1. Name and contact details of the data controller responsible
This Privacy Notice applies to the processing of data by:
Roth North Europe A/S, Centervej 5, 3600 Frederikssund, Denmark, telephone: +45 47 33 97 00, e-mail: firstname.lastname@example.org.
The data protection responsible appointed by Roth North Europe A/S can be contacted by writing to the above address or by e-mailing email@example.com.
2. Collection and storage of personal data and how and for which purposes this data is used
a) When you visit our website
When you visit our website http://www.roth-norge.no/, the browser you are using on your end device automatically sends information to our website’s server. This information is temporarily stored in a log file. The following information is collected without any action on your part and is stored until it is automatically deleted:
- The IP address of the computer sending the request
- The date and time of access
- The name and URL of the requested file
- The website from which our website was accessed (referrer URL)
- The browser you are using and, if applicable, your computer’s operating system and the name of your access provider
We process this data for the following purposes:
- To ensure a stable connection can be established to our website
- To ensure that our website is user-friendly
- To evaluate the security and stability of our system
- For further administrative purposes
The legal basis for the processing of data is Article 6, Paragraph 1, Sentence 1 (f) of the General Data Protection Regulation (GDPR). Our legitimate interest is based on the purposes of data collection listed above. We do not, under any circumstances, use the data collected to identify you.
b) When you use our contact form
If you wish to ask us any questions, you can contact us using the contact form available on our website. When filling in this contact form, you are required to provide us with your name, postal address and a valid e-mail address so that we know who is contacting us and to enable us to reply to you. You can choose to give us further information if you so wish.
Data processing for the purpose of following up on contact made by you takes place in accordance with Article 6, Paragraph 1, Sentence 1 (a) GDPR on the basis of your freely given consent.
The personal data we collect from you when you use our contact form is automatically deleted as soon as we finish dealing with your request.
3. Disclosure of data
With the exception of the cases listed below, we do not share your personal data with third parties.
We only transfer your personal data to third parties when:
- You have given your express consent to this in accordance with Article 6, Paragraph 1, Sentence 1 (a) GDPR
- Disclosure in accordance with Article 6, Paragraph 1, Sentence 1 (f) GDPR is necessary for the establishment, exercise or defence of legal claims and there is no reason to believe that you have an overriding legitimate interest in the non-disclosure of your data
- There is a legal obligation to disclose the data in accordance with Article 6, Paragraph 1, Sentence 1 (c) GDPR
- Doing so is legally permissible and is necessary in order to execute a contractual relationship with you in accordance with Article 6, Paragraph 1, Sentence 1 (b) GDPR
The cookie stores information relating to the specific end device you are using. This does not, however, mean that we can use this information to identify you directly.
To make our website more user-friendly, we also use temporary cookies that are stored on your end device for a specifically defined period of time. If you revisit our website to make use of our services, these cookies will automatically detect that you have already accessed our site and will identify which details you have already entered and settings you have already made so that you do not need to do this again.
The data processed by cookies is required for these purposes in order to protect our legitimate interests and those of third parties in accordance with Article 6, Paragraph 1, Sentence 1 (f) GDPR.
Most browsers accept cookies automatically. You can nevertheless adjust your browser settings so that no cookies are stored on your computer or so that a warning sign always appears before a new cookie is created. Completely disabling cookies may, however, mean that you are unable to use all the features offered by our website.
5. Analysis and third-party tools
The tracking measures described below and used by us are performed on the basis of Article 6, Paragraph 1, Sentence 1 (f) GDPR. We use tracking measures to ensure that we can pursue our aim of continuously optimising our website and designing it in line with our users’ needs. We also use them to collect statistical data about how you use our website and to analyse how we can optimise our website for you. These purposes can be regarded as legitimate interests within the meaning of the aforementioned provision.
Details about the purposes of data processing and the categories of data processed can be found by consulting the information provided about the various tracking tools below.
To help us to design our website in line with our users’ needs and to continuously optimise our pages, we use Google Analytics, a web analytics service provided by Google Inc. https://www.google.co.uk/about/ (1600 Amphitheatre Parkway, Mountain View, CA 94043, USA; hereinafter referred to as “Google”). The use of Google Analytics involves the creation of pseudonymous usage profiles and cookies (see Section 4 below). The information generated by the cookie on how you use this website includes the following:
- Browser type/version
- Operating system used
- Referrer URL (the page you were visiting before you accessed our website)
- Hostname of the computer you are using to access our website (IP address)
- Time of the server request
This information is transferred to and stored on a Google server in the USA. The information is used to evaluate how our website is used, to compile reports on website activity and to provide other services related to website and internet usage for the purposes of market research and to allow us to design our website in line with our users’ needs. This information may, in some cases, be transferred to third parties if doing so is required by law or if third parties have been commissioned to process this data. Your IP address will not, under any circumstances, be connected with other data held by Google. To prevent them from being connected with other data, IP addresses are anonymised using a process called IP masking.
You can stop cookies from being installed by selecting the relevant setting in your browser software; please note, however, that in such cases you may not be able to make full use of all the features available on this website.
You can also prevent Google from collecting and processing the data generated by the cookie about your use of the website (including your IP address) by downloading and installing a browser add-on https://tools.google.com/dlpage/gaoptout?hl=en-GB.
Alternatively, and particularly when using a browser on a mobile device, you can also prevent Google Analytics from capturing data by clicking on this link. This results in an opt-out cookie being set, preventing your data from being captured when you visit this website in the future. The opt-out cookie only applies to this browser and for our website and is stored on your device. You must set the opt-out cookie again if you delete the cookies in this browser.
More information about data protection during the use of Google Analytics can be found on the Google Analytics help site https://support.google.com/analytics/answer/6004245?hl=en.
We use services provided by YouTube to display videos on our website. YouTube is operated by YouTube LLC, which is headquartered in 901 Cherry Avenue, San Bruno, CA 94066, USA. YouTube is represented by Google Inc., which is headquartered in 1600 Amphitheatre Parkway, Mountain View, CA 94043, USA.
We also use YouTube plugins on some of our webpages. When you visit a webpage containing such a plugin (e.g. our media library), a connection is established with the YouTube servers and the plugin is shown. This provides the YouTube server with information about the pages you have visited on our website. If you are logged into YouTube, YouTube will assign this information to your personal user account. When you use the plugin (e.g. by clicking the play button on a video), this information will also be assigned to your user account. You can prevent this information from being assigned by logging out of your YouTube account and other accounts operated by YouTube LLC and Google Inc. and deleting their respective cookies before visiting our website.
6. Your rights as a data subject
You have the right:
- In accordance with Article 15 GDPR, to obtain access to the personal data we process about you. In particular, you have the right to the following information: the purposes of the processing; the categories of personal data concerned; the categories of recipient to whom your personal data has been or will be disclosed; the envisaged storage period; the existence of the right to request the rectification or erasure of the data, to request restriction of the processing of the data or to object to such processing; the existence of the right to lodge a complaint; the source of your data if it was not collected by us; and the existence of automated decision-making, including profiling, and, if applicable, meaningful information concerning details surrounding this.
- In accordance with Article 16 GDPR, to have inaccurate or incomplete data concerning you and stored by us rectified or completed without undue delay.
- In accordance with Article 17 GDPR, to have the personal data we store about you erased, provided that processing is not necessary in order to exercise the right of freedom of expression and information, in order to comply with a legal obligation, on the grounds of public interest or in order to establish, exercise or defend legal claims.
- In accordance with Article 18 GDPR, to have the processing of your personal data restricted if the accuracy of the data is contested by you, if the processing is unlawful and you oppose the erasure of the data, if we no longer need the data but you require the data for the establishment, exercise or defence of legal claims, or if you have objected to processing pursuant to Article 21 GDPR.
- In accordance with Article 20 GDPR, to receive the personal data you have provided to us in a structured, commonly used and machine-readable format or to transmit this data to another controller;
- In accordance with Article 7, Paragraph 3 GDPR, to withdraw at any time any consent you have given to us. This means that we are no longer entitled in the future to continue processing the data that we were processing on the basis of this consent.
- In accordance with Article 77 GDPR, to lodge a complaint with a supervisory authority. As a general rule, you can do this by contacting the supervisory authority in your habitual place of residence or place of work or in our place of business.
7. Right to object
If your personal data is being processed on the basis of legitimate interests pursuant to Article 6, Paragraph 1, Sentence 1 (f) GDPR, you are entitled, in accordance with Article 21 GDPR, to object to the processing of your personal data, provided that there are grounds for doing so that relate to your particular situation or provided that you are objecting to your personal data being processed for direct marketing purposes. In the latter case, you have a general right to object and your request will be acted upon without the need for you to state a particular situation.
If you would like to make use of your right of withdrawal or right to object, please send us an e-mail to firstname.lastname@example.org.
8. Data security
When you visit our website, we use the widespread Transport Layer Security (TLS) protocol.
We also make use of appropriate technical and organisational security measures to protect your data from accidental or intentional manipulation, partial or complete loss, destruction or unauthorised access by third parties. We continuously improve our security measures in line with technological developments.
9. Validity of and changes to this Privacy Notice
The Privacy Notice is currently valid and was last updated in May 2018.
It may be necessary to amend this Privacy Notice due to changes made to our website and offers or due to amendments to statutory or regulatory requirements. The latest version of our Privacy Notice is always available to view and print on our website (www.roth-norge.no).