Data Protection and Privacy Policy
Privacy and Data Protection Policy
Data Controller
The data controller for the processing of personal data under this Privacy and Data Protection Policy is Saferoad Holding AS.
Address: Enebakkveien 150, 0680 Oslo, Norway.
Subsidiaries within the Saferoad Group may act as data controllers for local processing of personal data in accordance with this policy and applicable data protection legislation.
In this Privacy and Data Protection Policy, we describe how we process your personal data. This policy explains:
how we collect personal data, which data we collect, and why
how we protect your personal data and with whom we may share it
how long we store your personal data
what choices and rights you have
The content of this policy may change over time. Your privacy is always a priority for us, and we comply with the General Data Protection Regulation (GDPR) and other applicable legislation in the EU and Norway. We recommend that you review this policy regularly to stay informed.
For more information about cookies and how we use them, please refer to the cookie information pop-up on our websites.
What personal data do we process about you?
We strive not to process more personal data than necessary. Personal data is therefore collected only when there is a legitimate need.
We process personal data when this is necessary and in accordance with applicable legislation. Depending on the circumstances, this may include the following types of personal data:
IP addresses
device information
telephone number
email address
name
For what purposes do we process your personal data?
We process personal data only when we have a legitimate purpose and always in accordance with the GDPR. The legal basis used depends on the purpose of the processing, such as performance of a contract, compliance with legal obligations, consent, or legitimate interests.
Personal data may be processed for the following purposes:
to optimise the user experience on our websites
to deliver products and services
to send service messages and relevant information
to store personal data in order to comply with legal requirements, such as accounting legislation
to provide customer support and service, including responding to enquiries, complaints, and providing updates about products and services
to send newsletters and direct marketing (such as emails, SMS, and messages via social media), where permitted
to prevent fraud, misuse of our products, services, and websites, and to process personal data in connection with legal claims
to improve and further develop our products and services
to support and facilitate sales processes
When you submit a form via our websites, the information is stored in order to carry out what you ask us to do. To submit the form, you must consent to the storage of your information in accordance with this policy.
Legal basis for processing personal data
We process personal data only when there is a valid legal basis under the GDPR. Depending on the circumstances, processing may be based on:
necessity for the performance of a contract to which the data subject is a party, pursuant to GDPR Article 6(1)(b)
necessity to take steps at the request of the data subject prior to entering into a contract, pursuant to GDPR Article 6(1)(b)
necessity to comply with a legal obligation, pursuant to GDPR Article 6(1)(c)
necessity for the purposes of legitimate interests, provided such interests are not overridden by the fundamental rights and freedoms of the data subject, pursuant to GDPR Article 6(1)(f)
How long do we store your personal data?
Personal data is stored for as long as the customer relationship or cooperation exists and as long as the data is necessary to fulfil our obligations. Thereafter, personal data is stored for the period required to comply with legal obligations or documentation requirements.
Cookies on our websites are stored for 30 days. More information is available in the cookie information pop-up on our websites.
Your rights
As a data subject, you have several rights under the GDPR:
the right to request access to the personal data we process about you, the purposes of the processing, and any disclosure of data
the right to have inaccurate personal data rectified
the right to have certain personal data erased
the right to request restriction of processing
the right to object to processing, including processing for direct marketing purposes
the right not to be subject to decisions based solely on automated processing, unless such processing is necessary for entering into or performing a contract, is authorised by law, or is based on explicit consent
the right to withdraw consent at any time where processing is based on consent
the right to receive personal data you have provided to us in a structured, commonly used, and machine-readable format (data portability)
the right to lodge a complaint with the Norwegian Data Protection Authority (Datatilsynet)
These rights may be subject to conditions or limitations depending on the circumstances of the processing.
To whom do we disclose personal data?
We disclose personal data only when permitted or required by law. Saferoad is a group of companies, and personal data may be shared internally where relevant and necessary.
Personal data may be disclosed to the following categories of recipients within the EU/EEA:
data processors
business partners
suppliers
Where external suppliers act as data processors, processing is carried out in accordance with data processing agreements that comply with the GDPR. Where external parties act as independent data controllers, processing is carried out in accordance with their own privacy policies and legal bases.
If personal data is transferred to countries outside the EU/EEA, such transfers are carried out in accordance with the GDPR, including through the use of approved transfer mechanisms.
Your choices and rights – contact information
You may contact us if you:
have questions or objections regarding our processing of personal data
believe that our processing is not in accordance with applicable legislation
wish to exercise one or more of your rights
For questions or requests related to this policy or to exercise your rights, please contact us at: