PROCESSING OF PERSONAL INFORMATION Updated 02.08.2022
1. Data processing manager
Kjell A Østnes AS (967 461 490) Tullins gate 2, 0166 Oslo.
2. Contact for questions regarding personal data and data that require discretion
Østnes Helicopters Group, firstname.lastname@example.org
3. What is personal data?
Personal data is information that may be directly or indirectly linked to a living person. For example, names and social security numbers, but also other information specific to the person's physical, genetic, mental, economic, cultural, or social identity. For example, your IP address or a recording of your voice may be personal data if they can be connected to you.
Some personal data is considered particularly sensitive and is covered by special rules. Sensitive personal data means information that reveals, for example, membership in a trade union or information about health.
Østnes Helicopters does not collect particularly sensitive personal data.
4. Common data sources and data collection methods
The information in the register is usually collected from the registered individuals themselves. Personal and other information may be collected through the registration and with the use of services and programs related to Østnes Helicopters Group. Based on business activities, it is also a possibility that personal information could be collected interactively, e.g. in meetings or by telephone. In addition, data-driven data collection methods can be used. Personal information can also be retrieved and updated from demographic records, credit records, records provided by commercial marketing companies and similar reliable private or public records and sources.
5. Why do we collect personal data?
The purpose of the processing of customers personal data and the legal basis for the processing
The purpose of the processing of customers' (including potential customers) personal data is to handle, develop and maintain the customer relationship between the data controller and the customer and for other similar business activities. The personal information can therefore e.g. be used to make related products and services available to the customer, for customer relationship management and for development, analysis, communication, marketing and business planning. In addition, personal information can be used for direct marketing or the like. In such cases, relevant security requirements will be met, in addition to the fact that there is always an opportunity to terminate the subscription. Personal information can also be used in research and development contexts such as to improve and develop IT systems and business processes at Østnes Helicopters Group. The legal basis for the processing of personal data It is Østnes Helicopters Groups legal right to manage its business, which also applies to, but not limited to, communicating with its customers, and marketing its companies and products. The legal basis for the processing of personal data may also be the conclusion of an agreement to which the data subject is a party or has taken part in the implementation of a declaration of intent in which the data subject has given their consent.
6. Data content in the register
The register may contain the data subjects' names, e-mail address, street address, country, telephone /phone number, company name and data regarding the use of electronic services (e.g. read or search data, IP addresses and cookies). In addition, the register may contain other information that the registered individual has provided.
7. Log data and cookies
8. Storage time for personal information
Østnes Helicopters Group stores personal information in the register in accordance with applicable law and only for as long as is necessary to carry out the purpose of the register. In general, information is stored as long as it is in accordance with applicable laws and regulations for a maximum of six (6) years after the customer relationship with the data subject has ceased. In addition, the storage of the information can in some cases where it is required by law be stored longer, e.g. in the production, exercise or defense of legal claims, conducting internal investigations or if required by applicable law. The above storage period is based on information and requirements related to e.g. product and service guarantees, product liability laws and the burden of proof in potential legal actions. Østnes Helicopters Group strives to ensure that stored data is valid within a reasonable limit by regularly deleting unnecessary data and updating outdated data.
9. Disclosure and transfer of personal information
10. Principles of data protection and security
Databases containing personal data are protected by firewalls, passwords and other technical measures. Physical databases and their backups are located behind locked doors. Upon receiving the information, strict procedures and security measures are followed to prevent unauthorized and illegal access to, alteration or use of personal information. All safety measures used are appropriate and in accordance with the usual standard. Østnes Helicopters Group continuously monitors the technical development to ensure that the level of data protection is updated. Folders with personal information that are handled manually are also found behind locked doors where no outsiders have access. Access to the information is only given to certain individuals who work for Østnes Helicopters Group and who need the information to perform their tasks. The individuals who process the information in this register as part of their tasks receive regular training and guidance in data protection and data security.
11. Rights of registered individuals
The registered individual has the right to:
ask the data controller for access to personal data about themselves and control them
request the correction or deletion of their personal data or restrict the processing
refuse the processing of their personal data
if applicable, transfer their personal data from one system to another.