About NOFO

Privacy policy

External privacy policy for the Norwegian Oil Pollution Control Association for Operator Companies
;

1. General information about privacy

When you visit us on social media or our website, send us inquiries or are a contact person for one of our customers, we process personal data about you. Below you will find general information about how we collect and process your personal data, why we do this and the rights you have in this regard.

The Norwegian Oil Pollution Control Association is the data controller when we process your personal data in the situations described in this privacy policy. This means that NOFO is responsible for ensuring that the processing takes place within a safe and legal framework.

Personal data means any kind of information about natural persons – hereafter referred to as data subjects. This includes, among other things, name, e-mail address, telephone number and assessments that can be linked to identified persons.
We will periodically and when necessary review this privacy policy to ensure that it is updated and adequate. You can find the date of the last revision together with our contact details at the bottom of section 10.

2. Processing basis and purpose

NOFO can only process your personal data when we have a legal basis for doing so. The relevant legal basis varies depending on the purpose of the processing in question. We will never further process your personal data in a way that is incompatible with the purposes that originally justified the collection of your personal data.

3. Personal data we collect

We process different personal data about you depending on who you are and how you get in touch with us. This may involve the processing of the following personal data:

  • Name
  • E-mail address
  • Phone number
  • Address
  • IP address
  • Image and video
  • Personal data you share with us

You can find more information about how we process personal data below.

4. How we collect personal data

Your personal data may be voluntarily shared with us by you interacting with us on social media or our website, or if you contact us through other channels. We may also process personal data about you if you are acting as a representative of one of our customers or partners.

We also collect personal data through the use of cookies that are installed on the website. We do this to improve the user experience on our website. You can read more about this below.

5. Processing of personal data

5.1. Representatives of our business partners

If you act as a representative of one of our suppliers, member companies or partners, we may process your personal data in various relationships. This may, for example, mean that we communicate directly with you by e-mail, that we invoice your employer with you as the recipient or that you have signed an agreement with us on behalf of your employer.

This processing is based on Article 6(1)(f) of the General Data Protection Regulation as the processing is necessary for us to be able to communicate with you and enter into agreements with suppliers and relevant partners.

NOFO will only process your personal data for as long as it is necessary to achieve the purpose of collecting your personal data. This means that your personal data will be deleted as soon as it is no longer necessary. The duration of the processing will therefore vary from case to case. If you would like to receive more precise information about this, please contact us using the contact information attached at the bottom of this privacy policy.

5.2. Agreements with private individuals

If we have entered into an agreement with you as a private individual, we will process your personal data to the extent necessary to comply with the rights and obligations in the agreement. This means that we will process the personal data included in the agreement and the communication we have with you.

This processing is based on Article 6(1)(b) of the General Data Protection Regulation as the processing is necessary to fulfill the agreement we have entered into with you.

NOFO will only process your personal data for as long as it is necessary to achieve the purpose of collecting your personal data. This means that your personal data will be deleted as soon as it is no longer necessary. The duration of the processing will therefore vary from case to case. If you would like to receive more precise information about this, please contact us using the contact information attached at the bottom of this privacy policy.

5.3. Participants in courses, trainings or exercises

NOFO conducts courses, training and exercises for employees associated with our member companies, crews and vessels as well as other players who are part of the oil spill response on the Norwegian shelf. This means that NOFO processes information about the participants. There are a number of personal data that we ask participants to share with us in connection with courses, training or exercises. This may include name, position, date of birth/place, nationality, passport no./issued, passport validity, safety training (STCW) validity, health certificate validity, contact information of next of kin, employer/affiliation, competence and certificates, attendance, participation, evaluation and any deviations or incidents involving the participating persons, role in watch team or resource pool. In connection with catering, there will be questions about allergies.

The basis for this processing is Article 6(1)(f) of the General Data Protection Regulation, in that NOFO has a legitimate interest in having an overview of who participates in their various activities organized by NOFO.

As it is important to have an overview of who is able to participate in actions from an emergency preparedness perspective, NOFO will store the necessary information even after the course, training or exercise has ended. The duration of the processing varies from case to case. If you would like to receive more precise information about this, please contact us using the contact information attached at the bottom of this privacy policy. In addition, all data subjects can object to this, see section 9 of this privacy policy.

5.4. Direct inquiries

If you contact us directly, we will process personal data about you, including your telephone number or email address, depending on how you contact us. We will also process any personal data you share with us. We therefore ask that you limit the information to what is necessary for us to respond to your inquiry and take appropriate action.

The basis for this processing is Article 6(1)(f) of the General Data Protection Regulation, in that NOFO has a legitimate interest in providing good customer service and responding to inquiries we receive.

For these purposes, NOFO will process your personal data until we have answered your inquiry and implemented any measures. The duration of the processing therefore depends on your relationship with us, the nature and complexity of your inquiry, and the measures we need to take.

5.5. Job seekers

If you apply for a job at NOFO, we will process the personal data included in the inquiry and any attachments you share with us, e.g. application, CV and certificate of competence.

If we receive an application from you, we consider this to be a request for us to assess your application and any attachments. The processing is therefore carried out on the basis of Article 6(1)(b) of the General Data Protection Regulation.

NOFO’s hiring process may be organized through a third party. NOFO therefore does not store personal data about you during the hiring process except for a link with information sent from a third party. The link is time-limited so that NOFO does not store your personal data longer than necessary.

5.6 Images and videos

NOFO wants to document and share some of the exciting activities that happen with us, such as courses, exercises, events and the like. Therefore, we may take photos or videos of participants during these activities. We will inform you about this in advance where anyone who wants to can opt out of the processing. You can also withdraw your consent at any time during and after the activities, cf. section 9 of this policy.

We use the images and videos to promote our services and offers on social media and our own website. We do not use the images or videos for any other purpose.

6. Storage time

We will always limit the processing of your personal data to what is necessary. Please note, however, that the storage period is determined by the communication we have had with you and the duration of any agreements you have entered into with us. The Norwegian Bookkeeping Act also requires us to store accounting material for 5 years or 3 years and 6 months respectively, cf. Section 13, first and second paragraphs.

7. Sharing of personal data

NOFO will only share personal data with third parties if the third party in question is engaged as a data processor to do specified tasks on behalf of NOFO or the sharing is necessary to provide our services.

NOFO will only transfer your personal data out of the EU/EEA if it is necessary to provide a user-friendly and satisfactory website or our services necessitate it for other reasons. In all such cases, NOFO will ensure that adequate security guarantees are provided and that the recipient is subject to the same or equivalent obligations that apply within the EU/EEA. This means, among other things, that we have ensured a valid basis for the transfer and that your rights are properly safeguarded. This will normally be because:

  • The EU Commission has taken an adequacy decision, confirming that the recipient country ensures an adequate level of protection, cf. GDPR Article 45, or
  • We have entered into an agreement with the recipient of your personal data that contains EU

The Commission’s standard data protection clauses, cf. GDPR Article 46(2)(c).
If you would like more information about this, please contact us using the contact information attached at the bottom of this privacy policy.

8. Information security and storage

NOFO has introduced the necessary technical and organizational measures to ensure that your personal data is processed in a secure manner that respects the requirements for integrity, confidentiality and availability. This means, among other things, that NOFO practices the principle of data minimization and that NOFO has implemented procedures to ensure that your personal data is deleted when the purpose behind the collection ceases.

9. Your rights

When NOFO processes your personal data, you have several rights under Chapter III of the General Data Protection Regulation. This means that:-

  • You have the right to receive confirmation as to whether NOFO is processing personal data about you and to gain access to this personal data, as well as the purpose of the processing.
  • You have the right to verify and, if necessary, correct incorrect personal data we process about you and supplement any incomplete personal data.
  • You have the right to restrict the processing of your personal data in some cases.
  • You have the right to object to the processing of your personal data and to withdraw any consent you have given. However, we inform you that withdrawing your consent will not affect the legality of processing that has already been carried out.
  • You have the right to have personal data about you deleted, unless NOFO has other grounds for or is otherwise required to continue the processing.
  • If you wish to invoke any of these rights or have any questions, please contact us using the contact details below.

10. Contact information

If you suspect that we are processing your personal data differently from what we have described in this privacy policy or that we are in breach of data protection legislation, you can complain to the Norwegian Data Protection Authority. However, we ask that you contact us first so that we can clarify the matter to avoid any misunderstandings.

Our contact details

Name: Sonja Samsonsen
Position: Senior Advisor HR
Address: Vassbotnen 1, 4313 SANDNES
E-mail: ssa@nofo.no
Phone: +47 913 01 585

This privacy policy was last updated 19.01.2024