SESAM PRIVACY POLICY

Introduction

SESAM respect your privacy concerning the collection, usage and storage of Personal Information.

In this policy, we aim to demonstrate our commitment to protect our users´ and/or visitors´ privacy. The document comprises the processing of Personal Data provided to SESAM, Bouvet Norge AS, organization number 996 756 246 (also referred to as “We”).

To exercise your rights as a Data Subject, please use our Data Access Portal.

Personal and other data collected

Through interactions with you as a user and/or a visitor, SESAM collects Personal Data about you.

This comprises information voluntarily given to us when you contact us, including first name, last name, your e-mail address and any additional content submitted while filling out the “Get in touch” form on the Sesam site or if you contact us by other means.

Legal basis and purpose for processing of Personal Data

SESAM will use the data collected for the purpose to perform the services requested. We will only process the Personal Information to follow-up, including responding to your requests, and/or managing your requests, and only to the extent necessary to fulfill such purposes in accordance with applicable laws and regulations. We have a legitimate interest in the processing of the Personal Data in order to communicate and respond to you adequately.

Retention

We may keep your Personal Data for a period of time which is consistent with the original purpose of collection. After expiry of the retention period of two years and/or the purpose is fulfilled, your Personal Data will be anonymized or deleted.

Sharing and disclosure

SESAM will only disclose information with third parties in cases where consent has been obtained. In case of disclosure, SESAM will ensure that the parties to whom disclosure is made, grants the users the same rights as those set forth herein with respect to the processing of Personal Data. This includes the right to be informed about the disclosure and of the data maintained about the user and the right to rectify incorrect or misleading information.

Transfers and Cross-border transfers

SESAM will not transfer Personal Data which are undergoing processing or are intended for processing to a third country or to an international organization except when Cross-Border Data Transfers are made to adequate jurisdictions authorized by the Commission or if transfers are subject to appropriate safeguards. This may include Binding Corporate Rules, Model Clauses, Standard Data Protection Clauses, Approved Codes of Conduct, or Certifications.

Safeguards

We maintain appropriate organizational, technical and physical safeguards designed to protect the Personal Data against accidental or unlawful destruction, loss, alteration, unauthorized disclosure of, as well as all other forms of unlawful processing.

Your rights relating to your Personal Data

SESAM aims to provide transparency for the exercising of your rights. Based on your request to us, we will provide information on action taken without undue delay, and in any event within one month of the request.

To exercise your rights as a Data Subject, please use our Data Access Portal.

Right of access

You will have the right to access the Personal Data held by us and receive information regarding the processing of this data.  

Right to rectification Personal Data

Upon your request, SESAM will ensure that inaccurate, incomplete or misleading data are rectified without undue delay.

Right to erasure

If the data is no longer necessary in relation to the purpose which it was collected, consent is withdrawn, the data has been unlawfully processed or have to be erased for compliance with a legal obligation, or you object and there are no overriding legitimate grounds for the processing, you have the right to obtain the erasure of the Personal Data without undue delay.

Right to restrict processing

You can request that the processing is restricted. SESAM must restrict the processing if the accuracy of the data is contested, the processing is unlawful, the data is no longer needed for the original purpose or the verification of overriding grounds is pending.

Right to data portability

You have the right to receive your Personal Data, which you have provided to SESAM, in a structured, commonly used and machine-readable format and you have the right to transmit those data to another controller without hindrance.

Right to object

You have the right to object to any processing of Personal Data relating to you carried out on the basis of our legitimate interests.

Right to withdraw your consent

To the extent that the processing of the Personal Data is carried out based on your consent, you have the right to withdraw this consent at any time. This will not affect the lawfulness of the processing based on such consent before it is withdrawn.

Breach

In case of a Personal Data breach, which is likely pose a high risk to your rights and freedoms, SESAM will communicate the breach to you. The notice will be in clear and plain language. SESAM will notify you promptly, consistent with the needs of law enforcement and relevant regulations.

Right to lodge a complaint with a supervisory authority

You have the right to lodge a complaint with supervisory authority if you consider that the processing of Personal Data relating to you infringes your rights.

Right to an effective judicial remedy against a supervisory authority

You also have the right to an effective judicial remedy against a legally binding decision of a supervisory authority, without prejudice to any other administrative or non-judicial remedy. 

Jurisdiction and Choice of Law

Any dispute that may arise between the user and SESAM in connection with this Privacy Policy or SESAM´s data processing activities shall be subject to, regulated by, and interpreted in accordance with, Norwegian Law. The user may request that the case is brought before a Norwegian court.

Change of the Privacy Policy

The Services and our business may change from time to time, hence it may be necessary for us to make changes to this Privacy Policy. We reserve the right to amend or repeal this policy at any time by posting a revised Privacy Policy or a new policy document in its place. If such revised or new policy includes a significant change to the way that Personal Data may be treated, SESAM will notify the users of the fact that its privacy policy has changed by sending an email to the address associated with the user.

We encourage you to periodically review this Privacy Policy to stay informed about our collection, processing and sharing of your Personal Data.

Contact us

SESAM takes your privacy seriously. 

For more information about SESAM´s privacy practices or if you have any questions, feel free to contact us. You may contact us at gdpr@sesam.io or by using our mailing address below:

Bouvet Norge AS

Sørkedalsveien 8

Postboks 5327 Majorstuen

0304 Oslo