While conducting its day-to-day business, the Odfjell Drilling group (hereinafter referred to as "Odfjell Drilling" or "we") processes Personal Data related to visitors and users of our webpage, representatives of our customers, suppliers and business partners, and other persons who we are in contact with. Personal Data means any information relating to an identified or identifiable natural person (hereinafter referred to as "Data Subject").
- Controller responsibilities;
- The purpose of and legal basis for the collection and processing of your Personal Data;
- How we collect your Personal Data and the types of data we collect and process;
- How we use Personal Data collected;
- Where, when and to who we disclose your Personal Data;
- Retention period for your Personal Data ;
- Consequences of not providing us with your Personal Data or requiring deletion of data already obtained;
- Your rights as a Data Subject; and
- How you may contact us.
2. THE CONTROLLER
3. THE PURPOSE OF AND LEGAL BASIS FOR COLLECTION AND PROCESSING
OF PERSONAL DATA
The main purposes of our collection and processing of Personal Data are to be able to comply with legal obligations, reporting to authorities, safety, security and emergency preparedness, prepare and deliver tenders and services to our customers, receive services from our suppliers, collaborate with our business partners, respond to questions and requests from customers and others, integrity due diligence/background checks on business partners, carry out audits and reviews and to provide the general public with user-friendly and relevant webpages.
The legal basis for our collection and processing of Personal Data is the EU Regulation 2016/679 ("GDPR"). More specifically, we base our processing on Article 6 (1) letter a (consent), b (necessary for the performance of a contract), c (necessary for compliance with a legal obligation) and f (necessary for the legitimate interests pursued by Odfjell Drilling, which are not overridden by the interests of the Data Subject). The legitimate interests pursued by Odfjell Drilling in this respect are the interest in providing its services.
4. HOW DO WE COLLECT PERSONAL DATA AND WHAT TYPES OF PERSONAL DATA ARE
COLLECTED AND PROCESSED?
Subject to applicable data protection legislation and depending on the purpose of the processing, we may collect the following types of Personal Data: Name, contact details, title/position, curriculum vitae, certifications, nationality, passport and visa details, IP address and other Personal Data submitted to us or collected for legitimate business purposes.
We collect Personal Data in various ways:
Personal Data related to representatives of our customers, suppliers and business partners are in general collected from the relevant company (e.g. employer), from the representative himself, from other business partners, or from publicly available sources.
Personal Data related to visitors and users of our webpage are either submitted directly or collected through automated means by the visitors and users.
Personal Data related to other persons who we are in contact with are usually submitted directly by such persons.
5. WHERE, WHEN AND TO WHO DO WE DISCLOSE PERSONAL DATA?
To ensure that the processing of your Personal Data is carried out in a safe and lawful manner, the access to Personal Data within Odfjell Drilling is restricted. Only designated persons within Odfjell Drilling have access to Personal Data and the access is secured by use of control mechanisms whenever necessary or required by law.
Odfjell Drilling will not disclose, sell, distribute or otherwise share your Personal Data with other companies or organisations for commercial purposes. We will only disclose Personal Data to third parties to the extent we are required to do so pursuant to applicable law or regulation, or to the extent disclosure is necessary to deliver our services or otherwise required for legitimate business purposes. In any case we will implement the measures required to ensure an adequate protection of the Personal Data.
Within certain areas we have engaged data processors to process Personal Data on our behalf. This does not mean your Personal Data is disclosed to a third party, since such data processors only process Personal Data in accordance with our instructions. We have entered into data processing agreements with all such data processors to ensure that the data is processed only on documented instructions from us and that the data processor implements appropriate technical and organisational measures to ensure an adequate level of data protection.
The Personal Data may be transferred to companies established in countries outside the EEA area ("Third Countries"), such as other companies in Odfjell Drilling than the company collecting the Personal Data. To the extent Personal Data are transferred to such Third Countries, Odfjell Drilling will implement appropriate measures pursuant to applicable data protection law in order to ensure that the Personal Data are handled in a secure manner with an adequate level of protection – Similar to the level of protection provided within the EEA area.
6. DURATION OF THE PROCESSING
Personal Data are never retained for a longer period than what is necessary for the purposes for which they were collected. If the data is processed for two different purposes, we will retain the data until the purpose with the longest retention period is no longer relevant, but we will cease the processing for the purpose with shorter retention period when this shorter retention period has expired.
We will either permanently anonymise or in a secure manner delete those of your Personal Data that we no longer need or are under an obligation to retain.
7. CONSEQUENCES IF WE ARE NOT PROVIDED WITH THE PERSONAL DATA
Where our processing is based on your consent, you may at any time withdraw your consent. However, this may prevent us from delivering our services to you or receiving services from you.
8. YOUR RIGHTS AS A DATA SUBJECT
As a Data Subject you have, with certain reservations, the right to:
i. Obtain from us confirmation as to whether or not Personal Data related to you are being processed, and,
where that is the case, obtain access to the Personal Data;
ii. Obtain from us the rectification of inaccurate Personal Data related to you;
iii. Obtain from us the erasure of Personal Data related to you;
iv. Obtain from us restriction of processing regarding your Personal Data;
v. Obtain from us a copy of Personal Data that you have provided to us, and request that we transfer these
data to another controller (data portability);
vi. Object to processing of Personal Data related to you;
vii. Lodge a complaint with a supervisory authority (in Norway: Datatilsynet); and
viii. At any time withdraw your consent to the processing.
9. OUR CONTACT INFORMATION
Attn.: Legal department