Last update: 17.08.2022.
1. Who is the controller?
2. How to exercise your rights?
If you have unresolved concerns or if you consider that our processing of your personal data infringes your rights you also have the right to complain to the supervisory authority competent to resolve such concerns according to the applicable law, but Glamox encourages you to contact us first in order to clear any misunderstandings.
Please use the contact details below:
3. What is the legal basis for our processing of personal data?
Our processing of personal data is relying on one or more of the legal bases listed below:
- Your consent as registered subject to the processing of personal data for one or more specific purposes. If we rely on your consent you may withdraw this at any time.
- The processing is necessary to establish and fulfil our obligations under an agreement that you as the registered subject is party to.
- The processing is necessary for fulfilling a legal obligation for which we are responsible, including establishing, exercising and defending legal claims.
- The processing is necessary for purposes related to the legitimate interests pursued by us or a third party unless your interests as a registered subject or fundamental rights and liberties take precedence and require protection of the personal data, especially if the registered subject is a child (balancing of interests).
- The processing is necessary to respond to your requests.
- The processing is necessary to protect the vital interests of any person.
- Any other legal basis permitted by local law.
4. What categories of personal data is collected?
Glamox may process different personal data for different business purposes and legitimate reasons depending upon you being e.g. a customer, supplier, business partner, job applicant and how you interact with us.
We collect your data when you visit our websites, applications or social media channels, purchase and use our products, services, web-based tools, mobile applications, systems, subscribe to our newsletters, webinars, provide to us your goods or services, contact our customer support, join our business events, participate to our contests, promotions and surveys or otherwise interact with us.
If you visit our premises we may also record your personal data through video or other electronic, digital or wireless surveillance systems or devices (e.g. CCTV).
The purpose for which we may process your data is for conclusion and execution of any agreements, e.g. sale, purchase, customer support, warranty follow up. Assessment and screening and rescreening of potential customers, suppliers and other business partners through due diligence, direct marketing through electronic marketing, security assets and interests through internal and external audits and investigations, assessments to verify conflict of interests etc., compliance with legal obligations and defence of legal claims.
5. How and why do we use personal data?
Registration and interaction on our website
When you register on our website using the various contact forms available personal data collected and stored are dependent upon the respective form used for the registration. By registering on our website, IP address, date, and time of the registration are also stored.
When you subscribe to our newsletters the form used for this purpose determines what personal data we collect. In addition to name, we collect other contact details such as phone number, email address, employer etc. Glamox regularly informs its customers and business partners by newsletter about news, product offers and other company information. Where consent is required under the Marketing Control Act, you will have consented prior to marketing e-mails being sent. The consent may be withdrawn at any time. If we have an existing customer relationship with you, we may also use your personal data to provide communication and direct market our products and services. In addition, subscribers to the newsletter may be informed by e-mail, as long as this is necessary for the operation of the newsletter service or a registration in question, as this could be the case in the event of modifications to the newsletter offer, or in the event of a change in technical circumstances. Subscription to our newsletter may be terminated by you at any time.
The legal basis for the processing of personal data in accordance with the above is either consent or our legitimate interest in processing the information due to our business needs as part of our operation, when providing information, support and service to you, and we believe these interests that the legitimate interest take precedence over your rights to data protection.
When you apply for a position within Glamox Group
Personal data is collected when you apply for a job in one of the Glamox companies. In the recruitment process we may use a recruitment system and job application portal operated by an external service provider on our behalf, for processing and handling your job application.
The Glamox and service provider may collect your general identification and contact information, gender, nationality, information about your education, competencies and skills, career and work history, job certificates, work permit, public roles, interests, references and other relevant background information. In addition, job applicants often provide additional personal data they consider relevant for the assessment of the application, such as contact information, family relationships and interests. In interviews we ask questions to determine whether job applicants are suited to the position. In some instances, we may use tests or questionnaires for this purpose. If a decision is made to engage a job applicant, we are then able to request further information as well as documentation of information we have already received. Providing Glamox with this type of information is voluntary.
The processing of personal data is based on the balancing of interests. We need to utilise the information as a means of evaluating applications job applicants have submitted to us. This is a legitimate interest. It is not possible to assess an application without processing personal data. Processing is therefore necessary.
We may file job applicant data for six months, in case job applicants believe that their rights have been breached.
When we interact with suppliers and customers
We keep in touch with our customers and suppliers to follow up on for example offers, orders and deliveries. This is a legitimate interest. Contact is effective only by direct communication with individuals. Processing is therefore necessary. Processing occurs in respect of the contact person's employer, who wishes to supply goods/services to Glamox. In addition to the name, we treat contact details, such as phone number, email address and employer, all of which are primarily related to the contact person's employment and not to the contact person's private life. The scope of data processed is kept to a strict minimum. Data that is processed is related to the customer’s or supplier's business activities.
Personal data we process is accountable to the contact person. Where consent is required pursuant to the Marketing Control Act, the contact person will have consented prior to our sending marketing e-mails. Processing of such personal data is based on the balancing of interests We believe that the legitimate interest takes precedence over the contact person’s interests.
When you interact with Glamox on social media platforms
When we are involved in transactions, due diligence and investigations
We may also process personal data in relation to transactions and due diligence processes. Processing of such personal data is based on the balancing of interests We believe that the legitimate interest takes precedence over the specific data subject interests. Glamox may also, when necessary, perform integrity due diligence investigations. In this respect information regarding potential business relations, their operations and business ethics are gathered and assessed. Personal data related to positions and roles, connections and relations to public authorities, political position, possible sanction listing, legal claims etc. will be collected. Processing of any personal data in this respect is based on our duty to comply with legal obligations and legitimate interests and also where applicable, defend or establish legal claims.
When you report a concern through our whistleblowing channel personal data may be processed.
When we protect our premises, equipment and personnel
In relation to various safety and security measures personal data is processed in order to safeguard and protect people, premises, systems, technology and equipment. Such safety measures include camera surveillance (CCTV), access control, IT and IP logs and identity checks. In this respect we may collect and process personal data such as name and other contact data, identity information, employment data and role, CCTV images, date and time logs etc. in order to ensure compliance with legal and contractual obligations and to secure and/or protect personnel and visitors at our locations and secure property, technology and equipment. In addition to providing support and safeguard in critical situations. The legal basis for such processing is our legitimate interest in safeguarding employees, premises and business operations and applicable legal and contractual requirements. Legal basis may also be your consent which you may withdraw at any time.
6. To who and when do we share this information?
We will never sell, give away or redistribute personal data to third parties, nor do we share personal data with others except for in circumstances where such sharing is necessary as part of our regular business operations and to provide our services and support to you as described herein. On this basis personal data may be disclosed in the following relations:
To other companies in the Glamox-group:
Personal data may be shared with other companies in the Glamox group on a need to know basis.
To service providers:
Personal data may be shared when we outsource certain data processing activities to trusted third-party service providers for delivering services on our behalf in accordance with instructions set out in a data processing agreement with the relevant service provider. Third-party service providers are for example used for administration services, security services, consultancy purposes, recruitment services, financial services, facility management services, parking services, IT services, communication services and integrity due diligence services. In such instances we may share your personal data with such parties to the extent necessary to perform such services.
Personal data may be shared with professional advisors, such as banks, insurance companies, auditors, lawyers, accountants and other professional advisors.
In relation to transactions like acquisition, sales, merger/demergers:
Personal data may be shared in connection with corporate transactions when we buy or sell a business or assets or part of a business or assets or in relation to any reorganization, merger/demerger, joint venture, or other disposition of our business, assets, or stock.
When required by law, regulation, legal process or an enforceable governmental request, we may share your personal data for legal reasons within the Glamox Group or to public authorities or governments but only to the extent we are required to do so.
7. Transfer of personal data
8. Retention and deletion of personal data
Personal data will be retained as long as necessary to fulfil the purposes for which it has been collected or as long as required by applicable law. If you have a contractual relationship with us, any personal data relating to you will be retained as long as necessary to enable us to fulfil our obligations relating to that contractual relationship. If you consent to certain processing, we store your personal data until you withdraw your consent or once the personal data is no longer necessary for achieving the purpose of the processing.
If the storage purpose is not applicable, or if a storage period prescribed by applicable laws expires, the personal data are routinely blocked or erased in accordance with legal requirements.
9. Your rights as a data subject
As a data subject, applicable data protection laws and regulations afford you several rights and freedoms. If you would like to exercise such rights please contact us at email@example.com
Within the limitation as set out in applicable laws and regulations you are granted the following privacy rights in relation to information collected about you through the use of our website and its online functionalities:
- You have the right to obtain further information on our use of your personal data.
- You have the right to request access to copies of the personal data processed about you, but not that exceptions will apply if access infringes the rights of others or pertains to business secrets.
- You have the right to demand rectification of incorrect personal data and we advise you to inform us of any changes or discrepancies in order for us to keep the information accurate.
- You have the right to request an electronic copy of the personal data provided by you for transfer to you or to a third party designated by you (the right to data portability).
- You have the right to request deletion (the right to be forgotten) if you are of the opinion that we are storing data that should have been deleted within the limitations following from legal obligations to obtain such data until the statutory retention period has expired.
- You have the right to object to the processing, including processing for marketing purposes, where you always can opt-out of direct marketing from us by unsubscribing to the newsletters or other marketing e-mails that you receive from us.
- You have the right to request that we restrict the processing of your personal data if you want us to delete the data or the processing in your view does not have a legal basis.
- You have the right to withdraw your consent at any time.
- Automated decisions and profiling are not used by us related to your relationship with us.
- You have the right to complain to the Norwegian Data Protection Authority, but we encourage you to first address your concern to us, before filing such a complaint.
10. Security of processing
All personal data will be processed securely and we have implemented appropriate technical and organizational measures to ensure the availability, integrity and confidentiality of your personal data processed through our website in order to protect your personal data against accidental or unlawful destruction, loss, alteration or unauthorised disclosure or access. Processing of personal data is strictly limited to personnel of Glamox, its controlled business units and affiliates or third-party data processors subject to data processor agreements ensuring appropriate measures to protect the confidentiality of your personal data. However, web-based data transmissions may in principle have security gaps, so absolute protection cannot be guaranteed.
There are two types of cookies, persistent cookies that remain on a user’s device for the period of time specified in the specific cookie and temporary session cookies which are deleted when you close the browser. Cookies are further categorised as strictly necessary cookies, functional cookies, statistical cookies and marketing cookies.
For more information about which cookies we use, please follow your browser instruction for a live cookie overview per web page.
Glamox uses Google as a service provider for various cookies as further described below. The operator of the Google cookies and components is Google Inc., 1600 Amphitheatre Pkwy, Mountain View, CA 94043-1351, United States. Further information and the applicable data protection provisions of Google may be retrieved under https://www.google.com/intl/en/policies/privacy/ .
Newsletters from Glamox contain so-called tracking pixels. A tracking pixel is a miniature graphic embedded in e-mails, which are sent in HTML format to enable log file recording and analysis. This allows a statistical analysis of the success or failure of online marketing campaigns. Based on the embedded tracking pixel, we may see if and when an e-mail was opened by a data subject, and which links in the e-mail were called up by data subjects. Personal data collected in the tracking pixels contained in the newsletters are stored and analysed in order to optimize the issuance of newsletters and adapt the content of future newsletters to the interests of the data subject. These personal data will not be passed on to third parties. You always have the right to opt out of our marketing communications. To opt out of marketing emails, simply use the functionality provided at the bottom of any email received from us. Glamox automatically regards an opt-out from marketing communications as a withdrawal of consent to receive further marketing. Personal data will be deleted by Glamox when you opt out of marketing communications.
Glamox has integrated Google Analytics with the anonymizer function on our websites. Google Analytics is a web analytics service. Web analytics is the collection, gathering, and analysis of data about the behaviour of visitors to websites. A web analysis service collects, inter alia, data about the website, from which a person has come (the so-called referrer), which sub-pages were visited, or how often and for what duration a sub-page was viewed. Web analytics are mainly used for the optimization of a website and in order to carry out a cost-benefit analysis of internet advertising.
Through Google Analytics the Glamox website uses the application "_gat. _anonymizeIp". By means of this application, the IP address of the data subject is abridged by Google and anonymised when accessing our websites from a Member State of the European Union or another Contracting State to the Agreement on the European Economic Area. The purpose of the Google Analytics component is to analyse the traffic on our website. Google uses the collected data and information, inter alia, to evaluate the use of our website and to provide online reports, which show the activities on our websites, and to provide other services concerning the use of our Internet site for us. The cookie is used to store personal information, such as the access time, the location from which the access was made, and the frequency of visits of our website by the data subject. With each visit to our Internet site, such personal data, including the IP address of the Internet access used by the data subject, will be transmitted to Google in the United States of America. These personal data are stored by Google in the United States of America. Google may pass these personal data collected through the technical procedure to third parties.
For more information please see http://www.google.com/analytics/terms/us.html . Google Analytics is further explained under the following Link https://www.google.com/analytics/
Glamox has integrated Google Remarketing services on our websites. Google Remarketing is a feature of Google AdWords, which allows us to display relevant advertising content when you browse outside of our website. Google Remarketing allows us to display ads on the Google network or on other websites, which are based on individual needs and matched to the interests of the website users.
Google Remarketing sets a cookie on the information technology system of the data subject. Google enables a recognition of the visitor of our website if he calls up consecutive web pages, which are also a member of the Google advertising network. With each call-up to an Internet site on which the service has been integrated by Google Remarketing, the web browser of the data subject identifies automatically with Google. During this technical procedure, Google receives personal information, such as the IP address or the surfing behaviour of the user, which Google uses, inter alia, for the insertion of interest relevant advertising.
The cookie is used to store personal information, e.g. the Internet pages visited by the data subject. Each time we visit our Internet pages, personal data, including the IP address of the Internet access used by the data subject, is transmitted to Google in the United States of America. These personal data are stored by Google in the United States of America. Google may pass these personal data collected through the technical procedure to third parties.
Glamox has integrated Google AdWords on our websites. Google AdWords is a service for Internet advertising that allows the advertiser to place ads in Google search engine results and the Google advertising network. Google AdWords allows an advertiser to pre-define specific keywords with the help of which an ad on Google's search results is displayed. The ad is only displayed when the user utilizes the search engine to retrieve a keyword-relevant search result. In the Google Advertising Network, the ads are distributed on relevant web pages using an automatic algorithm, considering the previously defined keywords.
The purpose of Google AdWords is the promotion of our website by the inclusion of relevant advertising on the websites of third parties and in the search engine results of the search engine Google and an insertion of third-party advertising on our website.
The data and information collected through the use of the conversion cookie is used by Google to create visit statistics for our website. These visit statistics are used in order to determine the total number of users who have been served through AdWords ads to ascertain the success or failure of each AdWords ad and to optimize our AdWords ads in the future. Neither our company nor other Google AdWords advertisers receive information from Google that could identify the data subject.
The conversion cookie stores personal information, e.g. the Internet pages visited by the data subject. Each time we visit our Internet pages, personal data, including the IP address of the Internet access used by the data subject, is transmitted to Google in the United States of America. These personal data are stored by Google in the United States of America. Google may pass these personal data collected through the technical procedure to third parties. The data subject has a possibility of objecting to the interest-based advertisement of Google. Therefore, the data subject must access from each of the browsers in use the link www.google.de/settings/ads and set the desired settings.
Glamox has integrated components of Vimeo on our websites. .
The operating company of Vimeo is Vimeo, Inc. 555 West 18th Street, New York, New York 10011
Vimeo will receive information through the Vimeo component that the data subject has visited our website, if the data subject at the time of the call to our website is logged in on Vimeo; this occurs regardless of whether the person clicks on a Vimeo video or not. If such a transmission of this information to Vimeo is not desirable for the data subject, the delivery may be prevented if the data subject logs off from their own Vimeo account before a call-up to our website is made. Vimeo's data protection provisions, available at https://vimeo.com/privacy, provide information about the collection, processing and use of personal data by Vimeo.
Glamox has integrated components of the enterprise Facebook on our websites.
The operating company of Facebook is Facebook, Inc., 1 Hacker Way, Menlo Park, CA 94025, United States. If a person lives outside of the United States or Canada, the controller is Facebook Ireland Ltd., 4 Grand Canal Square, Grand Canal Harbour, Dublin 2, Ireland.
The data protection guideline published by Facebook, which is available at https://facebook.com/about/privacy/ , provides information about the collection, processing and use of personal data by Facebook. In addition, it is explained there what setting options Facebook offers to protect the privacy of the data subject. In addition, different configuration options are made available to allow the elimination of data transmission to Facebook, e.g. the Facebook blocker of the provider Webgraph, which may be obtained under http://webgraph.com/resources/facebookblocker/ . These applications may be used by the data subject to eliminate a data transmission to Facebook.
Glamox has integrated components of the LinkedIn Corporation on our websites.
With each call-up to one of the individual pages of this Internet site, which is operated by the controller and on which a LinkedIn component (LinkedIn plug-in) was integrated, the Internet browser on the information technology system of the data subject is automatically prompted to the download of a display of the corresponding LinkedIn component of LinkedIn. Further information about the LinkedIn plug-in may be accessed under https://developer.linkedin.com/plugins. During the course of this technical procedure, LinkedIn gains knowledge of what specific sub-page of our website was visited by the data subject.
Glamox has integrated components of Twitter on our websites.
The operating company of Twitter is Twitter, Inc., 1355 Market Street, Suite 900, San Francisco, CA 94103, UNITED STATES.
With each call-up to one of the individual pages of this Internet site, which is operated by the controller and on which a Twitter component (Twitter button) was integrated, the Internet browser on the information technology system of the data subject is automatically prompted to download a display of the corresponding Twitter component of Twitter. Further information about the Twitter buttons is available under https://about.twitter.com/de/resources/buttons. During the course of this technical procedure, Twitter gains knowledge of what specific sub-page of our website was visited by the data subject. The purpose of the integration of the Twitter component is a retransmission of the contents of this website to allow our users to introduce this web page to the digital world and increase our visitor numbers. The applicable data protection provisions of Twitter may be accessed under https://twitter.com/privacy?lang=en
Glamox has integrated components of YouTube on our websites.
The operating company of YouTube is YouTube, LLC, 901 Cherry Ave., San Bruno, CA 94066, UNITED STATES. YouTube, LLC is a subsidiary of Google Inc., 1600 Amphitheatre Pkwy, Mountain View, CA 94043-1351, UNITED STATES.
YouTube and Google will receive information through the YouTube component that the data subject has visited our website, if the data subject at the time of the call to our website is logged in on YouTube; this occurs regardless of whether the person clicks on a YouTube video or not. If such a transmission of this information to YouTube and Google is not desirable for the data subject, the delivery may be prevented if the data subject logs off from their own YouTube account before a call-up to our website is made.
YouTube's data protection provisions, available at https://www.google.com/intl/en/policies/privacy/, provide information about the collection, processing and use of personal data by YouTube and Google.