This statement contains information you are entitled to receive when Norfund collects personal data about you, provided by yourself or others. The declaration provides general information about how Norfund processes personal data in accordance with the Personal Data Act and the General Data Protection Regulation (GDPR). The statement will be updated as needed.
1. Privacy Policy
Inquiries for access, rectification or deletion of personal data are sent to:
Email address: post@norfund.no (mark the email with Privacy)
Address: Fridtjof Nansens plass 4, 0160 Oslo
2. Your Rights
You have the right to demand access, rectification, or erasure of the personal data we process about you. You also have the right to object to the processing, demand limited processing, and/or claim the right to data portability. You can read more about these rights at the Norwegian Data Protection Authority.
Norfund does not distribute your personal data to others unless there is legal basis for such disclosure.
If you believe Norfund does not comply with the Personal Data Act, exercise your rights and email post@norfund.no. You will receive an answer to your inquiry as soon as possible, and within 30 days.
You also have the right to complain to the Norwegian Data Protection Authority about data processing that is in violation of the applicable data protection legislation at any given time.
3. How we receive, collect and process personal data
3.1. 1. Our website norfund.no
On norfund.no it is possible to sign up for events and newsletters.
It is voluntary for visitors of Norfund’s website to provide personal data in connection with our services.
The individual must consent for personal data to be processed, unless otherwise specified. Consent is given when you register your information, and consent can by withdrawn by opting out of the service. Dekode is the data processor and supplier for the development, operation and maintenance of our websites. Norfund and Dekode have entered into a data processing agreement that regulates what information the supplier shall have access to and how it is processed in accordance with applicable laws.
Information collected in connection with the operation of the website is stored on separate servers operated by the provider. Both Norfund and Dekode have access to the information collected.
3.1.2. Registration for events
Public events held by Norfund are announced on norfund.no. When you register for an event organized by Norfund, you provide your name, place of work and e-mail address. For larger events, we also ask you to provide your mobile phone number.
We ask for this information to manage enrollment and participation, and for security reasons. We may send you information either in advance and/or following the event.
The basis for processing this is Article 6, 1. A) of the General Data Protection Regulation, i.e.consent.
You can also agree to participate in the evaluation of the event.
The information you provide is deleted by Norfund after the event has been completed. You’ll need to re-enter your information each time you sign up for an event.
3.1.3 Newsletter
To subscribe to newsletters, you must provide your name and email address. The information you provide is stored in separate lists in Mailchimp and is not shared with others.
Invalid e-mail addresses are automatically deleted over time.
You can unsubscribe from the newsletter by accessing the “unsubscribe” link at the bottom of the newsletter.
The basis for processing personal data in connection with the newsletters is Article 6, 1. A) of the General Data Protection Regulation, i.e. consent.
3.1.4. Sharing posts on Norfund’s websites
When you share posts from norfund.no, information is posted there and then with the online community of your choice. How the online community in question handles the data further, is governed by your agreement with the community. Information that you have shared a post is not stored with us.
3.1.5. Search
Norfund stores information about which keywords users on norfund.no use in the Search tool using Google Analytics/search function in WordPress.
The purpose of the storage is to make our search engine better. The search usage pattern is stored in a separate database and is stored only in aggregated form. Only the search term is saved and cannot be linked to other information about the users, such as the IP addresses.
The basis for this processing is Article 6, 1. F) of the General Data Protection Regulation, which allows us to process information necessary to maintain a legitimate interest that outweighs the consideration of the individual’s privacy. The legitimate interest is to make services on the website function efficiently.
3.1.6. Internet Statistics
Norfund collects anonymized statistics about visitors to norfund.no. The purpose of this is to compile statistics that we use to improve and further develop the information offered on our websites. The statistics provide answers to questions such as, how many people visit different pages, how long the visit lasts, which websites users visit from, and which browsers are used.
3.1.7. Use of cookies
Norfund uses cookies on our website.
Cookies are small information files that are left on your computer for our service to work best for you as a user. Cookies are important to help us make online services more user-friendly, monitor the use of the site, and improve the service we provide to you.
The cookies do not contain personal data and do not pose a security risk to you, but you can refuse to consent to the storage of cookies at any time by changing settings in your browser.
The basis for this processing is Article 6, 1. F) of the General Data Protection Regulation, which allows us to process information necessary to maintain a legitimate interest that outweighs the consideration of the individual’s privacy. The legitimate interest is to make the service on the website work.
Read more about managing cookies on nettvett.no.
3.2. Contact with Norfund
3.2.1. Email and phone
Norfund uses both e-mail and telephone throughout our daily work and tasks. This applies to communication with both internal and external contacts. Relevant information that emerges from phone calls and e-mail exchanges in regard to case processing, is archived in our document archive system M-files.
Please note that regular e-mail is unencrypted. We therefore encourage you not to send confidential, special (sensitive) or other confidential information by e-mail. If we receive such an email, we process the email according to its contents and delete it immediately.
3.2.2. Case management and assessment of partnerships
Different types of personal data are registered in the archive and case management system, dependent on the case. The contact index stores names and e-mail addresses.
Relevant personal information that is connected to project assessments, due diligence, as well as correspondence of follow-up of investments, board work and other areas of concern (e.g. name, address, telephone number, email address, etc.) are archived in the respective case documents in accordance with applicable laws and confidentiality provisions in the agreements Norfund abides by.
The basis for this processing is Article 6, 1. B), C) and E) of the General Data Protection Regulation; necessary to implement measures at the data subject’s request prior to entering into an agreement, fulfilling a legal obligation, cf. Sections 6 and 7 of the Freedom of Information Regulations.
3.2.3. Notification
Norfund has entered into a data processing agreement with the law firm Wiersholm AS for an external whistleblowing channel. This acts as a whistleblowing service for receiving notification of suspicions of misconduct, harassment and other misconduct related to Norfund’s activities. Contact information and notification form can be found here: https://www.norfund.no/norfunds-whistleblowing-channel/
The personal data is archived in accordance with archival legislation, however it is deleted from other storage locations when the service needs are no longer present.
3.2.4. Surveys
Norfund uses the Questback tool for surveys. When we conduct surveys, we will always inform you about its purpose and whether it is anonymous. We will not share the information with anyone other than Questback Essentiels or use the information for purposes other than those specified.
- Anonymous surveys: If the survey is anonymous, Norfund or Questback Essentials will not collect any information that can be linked to you.
- Identifiable surveys: If the survey is not anonymous, Norfund can identify those who have answered the survey. We may also use Questback Essentials to send out the survey.
The basis for this processing is Article 6, 1. A) of the General Data Protection Regulation, in which you consent to our processing of information about you.
3.2.5 Job seekers and employment
If you apply for a job at Norfund, we need to process information about to review your application.
The basis for this processing is Article 6, 1. B) of the General Data Protection Regulation; processing is necessary to fulfil an agreement to which the data subject is a party, or to carry out measures at the data subject’s request prior to entering into an agreement. All data in the CV and recruitment database is stored and processed in accordance with the Personal Data Act and the EU General Data Protection Regulation/GDPR (EU 2016/679) in the country where recruitment takes place. Norfund is the data controller, Webcruiter AS is the data processor.
Emails sent from Webcruiter recruitment solution may contain interview invitations and other relevant information related to your application processes. If emails from Webcruiter are marked as spam, you may miss important information.
4.0. Storage period
Personal data is stored with us for as long as is necessary for the purposes for which the personal data was collected.