Privacy policy
This statement covers data registered by Forum for Visningsanlegg i Havbruk, hereafter FVIH, which is part of Sjømat Norge. The processing of joint data for NHO and FVIH is also described in a separate statement available at http://nho.no.
Below, FVIH informs about how we will process personal data in accordance with the Personal Data Act. Sjømat Norge is the data controller unless otherwise stated.
In the information you will find the groups of people we can process personal data about. Note that you may be covered by several groups. We may process personal data that is not covered by the information below, in which case we will inform you about the processing in another way.
Our processing of personal data is based on the needs of our business. The starting point for our activities is our statutory purpose, which is to
To safeguard and promote the common interests of our members in relation to the authorities, national and international institutions, organisations and society in general,
work to ensure that our members are given framework conditions and development opportunities that strengthen their competitiveness and profitability, and provide good and secure jobs, ensure active profiling of the industry, strengthen the industry’s expertise development, work for good and stable relations between member companies, employees and their organisations, safeguard members’ interests within FVIH.
Contact information about us and the data processors we have agreements with can be found below. In the section ‘Rights of data subjects’, we provide information about the rights of those about whom we hold personal data. Consents you have given us will also apply to FVIH’s possible legal successors.
Groups of people we may hold personal data about
- Contact persons in member companies We process information about contact persons in member companies in order to:
- inform member companies about our activities and relevant news,
- administer membership of FVIH, including convening meetings of our bodies
- invoicing membership fees
- providing services to member companies
- documenting contact between member companies and us.
- formulate our views on political and other issues
- provide information about events and courses we organise
- inform employees in our member companies about the membership benefits we and our partners offer member companies
- By contact persons in member companies we mean employees and other representatives.
- The processing of data is based on our legitimate interest, which consists of administering membership and pursuing our purposes as an interest and employer organisation. We store and disclose information if we have a legal obligation to do so, for example under the Bookkeeping Act and the Tax Administration Act.
- It is voluntary for contact persons to provide us with personal data, but the CEO must provide us with contact information. If we collect personal data from others, this will mainly concern name, contact details, position, function and employer. The source of such information will be the contact person’s employer, for example the employer’s website. We may obtain information from public registers (the Register of Business Enterprises) about who are board members and general managers in member companies.
- When marketing member benefits or invitations to events where we make a profit, mass emails are only sent to those persons who have consented to receive this information.
- We will discontinue mailings to recipients who request it. We reserve the right to store the information that the recipient no longer wishes to receive mailings.
- We do not disclose contact information to third parties for marketing purposes without first obtaining the consent of the data subject. Such third parties will typically be providers of membership benefits. They will be data controllers for the data we provide to them.
- We will delete the data if we realise that the contact person ceases to be a contact person or we no longer need contact with the company. However, we will retain the information for a longer period of time if we believe it may be needed, for example, to document our business or the contact we have had.
- We sometimes use a third party to contact member companies. The third party will be the data processor, see contact information below.
- We process personal data about those who contact FVIH in order to answer and document the communication. This applies to all forms of communication, physical and digital, written and oral.
- The processing of data is based on our legitimate interest, which is to maintain contact with the outside world in our activities as an interest and employer organisation and to document our activities.
- It is voluntary to provide us with personal data. If we do not receive the information we need to respond to enquiries, we will not be able to respond to the enquiries and we may delete the enquiries. We will not receive, or otherwise process, sensitive information from anyone unless we have a legal basis for doing so.
- We may store personal data for as long as it is necessary for the purposes mentioned above. Communications with content that may lead to the need for subsequent follow-up, complaints or objections may be stored for up to ten years.
- Contact persons at existing and potential suppliers, and potential member companies
- We process personal data about the above-mentioned contact persons in order to:
- manage our relationships with suppliers / potential members
- market our goods and services (including membership of FVIH)
- prepare, execute and document purchases and sales of goods and services
- evaluate purchases and sales of goods and services
- The processing of personal data is based on our legitimate interest, which consists of the need for purchasing, sales and marketing. We also store and disclose information where we have a legal obligation to do so, for example under the Bookkeeping Act and the Tax Administration Act. We may store information for as long as we believe it may be needed, for example to document circumstances surrounding purchases and sales.
- In many cases, it will be necessary for us to obtain personal data in order to enter into agreements with potential members and suppliers, for example to document that an agreement has been entered into. If we do not receive the information we need, we will not enter into an agreement.
- Otherwise, it is voluntary for the contact persons to provide us with personal data. If we collect personal data from others, it will mainly concern contact information, position, function and employer, as well as any expertise and references where relevant. The source of such information will be the contact person’s employer, for example from the employer’s website. In some cases, we obtain references from others to assess the suitability of suppliers.
- We may store the data until the company ceases to be a member/supplier or until the contact person ceases to be a contact person, with the exceptions mentioned above.
- If we run a business, we must only send marketing by e-mail to natural persons who have given their prior consent, cf. the Marketing Control Act, see also the section on ‘Addressees for mass mailings…’.
- Contact persons in society
- We process personal data about people in companies, academia, public administration, the media, politics, other organisations and society in general in order to provide information about and to obtain and map views on and assessments of issues and matters concerning the business community.
- The processing of the data is based on our legitimate interest, which is to pursue our purposes as an interest and employer organisation.
- It is voluntary for the contact persons to provide us with personal data. We may collect personal data from other sources. Examples of such sources include the media, websites and public bodies. The information may include information that is relevant to the purposes mentioned above, including statements from the individuals themselves.
- If we process sensitive personal data (‘special categories’), including ‘political opinions’ and ‘philosophical beliefs’ (see Article 9(1) of the General Data Protection Regulation), we must ensure that the conditions for doing so are met, for example by the consent of the individual or where the individual has made the information public.
- We may store the data until we realise that we no longer have a purpose for storing the data.
- Non-members who are recipients of mass mailings of newsletters, marketing etc.
- We process personal data for mass mailings of newsletters etc. relating to our business.
- The processing of the data is based on our legitimate interest, which is to
- Working to strengthen the competitive conditions and profitability of the business community, including by informing the outside world about relevant and current issues and matters providing information about events and courses we organise
- It is voluntary to provide us with e-mail addresses. If we do not receive your e-mail address, we will not be able to send newsletters etc.
- We will terminate mailings to recipients who request it. We reserve the right to store the information that the recipient no longer wishes to receive mailings. We will delete the e-mail address if we are notified that it is no longer active.
- If we run a business, we shall only send marketing by e-mail to natural persons who have given their prior consent, cf. the Marketing Control Act.
- We do not disclose contact information to third parties for marketing purposes.
- Speakers and participants in courses, events, meetings, etc.
- We process personal data about presenters, trainers, speakers, lecturers, etc. and registered participants in courses (including e-learning), events, meetings, etc. in order to plan, provide information about and facilitate courses, events, meetings, etc.
- facilitate contact between participants and to contact participants when necessary
- invoice if there is a participant fee
- evaluate courses, events, meetings, etc.
- inform about future courses, events, meetings, etc.
- The processing of data is based on our legitimate interest in organising courses, events, meetings, etc.
- It is a condition of being a speaker, etc. or participant that we receive the information we need to fulfil the above purposes. If you provide us with sensitive information about matters that are necessary for us to be able to meet any needs you may have (such as food), our processing will be based on your consent.
- We may deliver lists with the names of participants and the companies they represent to speakers, etc. At some events, we distribute lists to attendees with the names of attendees and the company they represent, so that attendees can easily get in touch with each other at the event. You can opt out of being included on the list.
- We may provide lists with the names of participants and the companies they represent to technical organisers and other third parties when needed.
- We may store information about speakers etc. and participants etc. for up to six months. Beyond this, we store and disclose information if we have a legal obligation to do so, for example under the Bookkeeping Act and the Tax Administration Act.
- We do not process personal data about people who visit our website.
- You can read here about our use of cookies (storage of information in the user’s communication equipment or our access to information, cf. section 2-7 b of the Norwegian Electronic Communications Act).
- Disclosure of personal data. Joint processing responsibility.
- We disclose personal data as described for the different groups of persons. We also disclose personal data when we are legally obliged to do so.
- We do not disclose personal data to recipients outside EEA countries.
- The information we have about contact persons in member companies may also be used by NHO. We have joint processing responsibility with them for this information.
- We use data processors as described for the different categories of persons. Contact information for data processors can be found at the very bottom.
- We have joint processing responsibility with co-organisers when we hold courses, events, meetings etc. together with others.
- No automated decisions are made on the basis of personal data.
- Rights of the data subjects
- The persons about whom we hold personal data have the right to receive confirmation of this from us. They also have the right to request access to this data. If we hold inaccurate personal data, the data subject can request that it be corrected.
- In some cases, data subjects can demand that we delete information about them. Data subjects have this right, for example, when the processing is based on consent that the data subject withdraws. In some cases, data subjects may request that we restrict or stop processing personal data about them.
- Data subjects may have the right to receive personal data he/she has provided to us to the extent that our processing is based on consent.
- If you want to know more about your rights as a data subject, we recommend that you read the Norwegian Data Protection Authority’s website. You can complain to the Norwegian Data Protection Authority if you are dissatisfied with our processing of personal data.
- Our ability to store personal data does not constitute a storage obligation to the data subjects, beyond what follows from legislation.
- Data controllers, data processors and contact information
- The data controller is Seafood Norway (organisation number 974 461 021). Our office address is Middelthuns gate 27, Oslo. Our postal address is PO Box 5471 Majorstuen, 0305 Oslo, Norway. You can also contact us by e-mail firmapost@sjomatnorge.no or telephone 99 11 00 00.
- NHO Eiendom AS (organisation number 989 524 046) is the data controller for information about visitors to Næringslivets Hus. NHO Eiendom AS is also the data processor for Sjømat Norge. The office address is Middelthuns gate 27, Oslo. The postal address is P.O. Box 5250 Majorstuen, 0303 Oslo. You can also contact us by e-mail postmottak@NHO.no or telephone 2308 8000.
- The data controller for Arbinn is NHO.
- Sjømat Norges og NHO Eiendom AS’ data processor for information about persons who have access to Næringslivets Hus is Eurest AS (organisation number 952 507 729). Their address is PO Box 74, 1371 Asker, Norway. They can be contacted at post@compass-group.no or telephone 6677 6280.
- NHO’s data processor for telephone contact with member companies is Consort AS (organisation number 994 887 203). Their address is Kjøpmannsgata 25, 7013 Trondheim. They can be contacted at post@consort.no or by e-mail post@consort.no.
- Sjømat Norge has joint processing responsibility with NHO.
- Sjømat Norge’s data processor for information about elected representatives and employees in the board portal is AdminControl (organisation number 987 992 883). Their address is Lille grensen 7, 0159 Oslo. They can be contacted at info@admincontrol.no or by phone 22 83 61 00.
- Changes to the information
- We will constantly work to develop our principles and practices for the processing of personal data, including the deletion of personal data. In the event of changes, we will amend the above information accordingly.
- The information above is dated 20 November 2018.