection Regulation regarding legitimate interests. Snøhetta's interest in this particular processing is to maintain an overview of the company's contacts.
The data remains stored for as long as necessary to fulfill the relevant legitimate interest in maintaining this overview.
In addition to data provided by partners themselves in correspondence with Snøhetta, we will, in some cases, and with the same legal basis for processing, collect the above data from public pages on the internet, for example the Brønnøysund Register Centre or partners' websites.
2. Data controller
Snøhetta are independent data controllers for personal data for their respective customers, persons representing organizations receiving applications from the respective company as well as those representing the individual company's project partners, cf. the categories listed in section 1.
3. Sharing data with third parties
In order to be able to perform our services and fulfill our obligations in accordance with agreements, we share necessary personal data with other parties. This includes suppliers of recruitment, project management, invoicing and timesheet registration programs, as well as suppliers of accounting systems. We have entered into data processing agreements with all our suppliers. We will not share, sell, transfer or otherwise disclose personal data to third parties, unless we are legally obligated to do so.
4. Deletion of personal data
Data processed to fulfil a legal obligation, such as the Norwegian Bookkeeping Act, is stored in accordance with the rules of the relevant legislation. The data is then deleted.
Personal data about customers, partners and representatives of organizations that receive offers from Snøhetta will be stored according to the retention periods specified for each category above. The data is then deleted. The personal data will also be deleted if we receive information that a person no longer works for the customer or partner organization.
5. Data protection
We protect your personal data through physical and virtual access control.
6. Rights of the data subject
We process your personal data in accordance with the General Data Protection Regulation. In this connection, you may request access to and transfer of your own personal data, as well as request rectification or deletion in accordance with applicable data protection legislation. A complaint may be submitted to the Norwegian Data Protection Authority for processing in violation of the regulations
7. Contact
Enquiries regarding data registered, correction or deletion can be sent in writing to:
Snøhetta AS
Akershusstranda 21, Skur 39
0150 Oslo
Norway