This privacy notice has been prepared by Windsim AS (“we” or “us”) to ensure that you receive the information we are required to provide you and which is necessary for you to exercise your rights under the General Data Protection Regulation (EU Regulation 2016/679 – the “GDPR“) . We act as a data controller with regards to the processing of personal data described in this privacy statement.
1 Data subjects
This privacy statement applies to our processing of the following persons’ personal data:
- Contact persons at our customers, suppliers and business partners
- Job applicants
- Visitors to our website
2 Purpose, types of personal data and legal basis
Below we have listed the purposes for our processing of personal data, what kind of personal data we process, and the legal basis for such processing.
2.1 Processing of personal data on customers, suppliers and business partners
To fulfil our contractual obligations, as well as providing you with service within our area of business, it is necessary for us to process some of your personal data. In this context we will process the following data:
- Name/name of contact
- Telephone number
This processing has legal basis in GDPR article 6 (1) (b) fulfilment of agreement with a business partner, or for implementing measures upon the business partner’s request prior to entering into agreement.
We distribute newsletters to e-mail addresses we have received in connection with our software services as well as others who have requested to receive our newsletter. Recipients of the newsletter can easily unsubscribe from this service via the link included in each e-mail.
The legal basis for this data processing is either GDPR article 6 no. 1 (f) (legitimate interest) since the recipient of the newsletter will have an interest in receiving news from us, or GDPR article 6 no. 1 (a) (consent).
2.3 Job applicants
In connection with recruitment and processing of job applications, we will process certain personal data, such as name and address, personal ID number, e-mail, telephone number, CV, transcript of grades and references.
Our legal basis for this processing will be either an informed consent from the applicant, cf. GDPR article 6 no. 1 (a) or GDPR article 6 (1) (b) fulfilment of agreement with a job applicant, or for implementing measures upon the job applicant’s request prior to entering into agreement.
Below, you will find an overview over the different cookies that are transmitted to your device when you visit our website www.windsim.com. A cookie is a file that is stored in your browser, and lets the website recognize the browser from time to time.
When you visit our website, a pop-up box will appear, and you will be asked to either accept or decline the specified cookies. If we implement new cookies, this box will appear again asking you to accept or decline the specified cookies.
3 Parties with whom we share personal data
Our service providers, such as Norian and Microsoft Dynamics, may have access to personal data if the personal data is stored by the service provider or in any other way accessible to the provider according to their contract with us.
Our service providers act in accordance with a data processor agreement and our instructions. The service provider may only use the personal data for a purpose predefined by us and as described in this Privacy Statement.
We do not disclose personal data in other instances or other ways than what is described in this privacy statement, unless explicitly requested or approved by the client, or the disclosure is required by law.
4 STORING OF PERSONAL DATA
We will not store personal data longer than necessary for obtaining the purpose of the processing.
Under the Norwegian Accounting Act we are directed to store certain accounting documents for a specific amount of time. When personal data is stored for a specific amount of time in order to fulfil a predefined purpose, we make sure that the personal data is exclusively used for that purpose during that period.
5 Your rights
You hold the rights to any personal data that pertains to you. Your specific rights depend upon the circumstances in question.
Retraction of consent: If you have consented to receiving our newsletter, you may at any time retract you consent. We have made sure that it is easy for you to opt out from receiving this type of communication by including a link in each newsletter for unsubscribing from the service. If you have consented to any other processing of personal data, you may also at any time contact us and retract your consent to this processing.
Request access to information: You have the right to request information on the personal data pertaining to you we have on file, as long as this does not conflict with the duty of confidentiality. In order to ensure that personal data is handed over to the right individual, we may require a written motion for access to information, or that ID is confirmed in another way.
Request correction or deletion of information: You may request that we correct incorrect information regarding you or that we delete your personal data. We will to the best of our abilities comply with a request of deleting personal data, but we cannot comply if there are strong grounds for not deleting it, for example if we need to store the data for documentation reasons.
Data portability: In some instances, you may receive access to personal data you have provided us with in order to transfer the data to another company in a machine-readable format. If technology allows, it may in some cases be possible to transfer the data directly from us to the other company.
Complaint to the regulatory authority: If you disagree with the way we process your personal data, you can submit a complaint to The Norwegian Data Protection Authority.
We have established procedures for handling personal data in a secure manner. The measures are of both technical and organizational nature. We regularly assess the security of all key systems that are used for handling personal data, and agreements are in place that impose providers of such systems to ensure adequate information security.
7 CHANGES TO THE PRIVACY STATEMENT
We may make slight adjustments to this privacy statement. You can always find our latest version on our website. We will notify you in case of any material changes.
8 Contact us
If you have any questions or comments to our privacy statement, or want to exercise your rights, please contact us at:
Tel: +47 33 38 1800