Privacy
We take your privacy seriously. This privacy policy applies to you if you visit our websites, use our services, or want information on how we process personal data.
Aneo is responsible for how we collect, store, and use your personal information. Some of our subsidiaries manage specific processing activities within their areas of responsibility. This applies to Aneo Build, Aneo Mobility, Aneo Industry, and Aneo Retail.
Jump to
Privacy Policy
01
Contact Information
We at Aneo are the data controller for personal data collected when you use aneo.com. Aneo is a group that includes other companies, such as Aneo Build, Aneo Mobility, Aneo Industry, Aneo Retail, Aneo Real Estate and Construction.
Please contact us if you have any questions about our processing of personal data:
Aneo A/S
Klæbuveien 118
7031 Trondheim
Tel: +47 73 60 30 00
Email: post@aneo.com
02
Purpose of Processing Personal Data
We collect, process, and use your personal data for various purposes depending on who you are and how we come into contact with you. Our overall purpose for processing your personal data is to deliver the services you expect from us, and to be able to provide you with better information, service, and support. The more specific purposes vary depending on whether you are a customer or a visitor:
Information about our customers is used to manage and administer the customer relationship you have with us, whether you are a customer of ours or have contacted us to request information, a site visit, or to sign up for an email list. Information about customers' use of our services may be used in work related to statistics/analysis and product improvement. The information may also be used for marketing if you have consented to this.
Information about our visitors is used to ensure safe passage in our development areas and facilities, while staying in our office premises, as well as to ensure the safety of people and equipment in our power plants and development areas. The processing of personal data takes place based on an assessment that it is necessary for us to manage and safeguard our employees, partners, and the public in operational tasks and in any potentially risky or threatening situation, as well as to prevent and protect assets in connection with theft, vandalism, and sabotage. We have assessed that this is necessary to manage your relationship with us and to fulfill our responsibilities within HSE and our duty of care.
03
What we collect
04
Your Rights
Your rights when we process personal data about you:
Information: You have the right to receive information about the personal data we process about you. Through this notice, we inform you about our processing of personal data. You can also contact us if you would like more information.
Access: You have the right to request access to the personal data processed about you. Please contact us if you would like access.
Correction and deletion: You can also ask us to correct inaccurate information we hold about you or ask us to delete personal data.
Processing based on consent: If we process personal data based on your consent, you can withdraw your consent at any time. The easiest way to do this is to use the method described when you gave your consent or contact us. You can withdraw your consent to receive newsletters through the relevant links in the emails you have received. You can change or withdraw your consent to the processing of personal data based on cookies via “Cookies” found in the footer, as described above.
Right to restrict or object to processing: You have the right to have processing restricted in certain cases, such as:
You dispute the accuracy of the personal data - processing is suspended for a period that allows us to verify the accuracy of the personal data.
The processing is unlawful, and you oppose the deletion of the personal data and instead request that the use of the personal data be restricted.
We no longer need the personal data for the purposes of processing, but you need them to establish, assert, or defend legal claims.
You may also object to processing pending verification of whether our legitimate interests override your privacy.
Right to data portability: For personal data you have provided to us and that is necessary to perform a contract with us, and that is processed automatically (i.e. not manually by us), you may request that the personal data about you be disclosed or transferred to another provider in a structured, commonly used, and machine-readable format (data portability).
Automated processing, including profiling: This is described in more detail further down in the notice.
Complaint to the Data Protection Authority: If you believe that our processing of personal data is not in accordance with what we have described here or that we otherwise violate data protection legislation, you may complain to the Data Protection Authority.
You can find more information about your rights and how to contact the Data Protection Authority on the Data Protection Authority's website.
Please contact us if you have any questions related to exercising your rights or our processing of personal data. You can find our contact information at the top of this notice.
05
Storage
In general, we store your information for as long as necessary for the purpose of the processing, provided this does not conflict with applicable laws and regulations on the storage of personal data. This storage is justified by current requirements for retaining accounting records, and is also necessary to safeguard the customer's interests in connection with possible claims and other follow-up issues related to the customer relationship, as well as the need to have access to a history of contacts and deliveries upon the customer's request.
We delete all information associated with the customer relationship when the relationship is considered terminated. We consider a customer relationship terminated 3 years after the last delivery to the customer has been completed, unless any subsequent contact indicates that the customer relationship is still considered to be ongoing.
Personal data that we process on the basis of your consent will be deleted if you withdraw your consent, as long as this does not conflict with applicable legislation on the storage of special categories of personal data.
Information that we are required to retain for at least 5 years under the Accounting Act will be deleted when the retention period has expired. We protect personal data through both physical and virtual access control.
06
Third parties and disclosure of information to others
We do not share your personal data with others unless there is a lawful basis for such disclosure, or grounds for a report to the Police or civil proceedings. Examples of such grounds would typically be an agreement with you, a situation in which you witness an unwanted incident, documentation of threatening behavior, vandalism, or sabotage, or a legal basis that requires us to disclose information.
Apart from the third parties covered here in this statement, we will never sell or disclose your personal data to third parties/outsiders. Third parties also do not have rights of access to, or the ability to use, your information for purposes other than those described above, and this is covered by our data processing agreements with subcontractors/third parties.
When visiting our website
We use cookies to personalize content and ads, to analyze our traffic, and to provide social media features. We therefore share information about how you use our website with our partners in social media, advertising, and analytics. Our partners will combine that information with other information you have made available to them, or that they have collected through your use of their services.
Third-party providers we work with include:
Google Analytics (Privacy Policy - Opt-Out Browser Extension)
Hotjar (Privacy Policy)
Google Ads (Manage Ads Settings)
Facebook Meta (Privacy Policy - Manage Ads Settings)
Microsoft (Privacy Policy - Manage Ads Settings)
YouTube (Privacy Policy - Manage Ads Settings)
Snapchat
Google Tag Manager
Administration and handling of payments
We use Payex for invoice administration and sending, as well as payment processing. Your contact details will therefore be stored in their databases. For a full description of how Payex processes personal data, read their privacy policy here.
Transfer to other countries
Several of the systems we use from third-party providers rely on data storage outside the EU/EEA, primarily in the US. We are aware of the challenges of complying with European regulations (GDPR) when data is physically stored in other countries, and especially the consequences of the Schrems II ruling. We strive to adopt or switch to systems and providers that store data within the EEA or in approved third countries, but we must acknowledge that this is in many cases practically or financially difficult, especially considering the cost of changing providers. The risk associated with storing data in other countries relates to uncertainty about information security, the possibility of authorities in other countries demanding access to the data, and your limited ability to assert your rights. We assess that the systems we use that store data in other countries contain little personal information that would be of interest or value to authorities or other actors, and that the risk of infringement of your privacy is limited.
07
Automated processing, e.g., profiling
There will be no automated processing, including profiling, based on your personal data that results in legal effects or significantly affects the individual whom the personal data concerns.
08
Changes
If there are changes to our services or the regulations concerning the processing of personal data, this may result in modifications to the information provided in this privacy statement. If we have your contact information, we will notify you of significant changes. Otherwise, updated information will always be readily available on our website.
We take your privacy seriously.
If you wish to access the information we have registered about you, or information about the data processor, you may request access under the Personal Data Act.
In accordance with the Personal Data Act we have 30 days to process your access request.
The information will be provided upon presentation of valid identification.
Contact us at post@aneo.com
Withdrawal of consent
The Personal Data Act sets requirements for the processing of personal data.
Providing the information is voluntary, and if consent is withdrawn, the information will be removed/anonymized. The information will be removed and deleted when the purpose/goal of the publication changes or is no longer relevant.
If you previously gave consent to the processing of personal data, but now wish to withdraw it, you can withdraw your consent by sending us an email to post@aneo.com. We will contact you to make sure that you really are who you claim to be.