Controller

Hafslund is the data controller for the processing of personal data unless other is stated.

Hafslund AS

Organization number: 920 596 509

Harbitzalléen 5

0275 OSLO

PO Box 990 Skøyen, 0247 Oslo, Norway

If you have any questions about this privacy policy, you can contact us by e-mail post[@]hafslundeco.no

When we process personal data about you

Below is a list of different processing activities and what data we may process for each activity:

Hafslund.no – Web analytics and cookies

As an important part of the work to create a user-friendly website, we look at the user pattern of those who visit the site. To analyse the information, we use the analysis tool Plausible.

We use the analysis tool Plausible to find out how visitors use our website so that we can optimize the user experience. Plausible does not use cookies, and they do not track, collect or store any personal data. Plausible does not store or extract any data from visitors' devices.

All the data tracked and collected is kept fully secured, encrypted and stored on renewable energy-powered servers in the EU.

Camera surveillance

Hafslund uses camera surveillance at power stations and power plants. We do this to secure facilities, systems or anything else that is or may become of significant importance for the operation and restoration of extraordinary situations against undesirable incidents and actions (including access for unauthorized persons). This means that in some cases, camera surveillance can capture civilians who are out in forests, fields and mountains near our power stations. We carry out camera surveillance on the basis of processing in Article 6 no. 1. (c) of the General Data Protection Regulation, pursuant to § 5-1 of the Norwegian regulation on security and emergency preparedness in the power supply system.

We carry out camera surveillance in accordance with regulations over camera surveillance in business, which means that we normally only store recordings for 7 days. Exceptionally, we store for 30 days if needed.

Landowners

Hafslund processes personal data about many landowners. Information processed is mainly name, address, telephone, farm and use number, owner, account information, and social security number. Social security numbers are used for registration when Hafslund is to carry out one-off redemptions.

The processing is carried out in accordance with landowner agreements we have with the individual landowners with a basis for processing in Article 6 (1) (b) of the General Data Protection Regulation.

Communication – Use of social media

Hafslund uses Facebook and LinkedIn as platforms for two-way communication with our followers. We do this to get in touch with people and spread the word about Hafslund, in addition to making the business attractive to potential new applicants.

Information used on the Platforms is not used for any purpose other than communicating with followers and providing information about our products and services. We do this on the basis of a legitimate interest as a basis for processing in Article 6 (1) (f) of the General Data Protection Regulation.

Hafslund Rådgivning (Counselling), Battly and Solway

Hafslund Counselling offers advice on electrification and energy consultancy to businesses related to the roll-out of electrical infrastructure and renewable energy technologies. There are projects for charging infrastructures of the transport sector, construction, renewable energy such as solar, wind and batteries. The processing of personal data is primarily related to companies such as our customers where Hafslund processes a lot of contact information, both at large national players, smaller start-up companies in both the private and public sectors, housing cooperatives and condominiums.

Hafslund deletes personal data for these purposes when customers ask us to update their contact information, or at the end of a customer relationship.

Hafslund consultancy has several websites that describe our products in more detail, whether it is the advisory service, battery or solar energy:

For hafslundragivning.no, this applies personvernerklæringen.

For battly.no, this applies personvernerklæringen

For solway.no, this applies personvernerklæringen

Hafslund Manor

Hafslund Manor & Conference center offers courses & conferences, accommodation and restaurant experiences for businesses. In this connection Hafslund AS, the Hafslund Manor department, processes personal data relating to these products.

For Hafslund Manor, this applies personvernerklæringen describing how Hafslund processes personal data relating to the manor.

Hiring processes

If you apply for a job at Hafslund, we need to process information about you in order to assess your application. The hiring process involves processing the information you provide to us through the documents you send us, including your application, CV, diplomas and certificates. In addition to any interviews, Hafslund will also conduct its own surveys, typically conversations with the jobseeker's references. Hafslund uses the Webcruiter job search portal to administer submitted applications. In order to assess submitted documentation, conduct interviews and call references, we use consent as a basis for processing in Article 6 (1) (a) of the General Data Protection Regulation.

If you are offered employment and enter into a contract, Hafslund will carry out background checks and credit checks on all of them. We do this in accordance with § 6-7 of the Norwegian regulation on security and emergency preparedness in the power supply system, where the basis for processing is Article 6 (1) (c) of the General Data Protection Regulation.

Job applications are stored in Webcruiter's system. Applications are deleted within 1 year.

If you are employed by Hafslund, you will find a separate privacy statement for employees on the intranet.

What are my rights?

You have the following rights in connection with oure-processing of your personal data:

  • Access: You can contact us if you want to get full access to what kind of personal data we have registered about you.
  • Correction: If the personal data we hold about you is incorrect, you can contact Hafslund at any time and demand that we correct it. Correction may be relevant where for various reasons incorrect information has been registered with us about you.
  • Deletion: You can ask us to delete your personal data at any time, which we will respect and follow unless we are otherwise required to keep your personal data, or have another processing basis for retaining it. As an example, we may be required and/or have a legitimate interest in storing personal data for reasons of Hafslund's interest or due to statutory provisions such as the Accounting Act. If you want any information deleted, and we are not able to do this, you will receive a justification.
  • Restriction of processing: In accordance with data protection legislation, you may also require that our processing of your personal data be restricted, if the conditions for this under data protection legislation are met. If processing is restricted, your personal data will only be stored. However, this does not apply if, despite restriction, you have consented to another form of processing, or such further processing may take place on a different basis for processing (for example, to pursue a legal claim).
  • Right to object: If the conditions under data protection law are met, you can also object to certain processing activities we undertake. If you lodge such an objection, we will no longer process this personal data unless we can demonstrate that there are compelling legitimate grounds for further processing.

If you wish to exercise one of your rights, please contact Hafslund. For a complete overview of your rights, please see GDPR chapter 3.

Complaint to the Norwegian Data Protection Authority

If you are dissatisfied with our processing of your personal data, you can submit a complaint to the Data Inspectorate. The contact information of the Data Inspectorate can be found on their website http://www.datatilsynet.no On the website you will also find further information about our obligations and your rights under the GDPR.