Data owner and controller
Æra Strategic Innovation AS
Any questions related to personal data can be e-mailed to email@example.com
Among the types of personal data that era.as collects, by itself or through third parties, there are: cookies, user statistics, e-mail addresses, full names, job titles and phone numbers.
In the information provided below, you will find a specification of the personal data acquired through our points of contact and interaction, why we collect them, and your rights in relation to our processing of this data.
Why we acquire personal data and what kind of information we collect
We acquire data from points of contact and interaction with our customers and suppliers, as well as other third parties with whom we have business relationships.
This data mainly consists of personal information enabling a two-sided interaction. Processing of such information is on the basis of us having a legitimate interest in knowing how to keep in touch with stakeholders in order to properly conduct our business. We have considered that this interest does not override the privacy interests of the data subjects, as the information being processed and the ways of processing does not fully exhaust one's personal profile, nor is it intrusive.
We acquire data from distributing marketing material to an aggregated list of customer and stakeholders. This involves processing contact information and personal data in the form of e-mail, full name, phone number and oftentimes job title on the basis of an active consent, or on the basis of us fulfilling an agreement with a potential or existing client relation.
We acquire data from responding to incoming inquiries. This involves processing contact information and personal data in the form of e-mail, full name, phone number and oftentimes job title which might follow from the inquiry of whom it may concern. Processing of such data is based on a balance of interests, where we have assessed this to be necessary in order to help you with your inquiry.
We acquire data from our recruitment processes through a third party solution called Homerun. Homerun allows us to process contact information and personal data in the form of e-mail, full name, phone number, location, CV, motivational letter and references as part of the candidate's application process. This through active consent.
We acquire data from from the use of our website through a third party solution called Sanity. Sanity allows us to track and examine the use of era.as, to prepare reports on its activities and share them with the rest of the company. We view this as necessary in order to tailor the website and its user experience for our target group. However, we protect your personal data by confining our use of this information to statistics. It is not possible to identify you as an individual from these statistics.
Disclosure of personal data to others
We do not disclose your contact information and personal data to others unless there is a legal basis for doing so. Examples of such a basis will typically be an agreement with you personally, or a legal requirement for us to disclose the information to a third party.
We use data processors to acquire, store or otherwise process personal data on our behalf. In such cases, we have entered into agreements to preserve data security at every stage of the processing.
All processing of personal data by us occurs within the EU/EEA legislation.
Storage of data
We store your personal data for as long as necessary to fulfill the purpose they were acquired for. Because of requirements on the storage of accounting documentation, relevant contact information will be stored for a minimum of 10 years.
Where personal data are processed on the basis of consent, such information will be deleted if you at any time withdraw your consent.
Your rights when we process personal data about you
You have the right to request access to, correction of or erasing of personal data we have collected. You also have the right to set limits or object to the processing, and to demand the right to data portability. You can read more about the content of your rights on the website of the Norwegian Data Protection Authority.
To exercise your rights, you must complete the form for requesting access to personal data which can be accessed here. We will respond to your request as quickly as possible, and within 30 days at the latest.
You can withdraw consent to your personal data being processed by us at any time. The simplest ways to do this is to click on the link in the e-mail used to send you information, or to send an e-mail to firstname.lastname@example.org.
Information on how to contact the Norwegian Data Protection Authority can be found on its website here: www.datatilsynet.no