When you are in contact with us it may be necessary for us to process personal data about you. We care about your privacy and take this seriously. We have therefore prepared this privacy statement to provide you with information on how we process your personal data and your privacy rights.
This privacy statement represents the privacy policy applicable to Hagland, which in this context refers to R.G. Hagland AS and any legal entity directly or indirectly owned more than 50% by R.G. Hagland AS (including, but not limited to Hagland Agency AS, Hagland Shipping AS, Hagland Rederi AS, Hagland Finans AS, Hagland Eiendom AS, Hagland Invest AS, Hagland Bulk Transport KS, Hagland Bulk II KS, Hagland Bulk Shipping AS, and Storm & Bull Shipping AS), hereafter referred to as “Hagland”, unless such legal entity has its own privacy statement. This privacy statement also applies to hagland.com.
1. Who is the controller?
R.G. Hagland AS is the controller and therefore responsible for the personal data that is processed when you are in contact with R.G. Hagland AS. Similarly, each Hagland legal entity is responsible for the personal data that is processed when you are in contact with such Hagland legal entity.
Our contact information:
Business registration no.: 993 095 249
Visiting address: Smedasundet 97, 5525 Haugesund, Norway
Postal address: P.O. Box 98, 5501 Haugesund, Norway
E-mail: gdpr-privacy@hagland.com
Telephone: +47 52 70 12 00
Hagland consists of multiple business areas. Some of these business areas may have websites and services that necessitate further specification beyond what is mentioned in this privacy statement. In such cases, specific privacy statements will come in addition to this privacy statement.
2. Hagland’s purpose for processing personal data
Which personal data we collect, the purpose, and the legal basis for such processing depend on our relationship to you and your contact with us. An overview of our processing in the various situations is found below.
We do not undertake profiling or fully automated processing of your personal data.
2.1. If you contact us
When you contact us, whether it be by phone, e-mail, through our website or in other ways, we will process personal data about you.
The personal data we collect will typically be contact information such as name, e-mail address and other information you share with us, and which is necessary to collect to respond to your inquiry.
Our legitimate interest is the basis for this processing. The legitimate interest is our need to be able to respond to your inquiry.
2.2. Our business activity
It may be necessary for us to process personal data about you if you are employed with one of our partners, suppliers, or customers, or if we are contacted regarding our financing or investment activities.
The personal data we process in this context will most often be contact information such as your name, e-mail address and telephone number, as well as information about your employer and your position. Furthermore, we will process other information which you provide to us, or which emerges from our contact with you, to the extent this is necessary for the specific process.
Sometimes we may also obtain information about you from publicly available sources, such as the websites of companies, or from direct contact with the company in question, with the purpose of promoting our services and/or coordinate our marketing effort.
The basis for this processing is our legitimate interest in being able to perform tasks linked to our business activity, including for example enabling a cooperation with your employer.
With regards to promoting our services, our legitimate interest in contacting potential customers is in our opinion not overridden by the interests of the data subject. Reference is here made to the fact that we only process contact information relating to the data subject’s position at his/her employer.
2.3. Legal obligations
We are required by law to process personal data in certain cases, for instance to document compliance with obligations within tax, accounting or legal processes. In this connection, it may be necessary to process personal data about you. This could, for example, be necessary if your name is listed on an invoice or contract subject to retention obligations.
The legal basis for such processing is the legal obligation to which we are subject.
The information will be deleted when the purpose of the processing is fulfilled, such as for example where the reporting obligation is fulfilled, or we are no longer required to retain the information.
2.4. In connection with job applications
When you apply for a job with us, we will collect the personal data that you share with us. This is normally name, contact information, competence, experience, and photo. During the recruitment process we will also collect information about what country you live in, work- and residence permit (if relevant), information about salary and the references you provide to us, including the information they share with us.
The purpose of the processing is to assess whether to offer you employment with us. Our basis for processing personal data about you is that this is necessary for us to enter into a potential agreement with you concerning a permanent or temporary employment.
For candidates who are not hired, the CV and application will be deleted after a person is employed in the position for which you applied, and at latest within six months, unless you are employed or explicit consent for further storage is given.
We may desire to retain your personal data to consider you for future employment opportunities. In such an event, we will seek your consent, either during or after you formally apply for a job opportunity.
2.5. Whistleblowing form
If you use our whistleblowing form channel on www.hagland.com to raise concerns regarding violation of laws, internal policies or human rights, we will process the personal data you disclose in the report. You can state your name, email address and telephone number. The personal data you disclose will only be used to process the report.
Our basis for processing personal data you choose to disclose in the report is our legitimate interest in responding to the inquiry and investigating the reported circumstances. This also applies to personal data concerning potential other persons that is disclosed in the report.
You can choose to remain anonymous when reporting the concern. Please note that potential investigations and follow-up activities will be easier to implement and will most likely be more successful if you disclose your identity.
The personal data you disclose by utilising our reporting service will be deleted when processing of the report case is completed, or the personal data will be deleted continuously when no longer necessary to process the report. The result from the processing of the report will not be deleted.
2.6. When you participate in our events
If you sign up for an event hosted by Hagland, we can register personal data such as your name, contact information and, if you so desire, preferences related to implementation, food and beverage, travel, and accommodation.
The basis for processing this information is your consent. will request your consent for this.
The information will be deleted after the event is completed unless we have some other legal basis for retaining the information longer.
2.7. When you register to receive our newsletter or market reports
When you register to receive our newsletter or market reports, we will register your email address so that we can send you the information you wish to subscribe for.
The purpose of this process is so that we can send you the newsletter or other information you have requested/signed up to receive. The basis for this processing is the consent you give when you sign up to receive the newsletter.
You can revoke your consent at any time by following the procedure described at the bottom of our newsletter, or contact the department sending out reports. When you revoke your consent, we will remove you from the list of recipients.
3. Sharing personal data
3.1. Data processors
We may share your personal data within Hagland to the extent necessary for the purposes described above and with third parties when such sharing is necessary to provide services.
Hagland may use service providers for example for consultancy purposes, manning agents (for sailors), recruitment services, our job application portal, IT services, security and related support, or processing transactions.
Hagland will not transfer personal data to a third country outside of the EEA that does not provide adequate protection of personal data unless appropriate safeguards are applied or the transfer otherwise takes place in accordance with applicable data protection legislation.
When required by law, regulation, legal process or an enforceable governmental request, we may share your personal data for legal reasons within Hagland and to public authorities or governments but only to the extent we are required to do so.
3.2. Other third parties
We do not pass on your personal data to others unless there is a lawful basis for such disclosure of data. Examples of such a basis will typically be your consent or a legal basis that gives us the right to, or obligates us, to disclose the information.
Disclosure of personal data may entail that your personal data is transferred to third parties located in countries outside the EU/EEA. To ensure your privacy, such transfers will take place in accordance with the applicable data protection legislation.
3.3. Other Hagland companies
We cooperate with other Hagland companies, and it may be necessary to share personal data with these companies from time to time. This could be necessary to respond to your inquiry because we cooperate to deliver a service, or because we share IT systems.
In cases where the other Hagland company acts as our data processor, we will process your personal data as described above under “data processors”, and where other Hagland companies act as the party responsible for processing, the item under “other third parties” will be followed.
3.4. Cookies
Like most websites, hagland.com uses cookies.
Analytical cookies are used to understand how visitors interact with the website. These cookies help provide information on metrics such as the number of visitors, bounce rate, traffic source, etc.
Functional cookies help perform certain functionalities like sharing the content of the website on social media platforms, collecting feedback, and other third-party features.
Performance cookies are used to understand and analyse the key performance indexes of the website which helps in delivering a better user experience for the visitors.
Our website hagland.com uses Google Analytics to calculate visitor, session and campaign data and track site usage. Information is stored anonymously and assigns a randomly generated number to recognise unique visitors. Also, information is stored on how visitors use a website. Some of the collected data includes the number of visitors, their source, and the pages they visit anonymously.
4. Securing our IT services and solutions
Hagland’s IT services are based on a hybrid solution with both on-premises technology and cloud solutions.
4.1. Deleting personal data
We delete personal data when it is no longer necessary to store this data to fulfil the purpose for which the personal data was collected. We determine the storage time based on an assessment of the purpose of the processing, statutory storage obligations, the risk for future claims, statute of limitations and business needs.
If the processing is based on your consent, we will delete the personal data if you revoke your consent, unless there is some other valid basis for continuing to process the personal data.
5. Your rights
With certain reservations, you have the right to demand access, correction, or deletion of the personal data we process concerning you. You also have the right to demand restricted processing, lodge an objection against the processing and the right to demand data portability if certain conditions are fulfilled.
If our basis for processing rests on your consent, consent is voluntary, and you can revoke such consent at any time.
You can read more about what your rights entail and when they apply, see the (Norwegian) Data Protection Authority’s website: www.datatilsynet.no.
Note that demands for deletion of data may be restricted due to our statutory obligations, for example because of the Accounting Act and the Bookkeeping Act, or if this can come at the expense of other persons’ rights to privacy.
If you believe that we are processing information unlawfully, you have the right to appeal to the Data Protection Authority. See www.datatilsynet.no. We hope that you will contact us first, so that we can assess your objections and clear up any misunderstandings.
6. Contact information
If you have any questions or comments, or if you wish to exercise your rights or complain regarding how we process your information, you may contact us by sending an e-mail to gdpr-privacy@hagland.com.
7. Changes in the privacy statement
We may update the privacy statement from time to time if, for example, we change our guidelines, or in connection with changes in legislation. You can always find the latest version of our privacy statement on our website, www.hagland.com.
Last updated: 8 September 2023