Privacy Statement

1. Introduction

Institute for Energy Technology (IFE) has prepared this privacy statement for you who have sent us an inquiry, attend a seminar arranged by us, visit our areas or our website, or work for one of our partners or suppliers.

IFE is the data controller for the processing of personal data as described in this statement, and the privacy statement fulfills our duty to inform you according to the Personal Data Act and the General Data Protection Regulation (“GDPR”).

• Types of personal data and purposes

2.1          Introduction

We will collect and process personal data necessary for administration and case processing of your contact with us.

You choose whether to provide some personal information. We will always let you know what types of personal data are necessary for us to process and the consequences of choosing not to provide such personal data to us. We will not disclose personal data to recipients in countries outside the EU/EEA.

In the following, we review information about the personal data we store about the different groups mentioned above.

2.2          If you have sent us an inquiry

• Your contact details
• Content of your inquiry

The purpose of the processing is to be able to answer your inquiry and document your inquiry and our response to you, when necessary. The basis for processing is our legitimate interest in answering and processing requests as well as documenting these. The information will be processed for as long as necessary to safeguard our purpose. Inquiries sent to our general e-mail address companypost@ife.no will be deleted one year after the inquiry is received, unless it is stored in our records for documentation purposes.

We will only share your information with third parties (other data controllers) when this is a natural and necessary part of processing your inquiry or safeguarding our own interests.

2.3          You who attend a seminar with us

• Your name and contact details
• Location
• Any allergies or other food restrictions (special categories           personal data)

The purpose of the treatment is to conduct the seminar and offer food service. The basis for processing is an agreement with you that you will attend our seminar, and we process information about any allergies and other food restrictions based on your consent. The information stored for this purpose is deleted when the seminar has ended and evaluated, unless you have consented to further storage in order to receive new invitations to seminate.

We will share information about name and workplace with other participants in the seminar via a list of participants. We will not share other information with third parties.

2.4          You who visit our areas

• Information provided in connection with visitor registration
• Security camera information

The purpose of the processing is security. IFE is subject to the Security Act, and is obliged to implement a number of measures for physical security. The basis for processing is our legal obligations under these legislation. The information is stored as long as necessary to safeguard the purpose of the processing.

Information will not be shared with third parties (other data controllers) unless unexpected and urgent situations arise that make this necessary.

2.5          You who visit our website

• IP address
• Cookies

The purpose of the processing is for our website to function in a good way and to give us access to user statistics. The basis for processing is our legitimate interest, and you can refuse us to use cookies that are not necessary for the technical function of the website. Most browsers are set to automatically accept cookies. If you do not want this, you can change your browser’s settings to block cookies from www.ife.no. However, this may lead to our website being perceived as less optimal for you. The information stored for this purpose is automatically deleted after one year.

The information will not be shared with third parties (other data controllers), but may be shared with our data processors (IT systems, etc.)

2.6          If you work for one of our suppliers or partners, you

• Name and contact details
• Role at your employer
• Signature

The purpose of the processing is to keep in touch with our suppliers and partners through the contact persons designated. The basis for processing is our legitimate interest in such contact, and the information is stored as long as we have contact with your employer as our supplier or partner. If you have signed agreements with IFE on behalf of your employer, we will process your name and signature throughout the company’s lifetime.

The information will only be shared with third parties (other data controllers) when this is a necessary and natural part of the cooperation with your employer, for example to document a contractual relationship with a third party. The information may be shared with our data processors (IT systems, etc.)

• 3. Your rights

Under applicable data protection laws, you have a number of rights in connection with the access to and processing of your personal data.

You have the right to request access to the personal data we process about you, and/or demand correction/correction of your personal data if these are inaccurate or incomplete. Under certain circumstances, you also have the right to demand that we delete or restrict our processing of your personal data.

You have the right to object to our processing when it is based on our legitimate interests, as discussed further up in this statement. If you object to the processing, we will reassess whether we are allowed to continue the processing.

In certain situations, you have the right to receive in a structured, commonly used and machine-readable format, personal data about you that you have shared with us, and you can request that these be transferred to another data controller, e.g. another similar organisation (so-called right to data portability).

If you are not satisfied with the way your personal data is processed, you have the right to lodge a complaint with the Norwegian Data Protection Authority. The Norwegian Data Protection Authority’s contact details and more information about how to complain can be found on www.datatilsynet.no.