Privacy policy

Norwegian Electric Systems AS (NES), part of HAV Group, processes personal data when we communicate with customers, suppliers, job applicants and other people who interact with us.

This policy explains how we use that information and how you can exercise your rights.

Read about our planned LinkedIn analytics integration.

1. Who is responsible?

Norwegian Electric Systems AS is responsible for the processing described in this policy when NES determines why and how the information is used.

Privacy enquiries can be directed to HAV Group’s shared contact address: office@havgroup.no. Please state that your enquiry concerns Norwegian Electric Systems.

Some services may be administered jointly with, or on behalf of NES by, other HAV Group companies. Where another company is responsible for a particular activity, this will be explained in the information provided for that activity.

2. Communication and business relationships

When you contact us or work with us, we process the information needed to respond, follow up and maintain our business relationship.

This may include your name, employer, position, business contact details and information contained in correspondence or meeting notes.

We normally process this information based on our legitimate interests in communicating with our contacts, managing our operations and documenting business activities, under GDPR Article 6(1)(f). Where necessary, we also process information to fulfil a contract with you or meet legal obligations, under GDPR Articles 6(1)(b) and 6(1)(c).

Providing information is voluntary, but we may need certain details to respond to your enquiry or provide the service you request.

We retain correspondence and contact information for as long as needed for these purposes, taking account of ongoing relationships, documentation requirements and applicable retention obligations.

3. Recruitment

When you apply for a position at NES, we process the information needed to assess your application. This may include your contact details, CV, application, qualifications, interview notes and references.

The applicable legal basis depends on the processing involved:

• Taking steps towards entering into an employment contract, under GDPR Article 6(1)(b).
• Our legitimate interests in assessing qualifications and suitability, where appropriate, under GDPR Article 6(1)(f).
• Your consent, where requested, for example to retain your application for future opportunities, under GDPR Article 6(1)(a).

The recruitment service used for a vacancy and any additional information about processing will be identified in the application process.

Please avoid including sensitive personal information that is not necessary for your application.

Recruitment information is deleted when it is no longer needed for the recruitment process or related documentation requirements, unless you have agreed to longer retention.

4. Our website

Information you submit through our website is used to handle your enquiry or provide the service you request.

Where cookies or similar technologies require your consent, information about their purpose and your choices is provided through the website’s cookie settings. Any separate cookie information should be read together with this policy.

5. Service providers and sharing

Personal data is shared only where necessary for the purposes described in this policy or where we are legally required to disclose it.

Service providers that process personal data on our behalf must handle it under appropriate agreements and security requirements. Access is limited to people who need the information for their work.

If personal data is transferred outside the EU/EEA, we must have a valid transfer basis and any necessary safeguards. Information about safeguards relevant to your data can be requested using the contact address above.

6. Retention and security

We retain personal data only for as long as necessary for the purpose for which it was collected, including applicable legal and documentation requirements. Information is then deleted or anonymised.

We use technical and organisational measures appropriate to the information and risks involved to protect against unauthorised access, disclosure, alteration and loss.

7. Your rights

Depending on the circumstances, you may request:

• Access to your personal data.
• Correction of inaccurate information.
• Deletion of your personal data.
• Restriction of processing.
• A portable copy of information you have provided, where the right to data portability applies.

You may object to processing based on legitimate interests. Where processing is based on consent, you may withdraw that consent at any time. Withdrawal does not affect the lawfulness of processing carried out before it was withdrawn.

Contact office@havgroup.no to exercise your rights. We may need to verify your identity before responding.

We normally respond within one month. If an extension is necessary because of the complexity or number of requests, we will inform you within that month and explain the reason.

If you believe your personal data has been handled incorrectly, you may complain to the Norwegian Data Protection Authority.

8. Updates

We update this policy when our services or processing activities change. The current version will be available on our website. Where required, we will notify affected individuals directly of significant changes.

9. LinkedIn analytics and company dashboards

Norwegian Electric Systems (NES) is developing a read-only integration with LinkedIn’s official API for reporting on our own company Page. The integration is not currently active. Access is subject to LinkedIn’s approval and authorisation by an eligible Page administrator.

Purpose and scope

The integration is intended to help our marketing and communications team understand how NES content performs over time. Selected aggregate results are also intended for display on company information screens, helping colleagues follow the company’s communication activities.

The planned refresh frequency is once daily. This integration is for NES’s own reporting and is not intended as a service for collecting data from unrelated LinkedIn Pages.

Information we intend to retrieve

Depending on the approved permissions and available API endpoints, we intend to retrieve:

• Follower totals and aggregate follower growth.
• Aggregate Page views and visitor statistics.
• Performance statistics for NES posts, such as impressions, clicks, reactions, comments and repost counts.
• Post identifiers and publication dates needed to associate statistics with the correct content and reporting period.

Our reporting is intended to use aggregate counts, not the identities of individual visitors, followers or people interacting with our posts. We do not intend to collect personal profiles, private messages or the text of individual comments for this purpose.

Authorisation and account access

An eligible Page administrator will authorise the connection through LinkedIn’s own authorisation process. The application will not ask for or store the administrator’s LinkedIn password.

The integration is intended only to retrieve data. It will not be used to publish or edit posts, send messages, or change the NES LinkedIn Page. We will request only the permissions needed for the approved functionality.

The connection will require authentication credentials and may require administrator identifiers, Page identifiers and limited technical logs to operate and troubleshoot the service.

Security and access

The planned implementation will keep authentication credentials on the server, separate from the information displayed in the dashboard. Credentials must not be exposed in public webpages, downloadable files or browser-side code.

Administrative access will be restricted to authorised personnel and service providers who need it to operate or maintain the integration. Only selected reporting information is intended for display; authentication credentials and administrator information are not.

Before activation, we will document the hosting arrangements, processing locations, service providers and access controls. We will also specify whether the dashboard displaying the selected statistics is publicly accessible or access-restricted.

Retention and deletion

Before data collection begins, we will specify retention periods for analytics, authentication information and technical logs, taking account of the reporting purpose and the requirements of the approved LinkedIn API product.

An authorised administrator will be able to revoke the application’s access through LinkedIn. Once that revocation takes effect, the integration will no longer be able to retrieve new data using that authorisation. Disconnecting the integration does not, by itself, delete information already stored by NES.

Requests concerning stored information or deletion can be sent to office@havgroup.no. Please identify the request as concerning the NES LinkedIn integration.

Before the integration goes live

This section describes the intended integration. Before activation, we will update it to reflect the actual data collected, the applicable legal basis for any personal data, retention periods, recipients and any international transfers. Authorisation through LinkedIn does not replace our responsibility to establish an appropriate legal basis for processing personal data.