Privacy Policy

1. Who we are

At Avinto, we respect your privacy and are committed to protecting your personal data. This Privacy Policy explains how we collect, use, store, and protect personal data when you visit our website, contact us, subscribe to our newsletter, or apply for a position through our careers page.

We process personal data in accordance with the EU General Data Protection Regulation (GDPR) and applicable Norwegian data protection laws.

This website is operated by:

Avinto AS

Organisation number: 932 985 934

Markveien 57

0550 Oslo, Norway

Avinto AS is the data controller responsible for the personal data covered by this Privacy Policy.

2. How to contact us about your data

For questions about this policy or to exercise your rights, contact us at contact@avinto.no. Data protection matters are handled by our Data Protection Officer.

3. Information we collect

The information we collect depends on how you interact with our website.

Contact Us

When you contact us, we may collect your name, email address, contact details, and the information you choose to provide in your enquiry. We use this information to respond to your request and communicate with you.

Newsletter

When you subscribe to our newsletter, we collect your email address to send you the communications you requested. You can unsubscribe at any time.

Careers

When you apply for a position, we may collect your contact details, CV, application materials, qualifications, and other information you choose to provide. We use this information to assess and manage your application.

Website Usage

We may automatically collect technical and usage information, such as your IP address, browser, device information, pages visited, and interactions with our website, to maintain, secure, and improve our website.

4. Cookies

Our website uses cookies and similar technologies. Cookies are small files stored on your device that help websites function, remember preferences, and understand how visitors use the website. We use two main categories:

Strictly Necessary Cookies: These cookies are required for basic website functionality, security, and remembering your cookie preferences. Where permitted by applicable law, strictly necessary cookies do not require consent.

Analytics Cookies: Analytics cookies help us understand how visitors use our website so that we can improve its content, functionality, and user experience. We currently use Microsoft Clarity for this purpose. Analytics cookies are only activated after the required consent has been provided.

You can accept, reject, or manage non-essential cookies through our cookie preference controls. You can also manage cookies through your browser settings.

5. Legal basis for processing

• Performance of a contract, to deliver the services you request.
• Consent, for specific purposes such as marketing communication or collection of location data.
• Legitimate interests, to improve our services and understand how they are used, provided this does not override your privacy rights.
• Legal obligation, where we are required by law to process your data.

6. How We Use Personal Data

We may use personal data to:

• Respond to enquiries and requests.
• Communicate with you.
• Send newsletters and requested communications.
• Process and manage job applications.
• Assess candidates during recruitment.
• Maintain and secure our website.
• Understand website usage and improve our website.
• Detects and prevents misuse, fraud, or security issues.
• Comply with legal and regulatory obligations.

We do not sell your personal data.

7. Sharing Personal Data

We may share personal data with trusted service providers where necessary to operate our website and provide our services.

We do not sell your personal information to third parties.

8. International Data Transfers

Avinto may use service providers or operate with personnel located outside the European Economic Area (EEA).

Where personal data is transferred outside the EEA, we take appropriate measures to ensure that the transfer is carried out in accordance with applicable data protection laws.

Where required, appropriate safeguards may include European Commission-approved Standard Contractual Clauses or other legally recognised transfer mechanisms.

You may contact us if you would like further information about applicable safeguards for international transfers.

9. Data Retention

We do not retain personal data beyond the time needed for the specific purpose or project it was collected for. Where we need to process personal data to investigate or resolve an issue, we keep it only for as long as that work requires and no longer. Once the purpose is fulfilled, the data is no longer kept, unless we have a legal obligation to retain certain information. You may request deletion of your data at any time.

10. Your Rights

• Right to access: You can ask us for a copy of the personal data we hold about you.
• Right to rectification: You can ask us to correct data that is inaccurate or incomplete.
• Right to erasure: You can ask us to delete your personal data, also known as the "right to be forgotten."
• Right to restrict processing: You can ask us to pause or limit how we use your data in certain situations.
• Right to data portability: You can ask us to provide your data in a common, machine-readable format, or transfer it to another organisation.
• Right to object: You can object to us processing your data for certain purposes, including direct marketing.
• Right to withdraw consent: Where we rely on your consent, you can withdraw it at any time.

Withdrawing consent does not affect the lawfulness of processing carried out before the withdrawal.

To exercise your rights, contact us using the details provided below.

11. Right to complain

If you believe we have handled your personal data unlawfully, you have the right to lodge a complaint with the Norwegian Data Protection Authority (Datatilsynet), www.datatilsynet.no.

12. Data Security

We take reasonable technical and organisational measures to protect personal data against unauthorised access, loss, misuse, alteration, or disclosure.

However, no method of transmission or storage is completely secure, and we cannot guarantee absolute security.

13. Children's privacy

Our website is not directed specifically at children.

We do not knowingly collect personal data from children in circumstances where such collection is prohibited by applicable law.

If you believe that a child has provided us with personal data, please contact us so that we can assess and take appropriate action.

14. Automated Decision-Making

We do not currently use automated decision-making or profiling that produces legal or similarly significant effects on individuals.

If this changes, we will provide appropriate information about the processing and applicable rights.

15. Changes to this privacy policy

We may update this Privacy Policy from time to time to reflect changes to our services, data processing practices, technology, or applicable legal requirements.

The "Last updated" date at the top of this policy indicates when it was most recently revised.

We encourage you to review this policy periodically.