This data protection statement describes Bouvet’s collection and use of personal data.
Bouvet, represented by its Chief Executive Officer, is the data controller in connection with its processing of personal data. Where day-to-day responsibility has been delegated, this is stated for each individual point. Any delegation applies only to tasks, not overall responsibility. This statement contains information to which you are entitled when information is collected from our website (section 19 of the Personal Data Act), as well as general information about our processing of personal data (section 18, first paragraph, of the Personal Data Act).
Unless stated otherwise below, the web editor has day-to-day responsibility for Bouvet’s processing of personal data on bouvet.no. It is voluntary for visitors to the website to provide personal data in connection with offered services, such as receiving newsletters. Unless otherwise specified, the basis for processing is the consent of the individual.
Bouvet itself acts as the data processor, and is responsible for developing and maintaining the website. Enonic is the operating supplier for bouvet.no.
Information collected in connection with the operation of bouvet.no is stored on dedicated servers operated by the supplier. Only Bouvet and Enonic have access to collected data. A separate data processing agreement between Bouvet and Enonic regulates what information the supplier has access to and how this information is to be processed.
Bouvet collects de-identified information about visitors to bouvet.no. The purpose of this is to compile statistics which are used to improve and refine the information offered on the website. Examples of information provided by such statistics include how many people visit different pages, how long each visit lasts, which websites users come from and which browsers they use.
Data are processed in de-identified and aggregated form. “De-identified” means that Bouvet cannot trace collected information back to an individual user. We collect the entire IP address, but the IP address is de-identified so that only the first three groups in the address are used to generate statistics. In other words, if the IP address consists of the numbers 195.159.103.82, only 195.159.103.xx is used. In addition, IP addresses are processed at an aggregated level, i.e. all data are grouped together and not processed individually.
We use the analysis tool Matomo on our website. Bouvet does not disclose information from this tool to other organisations.
When you visit bouvet.no, we register some information about your visit by means of a “cookie”. A cookie is a small file stored in the browser you use on your device.
Cookies are not harmful, and do not contain viruses or any other programmes. Their purpose and function is to store information from bouvet.no, for example when you last visited us or data you have entered in a registration form.
Bouvet will never, under any circumstances, share or sell information collected on bouvet.no. Moreover, such information cannot identify you personally, and is only used to analyse user behaviour for website-improvement purposes.
We use the analysis tool Matomo to analyse user behaviour on bouvet.no. This tool collects information such as which pages are most read and what visitors search for on bouvet.no. This information cannot be traced back to you. We use the information to improve and refine our website.
We use Facebook Pixel and LinkedIn Pixel on bouvet.no. These are cookies which allow Facebook and LinkedIn to receive information about your visit to bouvet.no. They use this information to customise adverts shown to you on Facebook and LinkedIn, as well as on content networks. According to Facebook and LinkedIn’s data protection policies, no information is collected or used which can be used to identify you personally. Bouvet uses the information to improve and refine bouvet.no, to provide you with relevant and customised marketing, and to analyse the impact of marketing. You can opt out of targeted Facebook adverts here: Facebook cookies – Facebook Ad Preferences. You can opt out of targeted LinkedIn ads here: Manage Your LinkedIn Ads Settings
Use of the Facebook Pixel cookie allows third-party providers, including Google, to display targeted adverts on various websites linked to their own content network. These adverts are based on interests and previous website usage. Such targeting helps make marketing you are exposed more relevant to you as a user. According to Google’s data protection policy, Google does not collect or use information which can be used to identify you personally. You can opt out of targeted Google ads here: Google Ads Settings
Unless you have set your browser to reject cookies, these will be created automatically. You are free to decide whether you want to permit storage of cookies. Please note, however, that rejecting cookies may affect website functionality.
Our purpose in using cookies is to personalise our content and adverts, and to help us analyse our user traffic. The cookies we use cannot in any way spread harmful programmes or damage your computer.
Bouvet sends out email newsletters approximately six to eight times per year. Before we can send you emails, you have to register an email address. Bouvet uses an external data processor to send out newsletters. Your email address is stored in a separate database, is not shared with others and is deleted when you cancel your subscription. Your email address is also deleted if we are notified that it is inactive. You can specify whether you represent a business or a private individual. We ask about this to make sure that we only send out relevant information.
We also comply with section 15 of the Marketing Control Act and communicate by email about services we have previously provided.
Bouvet’s director of communications has day-to-day responsibility for Bouvet’s surveys. Bouvet uses Markedsføringshuset to conduct surveys. Markedsføringshuset is the data controller in connection with such surveys. We always provide information about the purpose of any survey and state whether it is anonymous or not. Bouvet does not share survey responses with others or use such information for purposes other than those specified.
If a survey is anonymous, Bouvet or Markedsføringshuset will not collect any information that can be linked to you.
If a survey is not anonymous, Bouvet may identify persons who complete the survey. We may also use Markedsføringshuset to send out such surveys.
Bouvet uses emails and telephone calls in its daily work.
Bouvet’s employees also use emails in their general dialogue with internal and external contacts. Individual staff members are responsible for deleting messages which are no longer relevant, and for reviewing and deleting unnecessary content in their email accounts at least once a year. When a staff member leaves Bouvet, his/her email accounts are deleted after six months, although individual relevant emails are normally transferred to colleagues.
Please note that regular emails are unencrypted. Therefore, we urge people not to send us confidential, secret or otherwise sensitive information by email.
Telephone calls (calling and called telephone numbers and the call time/date) are logged by our call centre. This log is necessary for the administration and operation of the system, and is used to generate statistics at an aggregate level. After a period of time, external telephone numbers are anonymised by deleting the final four digits of the number. The complete log is deleted after one year. In addition, employees have an overview of the most recent calls on their phones. There is no other systematic registration of telephone calls which allows a caller to be identified.
Bouvet has many clients in various sectors, and many assignments involve some form of personal data processing. Bouvet therefore always assesses how personal data should be handled in such assignments, in relation to both assignment execution and contractual arrangements. In consultation with the client, Bouvet adapts its contractual framework and execution to applicable requirements concerning the processing of personal data. In smaller assignments where Bouvet conducts user testing or interviews, makes film recordings or engages in other simple data collection, such information is stored for a maximum of six months after completion of the assignment.
When you enrol in a Bouvet course, information is stored for use in course administration and to enable course fees to be collected.
Bouvet’s responsibility: Bouvet is the data controller when personal data are processed for the purpose of booking meeting facilities and registering and administering course participants.
Bouvet uses a proprietary enrolment solution. The solution allows participants to register for courses by providing their name, contact information and employer. We also request information about any allergies and any need for accommodation. Personal data used to administer enrolment are deleted six months after the course is held. Information about courses and examinations is retained to allow course confirmations and certificates to be produced if requested by participants.
Bouvet is responsible for processing personal data in connection with financial management and payments to and from course participants and meeting facilities, as well as accounting and bookkeeping, including storage in accordance with applicable bookkeeping regulations.
The following applies to you as a visitor to Bouvet's and/or Olavstoppen's premises:
Personal data processing. We collect and process the following data:
Why do we process your personal data?
We process your personal data due to security reasons. The basis of our personal data processing is a legitimate interest in the security of our office premises.
Our internal visitor log is archived for a period of 90 days (PCI-DSS [9.4.4]) after which your data will be securely erased.
The visitor log is stored securely and is only audited in case of any unforeseen activities, accidents or in the case of an evacuation.
By pressing "I agree" to finish your visitor registration, you agree to these policies regarding security and privacy.
Enquiries regarding personal data held by Bouvet can be addressed to: [email protected].
Bouvet processes its employees’ personal data in connection with administering pay and personnel management. The legal basis for such processing can be found in section 8, first paragraph, section 8 a), b) or f) and section 9 a), b) and f) of the Personal Data Act. Bouvet’s regional director and administration have day-to-day responsibility for this. Information necessary for the payment of salaries is registered, such as basic data, salary level, time registration, tax percentage, tax municipality and trade union affiliation. Other information about employees relates to their work instructions and the organisation of their work.
Information is also registered in connection with the administration of access and entry and exit records in the IT system. Such information is obtained from the employees themselves. The data are only disclosed in connection with salary payments and other statutory disclosures. Deletion routines for employee data follow the Accounting Act.
All job applications are registered in Bouvet’s recruitment system. The applications are stored in an electronic archive for approximately one year before being deleted. All other documents, including applicant lists and recommendations, are retained in accordance with section 16(e) of the Personal Data Act (internal case preparations are not disclosed to others). The recruitment manager is responsible for this.
All former and current Bouvet employees have a personnel file in Bouvet’s HR system. This is where, among other things, the job application is archived/stored. Personnel files must be retained (i.e. the job application is not deleted or destroyed). Personnel files are cleared at the end of the employment relationship.
Bouvet maintains general security logs in its specialist systems, and responsibility for this has been delegated to the security manager. These logs record employees’ use of the specialist systems. No further information is provided here for reasons of system security.
The legal basis for keeping such logs is the statutory requirement to maintain logs to ensure that an organisation protects information assets other than personal data; see sections 2-8 and 2-14 of the Personal Data Regulations and section 8(f) of the Personal Data Act.
All persons are entitled to request basic information about the processing of personal data by an organisation pursuant to section 18, first paragraph, of the Personal Data Act. Bouvet has provided this information in this statement, and will refer to it in the event of any enquiries. Persons registered in one of Bouvet’s systems have a right to access their data. Such persons also have the right to request correction, deletion or supplementation of data which are incorrect or incomplete, or which Bouvet is not authorised to process. Requests from data subjects must be replied to free of charge and no later than within 30 days.
Enquiries regarding personal data held by Bouvet can be addressed to: [email protected].