Ratio Management Privacy Policy

1. Why do we collect personal data and what kind of information we collect

1.1 Cooperation with external parties

In order to collaborate with and follow up our customers, suppliers and other partners, it is necessary to store information in order to fulfil our contractual obligations as well as plan and execute assignments and projects. Personal data processed can typically be name, email, telephone number and any other personal information necessary in the specific assignment or customer/supplier relationship. Most of this personal data will be necessary for us to process in order to fulfil our agreement with you, cf. GDPR Article 6 letter b. In some cases, the processing is necessary to safeguard our legitimate interest in the proper operation and organisation of our own business, cf. GDPR Article 6 letter f. GDPR.  In the latter case, we have assessed that our interest in carrying out the processing outweighs the participant’s need for protection of their interests or fundamental rights and freedoms.

1.2 Processing of personal data in connection with inquiries received via the website or other channels

If you contact us via our website or other channels, we process your personal data. Personal data processed will typically be name, telephone number, e-mail address and any personal information that may result from the inquiry. The information is collected via contact forms, by inquiries by e-mail, when filling out applications/forms or when you contact us in any other way. The processing of personal data takes place on the basis of a balance of interests, cf. GDPR Article 6 letter f. We have considered it necessary for us to store this personal data in order to follow up your inquiry in a good way.

1.3 Processing of personal data at events

In connection with arranging seminars, courses and similar events for our customers, suppliers, partners and others, personal data is processed. These are name, contact information, position and employer. The legal basis for this processing is GDPR Article 6 lit. f. In order to organise such events, we have assessed that our interest in carrying out the processing outweighs the participant’s need for protection of their interests or fundamental rights and freedoms.

1.4 Processing of personal data in connection with recruitment

In connection with the recruitment of employees, we collect personal data about job seekers applying for a job with us: Name, contact information, photo, CV, application, diplomas, certificates, statements from references, interview minutes and other information that job seekers provide to us. The legal basis is GDPR Article 6 letters a and f. The Company has a legitimate interest in collecting information about the candidate for recruitment purposes. This data will be deleted after the recruitment process has been completed, unless the candidate consents to the data being retained by the data controller. In that case, the legal basis is GDPR Article 6 letter a. The information is stored for one year after the consent has been given or until the consent is withdrawn.

1.5 Newsletters and other marketing

For persons who have consented to this, we send out newsletters by e-mail. We also send newsletters and other marketing to those with whom we have an existing customer relationship. In connection with the newsletter and other marketing, we process personal data. This is name, contact information (e-mail, address, possibly telephone number) and, if applicable, information about the employer for this purpose.

The consent to receive such marketing may be withdrawn at any time. This can be done by contacting us. The legal basis for the processing is GDPR Article 6 lit. f. The processing is necessary for the purposes of our legitimate interests, which exceed the need for protection of the interests or fundamental rights and freedoms of data subjects.

Personal data related to marketing is processed until the consent is withdrawn or if the existing customer relationship ceases.

2. Disclosure of personal data to others

We do not disclose your personal data to others unless there is a basis for such disclosure. Examples of such a basis will typically be because you have consented to it, because the disclosure is necessary to fulfil an agreement with you or there is a legal basis requiring us to disclose the information.

Data controller uses data processors to collect, store or otherwise process personal data on our behalf. In such cases, we have entered into agreements to safeguard the information security of the processing. Such data processors may be accountants, recruitment systems, personnel systems, payroll systems, IT systems, HSE systems, etc.

All processing of personal data that we carry out takes place within the EU/EEA area.

3. Storage time

We store your personal data with us for as long as is necessary for the purpose for which the personal data was collected, unless we are legally obliged to continue storage.

4. Your rights when we process personal data about you

The data protection regulations give you a number of rights related to the processing of your personal data. You have the right to request access to your personal data, correct any errors or delete the personal data we process about you. You also have the right to demand limited processing, object to the processing, and demand the right to data portability. You can read more about the content of these rights on the Norwegian Data Protection Authority’s website: www.datatilsynet.no.

To exercise your rights, please contact us by email. We will respond to your inquiry as soon as possible, and no later than 30 days. You can also contact us if you would like more information about the way we process your personal data.

We will ask you to confirm your identity or provide additional information before we allow you to exercise your rights to us. We do this to make sure that we only give access to your personal information to you and not someone who pretends to be you.

5. Complaints

If you believe that our processing of personal data does not match what we have described here or that we in other ways violate privacy laws, you can complain to the Data Inspectorate. You can find information on how to contact the Data Inspectorate on the Data Inspectorate’s website: www.datatilsynet.no.