1. About the Privacy Policy

All of Genera AS’ employees are eligible to collect, process and save certain personal data provided by you.

Genera has a strong focus on handling personal data according to latest regulations in the Personal Information Act, and interested in protecting your privacy. Genera has therefore made this privacy policy, to ensure you that the company is following all the required guidelines when collecting and saving personal data from dialogue with you. This privacy policy describes what kind of personal data we are required to collect, how the company process and saves the data, and your right in this matter.

2. Processing Responsibility

Genera is responsible for the handling of your personal data. If you have any questions regarding the processing and handling of your personal data with the company. If you have any questions or comments, please contact: Tobias Gedde-Dahl, tobias@genera.no, Bolette Brygge 1, 0252 Oslo.

3. How Genera is processing personal data

Genera is collecting and processing personal data in different settings. Information can come directly from you or from others, depending on our relations and contact to you.

What kind of information Genera collects and how they are processed will vary from how we have gotten in contact with you. Below Genera have described how the company will process the information in the different situations.

3.1 Our business

Genera is a security firm licensed by the Financial Supervisory Authorities of Norway, and to be able to perform the work in line with the regulations, Genera will be in constant dialogue with private individuals, and persons acting on behalf of private individuals, partners and suppliers. On this matter Genera will process certain personal data about these private individuals to follow up on potential and ongoing business.

The personal information Genera will collect, and process is typically contact details, like name, phone number, e-mail address, information about employment, and other relevant information.

The basis for processing is our legitimate interest (General Data Protection Regulation – GDPR article 6 nr.1 f). It is our assessment that we have legitimate interest in processing these personal data to be able to perform our business according to the authority’s regulations.

3.2 Newsletter and invitations

If Genera has a client relation to you or your employer, and Genera has received your data in the relation, Genera will be able to send you news, invitations and other relevant marketing material regarding Generas services. The data related to your contact details will be name, e-mail address and information about your employment.

The basis for processing is Generas legitimate interest to send marketing material and other information to Generas clients and relations (GDPR article 6 nr. 1f) og with consent from recipient (GDPR article 6 nr. 1a).

Recipients of Generas marketing material and other information can at any time unsubscribe to receiving inquiries from the company, by noticing any of the company’s employees.

3.3 Applications

In a recruitment process for short term and long-term positions in Genera, the company will process personal data from applications. This includes information received through application letters, resumes, diplomas, and potentially letter of references. Genera might also make internal notes from interviews and from contact will the applicants references that will be processed.

The basis for processing of personal data in a recruitment process is the applicants full application, to be able to make the necessary controls to enter a possible contract with the applicant (GDPR article 6 nr.1 b)

For applicants that do not receive an offer for employment, or rejects an offer, Genera will keep and process the information and data collected in the recruitment process, only if the applicant consents to process the data, in maximum 3 years from the recruitment process. This is so that Genera can keep and use in a similar recruitment process in the future in case a relevant position opens. The basis for the processing is your voluntary consent (GDPR article 6 nr. 1 a)

3.4 Other processing of personal data

In case Genera will process your personal data in other ways than stated in this privacy policy, you will be contacted and informed in what way you data will be processed.

4. Who will Genera share your data with?

4.1 Data processor agreement

Genera will from time-to-time use data processor agreement to collect, save or in other ways process personal data on our behalf. This is typically service providers, within like operations, maintenance and other technical services. Generas data processors will only get access to relevant data for them to conduct their service for Genera.

To secure your rights Genera has entered into data processor agreements with the all data processors which implies that your personal data cannot be used in other purposes than agreed with you.

4.2 Other third parties

Genera will not share your personal data with any other parties, unless there is a legal basis. Examples on such basis will typically be your consent or a statutory basis, which gives Genera the rights, or Genera is obligated to share the information.

4.3 Other Genera companies

If Genera establish subsidiaries to the company, in the future, you have a client agreement with, Genera might share relevant information to other companies in the organisation. This can be because of shares technical solutions, or that the companies are cooperating to provide the service.

If the other Genera company receives data from Genera, and counts as Generas data processor, privacy policy 4.1 for processing implies. If the other Genera company use the personal data for its own purpose, and therefore be seen ass the responsible for the processing, will privacy policy 4.2 implies.

5. Your rights

You have the right to see, change and delete some or all your personal data that Genera is processing. You also have the right to limited processing, direct objections towards the processing and to demand the right to data portability. You can read more about your rights on this issue on the Norwegian Data Protection Authorities websites: www.datatilsynet.no

In case Generas basis for processing is justified in your consent, you can withdraw this at any time. Please see contact details above to send an enquiry to make your rights applicable.

In case you mean Generas processing of personal data is not accurate, with what is stating in this privacy policy, or Genera in any other way does not follow the Privacy act, you can send a complaint to the Norwegian Data Protecting Authorities, though their websites: www.datatilsyent.no.

6. When will your data be deleted?

Genera will save your data as long as it is necessary to obtain the purpose of the collection of your personal data.

This means f.ex. that personal data will be processed by Genera based on your consent, and will be deleted when your consent is withdrawn, of before, if the duration of the consent has expired.

If Genera has a legitimate interest in justified processing, Genera will delete the personal data, when such justified interest is no longer relevant. This can f.ex. be if you do not work for the same employer that once disclosed your personal data, or that your employer no longer has a client relation with Genera.

7. Protecting your personal data

Genera is very interested in protecting your data for irrelevant persons and organisations. Genera therefore have strict routines for IT-security, which ensures good protection from unauthorised access to your personal data.

8. Changes

In case of changes in our processing routines of your personal data, or changes in the regulations regarding processing of person data, Genera might change the information you have provided according to this privacy policy. Updated privacy policies will be uploaded on our websites.