Sparebankstiftelsen DNB’s processing of personal data is in accordance with the privacy regulations in force at any given time

Legal grounds for processing of personal data

The processing of personal data is not permitted unless there is a legal ground for processing. Such a ground for processing may, for example, be consent from the data subject, contract (conclusion of agreement), law or that we as data controller have a “legitimate interest” that exceeds the data subject’s claim to privacy.

Our legal ground  for proscessing is mainly contract, and in some cases consent. If the Foundation is to process personal data for children under the age of 16, the consent of the parents is required.

Allocation

If you have received an allocation from us, we are required to store information such as account number, e-mail address, etc. in order to be able to pay out allocated funds.

Fee

If you have had an assignment for us, we are required to store information such as account number, personal identity number, etc. in order to be able to make payment of fees.

Events

If you have received an invitation from us, we are required to store information such as name and email address in order to send out the invitation.

Collaborating partners

In order to have the necessary contact with our partners, information such as e-mail address, postal address and telephone number of relevant contact persons are stored.

What personal data is processed

Personal data Sparebankstiftelsen DNB collects can be divided into the following categories:

• Identification. For applicants and contact persons / users, we have to obtain a name and mobile phone number. In addition, this is documented using BankID.
• Contact information such as email address and postal address.
• Financial information such as account number and date of birth.
• Pictures. The foundation has a large image base as documentation of awards / events.

Sparebankstiftelsen DNB does not collect or register data that can be considered sensitive data (special categories of personal data) under the Personal Data Act

Our use of personal data

We collect and process personal data so that we can fulfill our agreement with:

• Applicants and contact persons / users who register via our electronic application portal
• Persons who are engaged for assignments with the Foundation and / or our subsidiaries
• People who shall be invite to different types of events
• People at our collaborating partners with whom we have contact

In addition, we obtain consent, from persons or guardians, before using images where persons can be recognized.

Sparebankstiftelsen DNB is constantly working to improve our websites and application system. In addition, we occasionally conduct surveys that are relevant to our business. In connection with this, we will contact our applicants and users / contact persons. Such inquiries do not take place without consent.

What data processors do we use?

Sparebankstiftelsen DNB determines the purpose of the processing of personal data that is collected and is to be regarded as the data controller in accordance with The Personal Data Act or The Personal Data Regulations. Registered personal data is treated confidentially with us and only those with a legitimate need will have access to our personal data filing system. As a main rule, we will therefore not share personal data with anyone outside the Foundation. Certain personal data will be disclosed to providers of services that process data on behalf of and following instructions from Sparebankstiftelsen DNB. This only happens to the extent necessary to fulfill the obligation we have undertaken or to fulfill the legal requirements to which we are subject, and we ensure that the recipient fulfills the applicable confidentiality obligations and requirements for the protection of personal data, and these cannot be used for any other purpose than what has been agreed.

Information about our followers on social media

Sparebankstiftelsen DNB uses social media such as Facebook, Instagram, etc. We get information about your visits from Facebook. Facebook uses cookies and thus collects information about traffic, visits. This is anonymized information.

Storage of personal data and erasure

All processing of personal data that we carry out takes place within the EU / EEA area. Sparebankstiftelsen DNB retains your information for as long as it is needed for the purposes for which your information was collected and processed, or as long as it is required in accordance with the above and regulations.

If you have entered into an agreement with us, we will retain the personal data that is necessary to fulfill the agreement or to fulfill the requirements for retention time in law or regulations such as:

• Tax reporting. At least five years after the termination of the contractual relationship.
• Accounting purposes. According to the Accounting Regulations, storage is required for up to ten years after the end of the financial year.

Applicants or contact persons / users who have not shown activity in the electronic application portal during a 5-year period will be delete

People who do not want to receive invitations are immediately deleted from the invitation list. If the person in question has not responded to invitations in the last 3 years, the person in question will also be deleted from the list.

Images in the image database are not deleted as these are considered to have a legitimate interest in the foundation in relation to historical value and documentation of the Foundation’s activities through the allocation of funds for public benefit purposes.

Sparebankstiftelsen DNB will delete your personal information without undue delay if you withdraw the consent on which the processing of the information is based or you make an objection to the processing and there are no more compelling reasons for the processing.

Your rights

Everyone who asks has the right to basic information about the processing of personal data in a company under the GDPR – general privacy regulation. Sparebankstiftelsen DNB has provided this information in this privacy protection statement.

You can read about your rights on the Norwegian Data Protection Authority’s website. Here you will find an overview of your rights, https://www.datatilsynet.no/rettigheter-og-plikter/den-registrertes-rettigheter/.

Cookies

We use cookies on our website. A cookie is a small text file and our website will always ask your browser to store the cookie on your computer.

With cookies, we can register how you use sparebankstiftelsen.no, including the transition to our application portal, and we can continuously improve the websites, so that they are easier and better to use.

Data from cookies will not be used to collect personal information about you. An example of our use of cookies is the compilation of statistics that provide answers to how many people visit different pages, how long the visit lasts, which websites the users come from and which browsers are used.

The information is processed in deidentified and aggregated form. By deidentified is meant that we can not trace the information we collect back to the individual user. The user’s IP address is anonymized and processed at an aggregate level, ie all data is merged into a group and not processed individually. We use the analysis tool Google Analytics on our website. Information from this tool is not disclosed by Sparebankstiftelsen DNB to other players.

In the settings of your browser, you can both turn off and delete cookies.

Here is an overview of which cookies we use:

Google Analytics

We use Google Analytics to measure the number of visits to our websites. This helps us work on creating an exciting and relevant website for our visitors. Google Analytics records the following cookies:

__utma: Tells us how many times you have visited our site.

__utmb, __utmc: Tells us how long you visit our pages. This will be deleted if you leave our website.

__utmz: See where you came from (search engine, keywords, link, etc.) when you went to our site.

My Newsdesk

We publish the news you find under Press through My Newsdesk. For specification of cookies used by My Newsdesk, visit https://www.mynewsdesk.com/en/about/terms-and-conditions/cookies

AddThis

AddThis is a provider of social media buttons, which collects cookies according to the following policy http://www.addthis.com/privacy/privacy-policy. We use AddThis to allow our visitors to share articles we have published on social media.

Facebook

Facebook Pixel is used to measure traffic, response from marketing campaigns and improve the relevance of marketing via Facebook. All information collected will only be used internally for analysis purposes, and we do not share data with third parties. We never store data that could personally identify the user.

Right to submit a complaint

If you believe that our processing of your personal data should be in breach of the Privacy Regulation, or the privacy legisaltion in general, you have the right to submit a complaint to the supervisory authorities. For Norway, this is the Norwegian Data Protection Authority, and complaints can be submitted on their website by following this link, https://www.datatilsynet.no/om-datatilsynet/kontakt-oss/hvordan-kan-jeg-klage-til-datatilsynet/.

Contact information

If you wish to contact us in connection with our processing of your personal data or ifyou have any questions, please contact the foundation by email to: post@sparebankstiftelsen.no or to: Postboks 555, Sentrum; 0105 Oslo

See also contact information for all employees.