While conducting its day-to-day business, the Odfjell Technology Ltd. (hereinafter referred to as “Odfjell Technology” or “we“) processes Personal Data related to visitors and users of our webpage, representatives of our customers, suppliers and business partners, and other persons who we are in contact with. 

This Privacy Policy includes information about:

• Data controller responsibilities;
• The purpose of and legal basis for the collection and processing of your Personal Data;
• How we collect your Personal Data and the types of data we collect and process;
• How we use Personal Data collected;
• Where, when and to who we disclose your Personal Data;
• Retention period for your Personal Data ;
• Consequences of not providing us with your Personal Data or requiring deletion of data already obtained;
• Your rights as a Data Subject; and
• How you may contact us.

The purpose of and legal basis for collection and processing of personal data

The main purposes of our collection and processing of Personal Data are to be able to comply with legal obligations, reporting to authorities, safety, security and emergency preparedness, prepare and deliver tenders and services to our customers, receive services from our suppliers, collaborate with our business partners, respond to questions and requests from customers and others, integrity due diligence/background checks on business partners, carry out audits and reviews and to provide the general public with user-friendly and relevant webpages.

The legal basis for our collection and processing of Personal Data is the EU Regulation 2016/679 (“GDPR“). More specifically, we base our processing on Article 6 (1) letter a (consent), b (necessary for the performance of a contract), c (necessary for compliance with a legal obligation) and f (necessary for the legitimate interests pursued by Odfjell Technology, which are not overridden by the interests of the Data Subject). The legitimate interests pursued by Odfjell Technology in this respect are the interest in providing its services.

Where, when and to who do we disclose personal data?

To ensure that the processing of your Personal Data is carried out in a safe and lawful manner, the access to Personal Data within Odfjell Technology is restricted. Only designated persons within Odfjell Technology have access to Personal Data and the access is secured by use of control mechanisms whenever necessary or required by law.

Odfjell Technology will not disclose, sell, distribute or otherwise share your Personal Data with other companies or organisations for commercial purposes. We will only disclose Personal Data to third parties to the extent we are required to do so pursuant to applicable law or regulation, or to the extent disclosure is necessary to deliver our services or otherwise required for legitimate business purposes. In any case we will implement the measures required to ensure an adequate protection of the Personal Data.

Within certain areas we have engaged data processors to process Personal Data on our behalf. This does not mean your Personal Data is disclosed to a third party, since such data processors only process Personal Data in accordance with our instructions. We have entered into data processing agreements with all such data processors to ensure that the data is processed only on documented instructions from us and that the data processor implements appropriate technical and organisational measures to ensure an adequate level of data protection.

The Personal Data may be transferred to companies established in countries outside the EEA area (“Third Countries“), such as other companies in Odfjell Technology than the company collecting the Personal Data. To the extent Personal Data are transferred to such Third Countries, Odfjell Technology will implement appropriate measures pursuant to applicable data protection law in order to ensure that the Personal Data are handled in a secure manner with an adequate level of protection – Similar to the level of protection provided within the EEA area.

How to manage your cookies

Most web browsers allow some control of most cookies through the browser settings. To find out more about cookies, including how to see what cookies have been set and how to manage and delete them, refer the manage cookies section for the most common browsers, Chrome, Firefox and Safari.

Duration of the processing

Personal Data are never retained for a longer period than what is necessary for the purposes for which they were collected. If the data is processed for two different purposes, we will retain the data until the purpose with the longest retention period is no longer relevant, but we will cease the processing for the purpose with shorter retention period when this shorter retention period has expired.

We will either permanently anonymise or in a secure manner delete those of your Personal Data that we no longer need or are under an obligation to retain.

Consequences if we are not provided with the personal data

Where our processing is based on your consent, you may at any time withdraw your consent. However, this may prevent us from delivering our services to you or receiving services from you.

Your rights as a data subject

As a Data Subject you have, with certain reservations, the right to:

• Obtain from us confirmation as to whether or not Personal Data related to you are being processed, and, where that is the case, obtain access to the Personal Data;
• Obtain from us the rectification of inaccurate Personal Data related to you;
• Obtain from us the erasure of Personal Data related to you;
• Obtain from us restriction of processing regarding your Personal Data;
• Obtain from us a copy of Personal Data that you have provided to us, and request that we transfer these data to another controller (data portability);
• Object to processing of Personal Data related to you;
• Lodge a complaint with a supervisory authority (in Norway: Datatilsynet); and
•  At any time withdraw your consent to the processing.

Our contact information

If you wish to exercise any of your rights or have any questions or comments to this Privacy Policy or our processing of Personal Data, you are welcome to contact us at:

Email:
dataprotection@odfjelltechnology.com

Postal address: 
Odfjell Technology
Kokstadflaten 35
5257 Kokstad
Norway 

Attn.: Legal department

Modification of this privacy policy

This Privacy Policy was last updated on 26 March 2022. We reserve the right to modify the policy from time to time and we encourage you to familiarize yourself with the content of the policy on a regular basis.