Processing of Your Personal Data at ONEPARK AS
ONEPARK AS, organization number 998 638 984, (hereinafter "Onepark"), is responsible for the processing of personal data in the company.
Onepark takes its obligations regarding your personal information seriously. This privacy statement provides you with information on how we process your personal data and what rights you have in this regard. This privacy statement applies to you if you:
- Work for our customers
- Work for our suppliers
- Apply for a job with us
- Are otherwise in contact with us, such as participants in seminars, recipients of newsletters, journalists contacting us, or other visitors.
"Personal data" means information that can be linked to a physical person. "Processing" of personal data means any use of personal data, both automated and manual, such as collection, structuring, storage, and deletion.
We use cookies on our website. Read more about the information collected when using our website here.
Contact Information for Data Controller
Name: ONEPARK AS
Postal Address: Bøkkerveien 5, 0579 Oslo
Email: kundeservice@onepark.no
1. Why We Collect Personal Data and What Information We Collect
1.1 Cooperation with External Parties
For cooperation and follow-up with our customers, suppliers, and other partners, it is necessary to store information to fulfill our contractual obligations and plan and execute tasks and projects. Personal data processed may typically include name, email, phone number, and any other personal data necessary for the specific task or customer/supplier relationship. Most of this personal data will be necessary for us to process to fulfill our agreement with you, cf. GDPR Article 6 letter b. In some cases, processing is necessary to safeguard our legitimate interest in the proper operation and organization of our business, cf. GDPR Article 6 letter f. In the latter cases, we have assessed that our interest in processing outweighs the participant's need for protection of their interests or fundamental rights and freedoms.
1.2 Processing of Personal Data for Contract Parking
If you order and pay for parking on our website, onepark.no, we process your personal data to fulfill the agreement for renting a parking space and to manage the customer relationship we have with you. The personal data we process includes your name, contact information (address, email address, phone number), payment information, vehicle registration number, and the time and place of parking. The legal basis is GDPR Article 6 letter b to fulfill the agreement we have with you.
1.3 Processing of Personal Data for Inquiries via the Website or Other Channels
If you contact us via our website or other channels, we process your personal data. Personal data processed will typically include name, phone number, email address, and any personal data that may follow from the inquiry. The data is collected via contact forms, email inquiries, application/forms, or when you contact us in other ways. The processing of personal data is based on a balancing of interests, cf. GDPR Article 6 letter f. We have assessed that it is necessary for us to store this personal data to follow up on your inquiry in a good way.
1.4 Processing of Personal Data for Recruitment
In connection with the recruitment of employees, we collect personal data about job applicants: name, contact information, photo, CV, application, diplomas, certificates, statements from references, interview notes, and other information that job seekers provide to us. The legal basis is GDPR Article 6 letters a and f. Onepark has a legitimate interest in collecting information about the candidate for recruitment purposes. This data is deleted after the recruitment process is completed unless the candidate consents to the data being retained by the data controller. In such cases, the legal basis is GDPR Article 6 letter a. The data is retained for one year after consent is given or until consent is withdrawn.
1.5 Newsletters and Other Marketing
For individuals who have consented, we send out newsletters by email. We also send newsletters and other marketing to those with whom we have an existing customer relationship. In connection with the newsletter and other marketing, we process personal data. This includes name, contact information (email, address, possibly phone number), and possibly information about the employer for this purpose.
Consent to receive such marketing can be withdrawn at any time. This can be done by contacting us. The legal basis for processing is GDPR Article 6 letter f. The processing is necessary for purposes related to our legitimate interests, which outweigh the need for protection of the data subjects' interests or fundamental rights and freedoms.
Personal data related to marketing is processed until consent is withdrawn or if the existing customer relationship ends.
2. Disclosure of Personal Data to Others
We do not disclose your personal data to others unless there is a basis for such disclosure. Examples of such a basis will typically be because you have consented to it, because the disclosure is necessary to fulfill an agreement with you, or there is a legal basis that requires us to provide the information.
The data controller uses data processors to collect, store, or otherwise process personal data on our behalf. In such cases, we have entered into agreements to safeguard information security during processing. Such data processors may include accountants, recruitment systems, IT systems, etc.
All processing of personal data we carry out takes place within the EU/EEA area.
3. Storage Period
We store your personal data with us as long as it is necessary for the purpose for which the personal data was collected unless we are legally obliged to continue storage.
4. Your Rights When We Process Personal Data About You
The privacy regulations give you a number of rights related to the processing of your personal data. You have the right to request access to your personal data, correction of any errors, or deletion of the personal data we process about you. You also have the right to request restricted processing, object to the processing, and request the right to data portability. You can read more about the content of these rights on the Data Protection Authority's website: www.datatilsynet.no.
To exercise your rights, we ask you to contact us by email. We will respond to your inquiry as soon as possible, and no later than 30 days. You can also contact us if you want more information about how we process your personal data.
We will ask you to confirm your identity or provide additional information before allowing you to exercise your rights with us. We do this to ensure that we only provide access to your personal data to you and not to someone pretending to be you.
5. Complaints
If you believe that our processing of personal data does not comply with what we have described here or that we otherwise violate privacy legislation, you can complain to the Data Protection Authority. You can find information on how to contact the Data Protection Authority on their website: www.datatilsynet.no.