The company, represented by the CEO, is responsible for the processing of personal data within the organization. The daily follow-up may be delegated. Where the daily follow-up is handled outside the company, this is regulated by a data processing agreement. Delegation only includes tasks and not responsibility. The statement contains information you are entitled to regarding how we collect data from our website and general information on how we process your personal data.
All personal data you provide us will be securely processed in accordance with Norwegian law. We have developed internal routines for the processing and storage of personal data, which ensure compliance with information security and internal control requirements. Personal data is stored as long as necessary for us to handle your case or perform the relevant service for which the data was collected.
We may process personal data about you, including when:
- You contact us regarding a transport assignment
- You subscribe to route information
- You apply for a job with us
- You receive newsletters from Boreal Adventure
Legal Basis
Processing of personal data is permitted when the data subject has given their consent and/or processing is necessary due to a contract, legal obligations, or the protection of the data subject.
Consent
Processing of personal data may occur based on consent. Consent must be informed, voluntary, and documented. You have the right to withdraw your consent. We will then no longer be able to process the data, and this may in some cases prevent us from providing a service to you or fulfilling our part of a contract. If the data subject is under 13 years old, consent must be given by the person with parental responsibility for the child.
Deletion of Personal Data and the Right to be Forgotten
When there is no longer any reason for Boreal to retain personal data about you, the data will be deleted. This includes cases where you withdraw consent for the processing and storage of the data.
Right to Access and Transfer Personal Data
You can request access to the personal data we have stored about you, and you can request that we correct inaccurate or incomplete personal data.
WHAT PERSONAL DATA DO WE PROCESS:
Cookies on the Website
CoreTrekAS provides the publishing tool for our website and is responsible for technical development, operation, and maintenance. These are the cookies CoreTrek uses on our website:
CorePublishSession: Makes the publishing solution work. The cookie is removed from your computer when you close the browser.
Ctdevicecachekey: Identifies the type of device and browser you are using. The cookie lasts for one week and allows the website to present content to the correct device (PC, mobile, tablet).
You can choose to reject the storage and use of cookies. See more about this on nettvett.no.
Statistics and Logs
When you read our web pages, information will be stored in statistics and log files. The system stores user agent, IP address, and which page the visitor has visited in a raw data table. This information is then used to generate statistics for the number of page views per object (menu item, article, file), per host, and per keyword. All data in the raw data table is deleted after 2 days, and the remaining statistics only contain summarized data that cannot be used to identify each user. In addition, we store user agent, IP address, and which page the visitor has visited in the web server's logs. These logs are used exclusively for troubleshooting and security work, and no data is extracted or used from these logs. The logs are deleted after a given interval (normally 4 weeks). Only administrators of the web server (operations) have access to these.
Forms:
If you submit a form on our website, an email will be sent to one of our relevant mailboxes. Responses will then be sent to the email address you provided in the form. A copy of the form you submit will also be stored on our server and deleted after a given interval (normally 4 weeks).
SMS and/or Email Notifications:
We store information about names and phone numbers to notify those who wish to receive traffic information.
Job Applications:
By sending a job application, the candidate consents to the processing of personal data for the relevant position. This includes consent to the storage of the application, CV, emails, and Boreal's assessments of the application. Application documents are kept until the recruitment process is completed.
Customer and Supplier Information:
We store information about names, addresses, phone numbers, email addresses, contact persons, and other customer and supplier information necessary for the execution of a contract for the purchase or sale of goods and/or services. The legal basis is based on the contract for the purchase or sale of goods or services.
Video Surveillance:
Several of our transport vehicles have video surveillance. The purpose of the surveillance is to protect life, health, and property and to prevent and solve crimes. Recordings are processed in accordance with applicable personal data regulations. Our transport vehicles with video surveillance are marked with pictograms.
If you have questions about Boreal's privacy policies and/or personal data, call us at 91 555 888 or contact us at [email protected]. If you believe we have violated privacy regulations, you also have the option to complain to the Data Protection Authority, see datatilsynet.no.