This privacy statement explains how Heatex Norway AS collects and processes personal data. The General Manager is responsible for the processing of personal data.
Contact: Heatex Norway AS, Malmveien 3A, 3031 Drammen. General Manager: Kaare F. Roestad. Email: kaare@heatexnorway.no.
Your rights
You have the right to request access to, correction, deletion or portability of the personal data Heatex Norway processes about you, and you may withdraw your consent. Complaints may be sent to the Norwegian Data Protection Authority (Datatilsynet), but we would prefer that you contact us first so we can resolve the matter immediately.
Whose data we process
Customers, potential customers and visitors to our website.
Why we collect personal data
The main purpose is to manage, administer and follow up customers, users and other interested parties in the best possible way.
How we collect personal data
Sharing personal data with us is voluntary, but to work with you on projects we need certain information related to the company you work for. We store the following about our customers: company name, name, address, telephone number, email address, website and organisation number. This information is stored in a dedicated system at our accounting provider, with whom Heatex Norway has a data processing agreement.
Heatex Norway also uses Microsoft 365 and Dropbox when collaborating with customers. See Microsoft and Dropbox for how they handle personal data.
We also use the information to provide information, offers and service related to your purchase by email, text message and telephone. We do not sell or buy personal data. Automated decisions and profiling are not used.
Personal data is processed when you
- Establish a cooperation with us
- Contact us by telephone, text message, email or social media
- Visit our website
Personal data is processed under Article 6(1) of the GDPR on the basis of your consent, a cooperation agreement we have entered into, or a legitimate interest.
Retention
Personal data is kept for as long as necessary for the customer relationship, and up to five years after the cooperation has ended. Contact us if you want us to stop processing or delete your personal data; we will comply with applicable law. Personal data we are legally obliged to process cannot be deleted. Accounting records are kept as required by the Norwegian Bookkeeping Act.
How personal data is processed
- Direct communication. Any contact – exchanging business cards, email, telephone, text message, social media – involves processing personal data such as name, contact details or other information you choose to send. Data is kept to maintain history and documentation of completed projects in case of claims.
- Purchase of products and/or services. We process name, contact details, order information, payment information and purchase history. On first purchase you are registered in our accounting system, provided by Account Regnskap AS.
- Use of our website. This website has no contact form, no analytics and no tracking. It does not ask for personal data; if you contact us by email or telephone through links on the site, that contact is handled as direct communication above. See our cookie information.
Who we share personal data with
- Data processors providing services on our behalf, such as IT and administration services, web hosting and email
- Support for IT and administration systems
- Public authorities we are obliged to report to
We require everyone we share personal data with to secure it in line with the GDPR, and we enter into data processing agreements with everyone who processes data on our behalf.
Transfer outside the EU/EEA
Personal data may in some cases be transferred outside the EU/EEA, for example in connection with invoicing, website security or other services needed to run our business. Transfers are only made to countries approved by the European Commission or with the necessary safeguards, such as the EU standard contractual clauses. Contact us if you want to know which suppliers outside the EU/EEA we use.
Security
We use recognised suppliers of IT and administration systems, strong passwords and backup of all data. In the event of a data breach, our routine is to notify the Norwegian Data Protection Authority within 72 hours.
Changes
This statement may be updated from time to time. The latest version is always available on this website.