1. Who we are
At Avinto, we respect your privacy and are committed to protecting your personal data. This Privacy Policy explains how we collect, use, store, and protect personal data when you visit our website, contact us, subscribe to our newsletter, or apply for a position through our careers page.
We process personal data in accordance with the EU General Data Protection Regulation (GDPR) and applicable Norwegian data protection laws.
This website is operated by:
Avinto AS
Organisation number: 932 985 934
Markveien 57
0550 Oslo, Norway
Avinto AS is the data controller responsible for the personal data covered by this Privacy Policy.
2. How to contact us about your data
For questions about this policy or to exercise your rights, contact us at contact@avinto.no. Data protection matters are handled by our Data Protection Officer.
3. Information we collect
The information we collect depends on how you interact with our website.
Contact Us
When you contact us, we may collect your name, email address, contact details, and the information you choose to provide in your enquiry. We use this information to respond to your request and communicate with you.
Newsletter
When you subscribe to our newsletter, we collect your email address to send you the communications you requested. You can unsubscribe at any time.
Careers
When you apply for a position, we may collect your contact details, CV, application materials, qualifications, and other information you choose to provide. We use this information to assess and manage your application.
Website Usage
We may automatically collect technical and usage information, such as your IP address, browser, device information, pages visited, and interactions with our website, to maintain, secure, and improve our website.
4. Cookies
Our website uses cookies and similar technologies. Cookies are small files stored on your device that help websites function, remember preferences, and understand how visitors use the website. We use two main categories:
Strictly Necessary Cookies: These cookies are required for basic website functionality, security, and remembering your cookie preferences. Where permitted by applicable law, strictly necessary cookies do not require consent.
Analytics Cookies: Analytics cookies help us understand how visitors use our website so that we can improve its content, functionality, and user experience. We currently use Microsoft Clarity for this purpose. Analytics cookies are only activated after the required consent has been provided.
You can accept, reject, or manage non-essential cookies through our cookie preference controls. You can also manage cookies through your browser settings.
5. Legal basis for processing
- Performance of a contract, to deliver the services you request.
- Consent, for specific purposes such as marketing communication or collection of location data.
- Legitimate interests, to improve our services and understand how they are used, provided this does not override your privacy rights.
- Legal obligation, where we are required by law to process your data.
6. How We Use Personal Data
We may use personal data to:
- Respond to enquiries and requests.
- Communicate with you.
- Send newsletters and requested communications.
- Process and manage job applications.
- Assess candidates during recruitment.
- Maintain and secure our website.
- Understand website usage and improve our website.
- Detects and prevents misuse, fraud, or security issues.
- Comply with legal and regulatory obligations.
We do not sell your personal data.
7. Sharing Personal Data
We may share personal data with trusted service providers where necessary to operate our website and provide our services.
These may include providers of:
- Website hosting and infrastructure.
- Email and communication services.
- Recruitment or application management services.
- Analytics services, including Microsoft Clarity.
- IT and security services.
These providers are only given access to information necessary to perform their services and are expected to handle personal data in accordance with applicable data protection requirements. We may also disclose personal data where required by law, regulation, court order, or a valid request from a competent authority. We do not share your personal information with third parties, except in the following cases:
- Project Basis: On certain projects, we may share information with third-party service providers, such as payment processors, analytics providers, or cloud services, to perform services on our behalf.
- Legal Requirements: We may disclose information to comply with applicable laws or respond to lawful requests from government agencies.
We do not sell your personal information to third parties.
8. International Data Transfers
Avinto may use service providers or operate with personnel located outside the European Economic Area (EEA).
Where personal data is transferred outside the EEA, we take appropriate measures to ensure that the transfer is carried out in accordance with applicable data protection laws.
Where required, appropriate safeguards may include European Commission-approved Standard Contractual Clauses or other legally recognised transfer mechanisms.
You may contact us if you would like further information about applicable safeguards for international transfers.
9. Data Retention
We do not retain personal data beyond the time needed for the specific purpose or project it was collected for. Where we need to process personal data to investigate or resolve an issue, we keep it only for as long as that work requires and no longer. Once the purpose is fulfilled, the data is no longer kept, unless we have a legal obligation to retain certain information. You may request deletion of your data at any time.
10. Your Rights
- Right to access: You can ask us for a copy of the personal data we hold about you.
- Right to rectification: You can ask us to correct data that is inaccurate or incomplete.
- Right to erasure: You can ask us to delete your personal data, also known as the "right to be forgotten."
- Right to restrict processing: You can ask us to pause or limit how we use your data in certain situations.
- Right to data portability: You can ask us to provide your data in a common, machine-readable format, or transfer it to another organisation.
- Right to object: You can object to us processing your data for certain purposes, including direct marketing.
- Right to withdraw consent: Where we rely on your consent, you can withdraw it at any time.
Withdrawing consent does not affect the lawfulness of processing carried out before the withdrawal.
To exercise your rights, contact us using the details provided below.
11. Right to complain
If you believe we have handled your personal data unlawfully, you have the right to lodge a complaint with the Norwegian Data Protection Authority (Datatilsynet), www.datatilsynet.no.
12. Data Security
We take reasonable technical and organisational measures to protect personal data against unauthorised access, loss, misuse, alteration, or disclosure.
However, no method of transmission or storage is completely secure, and we cannot guarantee absolute security.
13. Children's privacy
Our website is not directed specifically at children.
We do not knowingly collect personal data from children in circumstances where such collection is prohibited by applicable law.
If you believe that a child has provided us with personal data, please contact us so that we can assess and take appropriate action.
14. Automated Decision-Making
We do not currently use automated decision-making or profiling that produces legal or similarly significant effects on individuals.
If this changes, we will provide appropriate information about the processing and applicable rights.
15. Changes to this privacy policy
We may update this Privacy Policy from time to time to reflect changes to our services, data processing practices, technology, or applicable legal requirements.
The "Last updated" date at the top of this policy indicates when it was most recently revised.
We encourage you to review this policy periodically.
16. Contact us
If you have questions about this Privacy Policy, our use of personal data, or wish to exercise your rights, please contact us:
Avinto AS
Markveien 57
0550 Oslo, Norway
Email: contact@avinto.no