Privacy StatementLast updated: June 01, 2023
BEWI ASA (“BEWI”) is committed to protect and respect your privacy. We want you to feel safe when we process your personal data. This Privacy Statement explains how we ensure that your personal data are handled in compliance with applicable legislation.
We use your personal data to enable us to operate our business and meet our obligations and responsibilities to you, applicable laws and directives, and good industry practice. This Privacy Statement applies to you as a subscriber to our press releases, job applicant or contact person of one our collaborative partners, customers, suppliers or investors. This Privacy Statement also applies to you who’s personal data we will process in connection with a due diligence performed in connection with a potential acquisition of a company performed by or on behalf of BEWI.
Personal Data Controller
BEWI is the personal data controller for the processing of your personal data and is responsible for ensuring that the processing is carried out in accordance with applicable legislation. You will find our contact details at the end of this Privacy Statement.
Our processing of your personal data
IF YOU ARE A CONTACT PERSON OF ONE OF OUR COLLABORATIVE PARTNERS, CUSTOMERS, SUPPLIERS OR INVESTORS
BEWI processes your contact details, such as name, job title, email, phone number and address in order to effectively manage our contract and our business relationship with you or the company or organisation that you act on behalf of, and, where applicable, for the establishment and defence of legal claims. We process your personal data on the basis of our and your employer’s (if applicable) legitimate interests for the performance and management of the contract or to safeguard our legal interests. For the purpose to administrate the agreement, the data will be retained as long as the contract is in force and for a period of 1 year thereafter, or such longer period as required by law or to safeguard our interest in the event of a dispute or legal claim associated herewith.
IF YOU APPLY FOR A JOB POSITION AT BEWI THROUGH OUR WEBSITE OR OTHERWISE
When you apply for an open position within BEWI, we will collect your contact details such as name, email address and telephone number. We will also collect the personal data you voluntarily submit via email or the registration form when applying for an open position, such as picture of you, your gender, link to LinkedIn profile and other information you may include in your CV or personal statement, or any other information you provide to us in connection with your application.
BEWI usually collects personal data directly from you when you apply for a job with us. We may also collect personal data about you from third parties during our recruitment process. We collect data:
- Through emails sent to and from BEWI
- From external recruitment firms, if you apply for a position within BEWI through a recruitment firm (such firms will collect and process your personal data in the capacity as independent data controllers)
- Through interviews or other forms of assessment
- From your references
- From prior employers, after informing you that we are doing so
We may also collect or receive information about you from other sources, such as
- Public registers
- In some cases: social media platforms, such as Facebook and Instagram, of which we will inform you beforehand.
Processing of yourr personal data is necessary prior to entering into an employment contract with you, e.g. for the administration of your application, managing the recruitment process, contacting you for interviews and to assess and confirm your suitability for employment. We will collect the personal data set out above for these purposes and we base this processing on BEWI’s legitimate interest to conduct recruitment. We may also use your personal data for statistical analysis on candidate demographics and candidate assessment, if applicable, also based on BEWI’s legitimate interest. For these purposes, we have concluded that our legitimate interest is not overridden by your interests or fundamental rights and freedoms.
We also need to process personal data to comply with our legal obligations under applicable legislation, such as labour law.
Finally, processing is necessary for the purposes of our legitimate interests of the establishment, exercise or defence of legal claims, such as the Discrimination Act.
If we employ you, any relevant personal data collected during your pre-employment period will become part of your personnel records and will be retained in accordance with our privacy Statement for employees.
If we do not employ you and you have given us your consent to stay in our recruitment database, we will retain your personal data for a limited time to consider you for future employment opportunities based on your consent. Please note that we may store certain data for a longer time period to defend BEWI against claims from candidates (e.g. based on alleged discrimination) in accordance with the time limits to bring such claim under relevant law in your country.
IF YOU SUBSCRIBE TO OUR PRESS RELEASES
BEWI will process your e-mail address when you subscribe to receive our press releases. In this case, processing of your personal data is based on your consent. You will be able to unsubscribe from this mailing list at any time, in which case we will delete your e-mail address from our systems.
We may market our business operations and invite you to events. We base this processing on a legitimate interest, as we assess that our interest in sending to you general or segmented marketing overrides your interest in protection of your privacy.
FOR COMPANY TAKE-OVERS
We may process your personal data in connection with a potential acquisition of a company or a restructuring of BEWI. We base this processing on a legitimate interest, as we assess that our interest in enabling and evaluate an acquisition or a restructuring process is not overridden by your interests or fundamental rights and freedoms. We will retain your personal data during the time of the evaluation of the potential acquisition or restructuring process and (i) in case the acquisition or restructuring is completed, for a period of 10 years thereafter and (ii) in case the acquisition or restructuring is not completed, for a period of 1 year after such decision; or, in both cases, such longer period as required by law . If BEWI ceases to exist, e.g. by winding-up or bankruptcy, your personal data will be erased as long as they are not required to be retained for compliance with a legal obligation.
If BEWI is acquired by a company or split-up in connection with a restructuring, your personal data will be retained and processed by the acquiring company in accordance with this Privacy Statement, if you are not given information stating otherwise in connection with the take-over.
IF YOU VISIT OUR WEBSITE
WHERE DO YOUR PERSONAL DATA COME FROM?
The personal data that we use about you are data that you have provided us with. We may also collect data from other sources, such as suppliers and authorities.
FOR HOW LONG DO WE RETAIN YOUR PERSONAL DATA?
We retain your personal data only for as long as is necessary for the purposes for which we originally gathered them in accordance with this Privacy Statement (please see Our processing of your personal data ). When we no longer need to retain your data, we will remove them from our systems, databases and backups. We may also need to retain your personal data for other reasons, e.g. to comply with legal requirements or to safeguard our legal interests or any other important public interest. The retention time depends on the context and cannot in all cases be specified in advance.
WITH WHOM DO WE SHARE YOUR PERSONAL DATA?
Since BEWI forms part of the BEWI Group and has several subsidiaries that carry out business activities, the personal data set out herein, depending on the purpose of the processing, may need to be disclosed to BEWI’s subsidiaries in order to fulfil the purposes set forth herein. BEWI may also disclose your personal data to a third party, such as IT providers and companies with which we have a business relationship for the purpose of providing our services. We have concluded data protection agreements with these parties, and to the extent your personal data will be disclosed to service providers in the capacity as data processors, such service providers cannot use the data for any other purpose and must always comply with our instructions. We share your data with Cision AB for the distribution of press releases if you are a subscriber. Our newsletter is send through MailChimp, you can read our newsletter privacy statement here.
Your personal data may also be disclosed based on our legitimate interest to a third party as part of a merger or transfer, acquisition or sale, or in the event of a bankruptcy. In certain circumstances, we may also need to disclose data upon the request of authorities or the Oslo Stock Exchange, exchanges or to third parties when we have a legal obligation to do so, or in connection with court proceedings or other similar processes on the basis of our legitimate interests to prevent and detect criminal activity and to represent our interests during processes.
WHERE DO WE PROCESS YOUR PERSONAL DATA?
Your personal data is processed by BEWI within the EU/EEA. Some of our partners may process personal data outside the EU/EEA, in which case we apply appropriate safeguards approved by the EU Commission, e.g. by using the EU Commission’s Standard Contractual Clauses (Article 46.2 GDPR), available here.
RIGHT TO OBJECT
You have right to object, on grounds relating to your particular situation, at any time to the processing of your personal data where the processing is based on our legitimate interest. You also have the right to object to processing for direct marketing purposes, including profiling. If you lodge an objection, we will no longer process the personal data we process based on a legitimate interest unless we can demonstrate compelling legitimate reasons for such processing that overrides your privacy interests, or if we need to establish, exercise, or defend legal claims.
RIGHT TO WITHDRAW CONSENT
You have the right to withdraw your consent at any time when you have given your consent for a specific type of processing. If you withdraw your consent, we will stop processing your personal data for the purpose for which you had given your consent and will erase the personal data that was being processed only on the basis of consent.
RIGHT OF ACCESS AND RECTIFICATION
You have the right to request access to the personal data we hold about you. This includes the right to be informed whether your personal data is being processed and to be provided with a copy of such information, what personal data is being processed, and the purpose of the processing. This also includes the right, upon request, to access information about any evaluation or assessment of the balancing test we are required to conduct when we process personal data based on our legitimate interest. You also have a right to request that personal data is rectified if you believe that the personal data is inaccurate or incomplete.
RIGHT TO ERASURE
You have the right to have your personal data erased if (i) the data are no longer necessary for the purpose for which they were originally collected; (ii) you object to the processing of your personal data as set out above, and we do not have an overriding legitimate interest; (iii) the processing is unlawful; or (iv) the personal data has to be erased to enable us to comply with a legal requirement. Please note that we may reject the request if the processing is permitted or required according to law or any other relevant legal ground, or if we need to establish, exercise, or defend legal claims.
RIGHT TO RESTRICT PROCESSING
You have the right to request the restriction of your personal data if (i) you contest the accuracy of the personal data and we must restrict the processing for a certain period of time to enable us to verify the accuracy of relevant data; (ii) you consider the processing to be unlawful and oppose the erasure of personal data but instead request restriction of the use; (iii) we no longer need the personal data for the purposes set out in this Privacy Statement, but the personal data is required by you for the establishment, exercise or defence of a legal claim; or (iv) you have objected to the processing pursuant to the section “right to object” above, and our verification of the legitimate grounds is pending.
RIGHT TO DATA PORTABILITY
If you have provided us with personal data yourself and our lawful basis for processing the personal data is consent or for the performance of a contract, you have the right to request that the data are provided in a structured, commonly used and machine readable format, and you also have the right to request that the data are transmitted to another data controller, where this is technically feasible.
If you believe that your personal data are being processed in breach of the applicable data protection legislation, you have the right to lodge a complaint with our privacy officer via privacy@BEWI.com or with the relevant Data Protection Authority. Contact details to all EU/EEA supervisory authorities can be found here.
WE PROTECT YOUR PERSONAL DATA
We want you to feel confident at all times about providing us with your personal data. BEWI has therefore taken appropriate security measures to protect your personal data against unauthorised access, alterations and erasure. Security breaches are reported via internal mechanisms and to the authorities when needed. Should a security breach occur that may materially impact you or your personal data, e.g. when there is a risk of fraud or identity theft, we will contact you to tell you what you can do to mitigate potential adverse effects of the breach.
CHANGES TO THIS PRIVACY STATEMENT
BEWI has the right at any time to make changes to this Privacy Statement. When we make changes that are not purely formatting or typographical error corrections, we will inform you clearly of these changes and what they mean for you before they become effective.
Do not hesitate to contact us if you have any questions about this Privacy Statement, our processing of your personal data or if you wish to exercise your rights
Attn. the Privacy Officer
Dyre halses gate 1A,
7042 Trondheim, Norway