1 – Introduction
Bergen Bunkers AS («Bergen Bunkers«) aims to process your personal data in a proper and secure manner and in accordance with applicable privacy regulation, including the Norwegian Data Protection Act and the EU privacy regulation no. 2016/679 («GDPR«).
2 – Responsibility for data processing
Bergen Bunkers is the data controller for the personal data processed by Bergen Bunkers in relation to services and products offered. Please contact us if you have any questions regarding our processing of personal data. For Bergen Bunkers’ contact details, see section below.
3 – Personal data processed
Bergen Bunkers collects and processes the following personal data in the following instances:
- When selling products and services to customers: Contact details (name, phone number, e-mail, position, employer), KYC-information and other information necessary to perform the agreement entered into with the respective customer.
- When visitors make use of the contact scheme on our website: Name, e-mail, phone number, message (open text field).
- Indirectly through cookies: visitor preferences and information about preferred language, how many search results visitors can see per side etc.
- When interacting with our suppliers and business partners’ contact persons and/or owners and other stakeholders: Contact details (name, work e-mail, phone number, position, employer), KYC-information and IDD-information subject to applicable national and international legal requirements and information necessary to perform the agreement entered into with the respective supplier or business partner.
4 – Purpose and legal basis for processing
In relation to the selling of products and services to customers, Bergen Bunkers processes personal data for the purposes of contract management, customer relationship management, management reporting, HESQ, deliver agreed products and services and to comply with legal obligations. The legal basis for such processing is our legitimate interest in executing the relevant agreement and to comply with legal obligations, such as but not limited to KYC-obligations and financial obligations.
When visitors make use of the contact scheme on our website, our purpose of the processing is to respond and follow-up on the received inquiry. The legal basis for that processing is our legitimate interest in responding to received inquiries and following up on received inquiries.
When we collect information indirectly through cookies, such information is processed for the purpose to create statistics to improve the quality of our website. Our legal basis for processing such data (to the limited extent this data may be personal data), is our legitimate interest in improving the quality of our website.
In relation to our suppliers and business partners’ contact persons, owners and/or stakeholders we process their contact details for contract management and in order to execute the relevant agreement. The legal basis for such processing is our legitimate interest in executing the relevant agreement and to comply with legal obligations, such as but not limited to KYC-obligations and financial obligations.
5 – Transfer of personal data
Bergen Bunkers uses external service providers acting as data processors that provide certain types of services which includes processing of personal data on behalf of Bergen Bunkers. As part of such processing, some personal data may be transferred to data processors established in countries outside the EU/EEA («third countries»). In the event personal data is transmitted to such third countries, Bergen Bunkers will make sure to take necessary steps in accordance with applicable data protection law to ensure that your personal data is handled securely and with the sufficient security level equivalent to and on the same level as the protection offered within the EU/EEA area.
Bergen Bunkers will not sell, distribute, rent, license, share with or forward your personal data to other companies and organisations for commercial purposes. However, in the case of a merger or acquisition by another company, we may be required to disclose personal data to that company to the extent necessary to that acquisition or merger. In the event that such merger or acquisition involves transfer of personal data to third countries, such transfers will only take place in accordance with applicable data protection law.
6 – Duration of processing
Personal data will be stored for no longer than is necessary for the purposes for which personal data are processed.
7 – Data subjects’ rights
To the extent it follows from applicable data protection law, you may be entitled to access, correct and delete personal data that Bergen Bunkers processes about you. Furthermore, in certain cases you have the right to request that the processing is limited, the right to object to the processing (for example to processing that takes place on the basis of our legitimate interests), and the right to receive personal data about yourself and transfer it to another data controller (data portability).
Right of erasure does not apply where data processing is necessary for the fulfilment of a legal obligation or for reason relating to public interest.
If you wish to exercise these rights, please contact Bergen Bunkers as set out below in section 9.
8 – Cookies
Bergen Bunkers’ website contains cookies. Cookies are a data set in text format which is stored on your device when you navigate on the internet. Cookies are not a program which may contain a harmful code or virus, but they include specific information that relates to your use of the website, and makes it possible for us to understand how our website is used by its visitors.
9 – Contact information
10 – Data protection authority and claim rights
Datatilsynet is the competent Data Protection Authority for Norway. We encourage you to contact us first if you believe that your privacy rights have been violated. You have a right to file a complaint with the competent Data Protection Authority regarding our processing of personal data.