Last updated [22.10.2021
]
1. Introduction
Axaz AS (org. no. 926 559 745) ("
Axaz") cares about individuals’ privacy and is committed to process personal data in compliance with the locally applicable laws and regulations. This privacy policy provides you with the information about Axaz' processing of personal data, including which personal data we collect, why we process your personal data and your rights connected to the processing of the personal data. For the purpose of this privacy policy, Axaz is the data controller. If you have any questions regarding our processing of personal data or about this privacy policy, you may contact Majd Nakhleh by email: majd.nakhleh@axaz.com.
2. Personal data, purpose and legal basis for processing
Axaz process among others personal data relating to contact persons at its customers, service providers and business partners, potential candidates and others who contact Axaz or visits our webpage. The personal data may be provided by the data subject itself, from publicly accessible sources or third parties such as service providers, partners etc.
We may process your personal data in connection with the following processing activities:
- Conntractual relationship: In a contractual relationship between Axaz and individuals, personal data may be necessary to the execution or the performance of the contract (GDPR Article 6 (1) (b)), such as contact information and other personal data necessary to fulfill the contract.
- Contract management and business relationship: In connection with the administration and management of contracts with Axaz' customers, business partners etc. and for business and partner relationship purposes, Axaz may process personal data such as contact information of contact persons at such customers, business partners, in addition to personal data contained in contracts, ongoing commercial correspondence, invoices, minutes of meeting etc. The legal basis is Axaz' legitimate interest in entering into business relationships, fulfil contracts and administrate such relationship (GDPR Article 6 (1) (f)).
-
Respond to inquiries: Axaz may process personal data in order to follow-up inquiries from potential candidates, website users, and others who contact Axaz. Axaz may process personal data such as contact information and other personal data provided in connection with the inquiry. The legal basis for such processing is Axaz' legitimate interest in providing support to answer and manage inquiries and other communication (GDPR Article 6 (1) (f)).
-
Use of Axaz' website: Axaz may process personal data about visitors to the Axaz' website. Axaz use cookies and other information gathering methods to enhance the user experience and optimize the Axaz website methods, where personal data as IP address may be collected. The legal basis for such processing is Axaz' legitimate interest in maintaining the webpage and collect statistics (GDPR Article 6 (1) (f)). You can read more about our use of cookies in our Cookie Policy: [link].
-
Marketing, newsletters etc.; If you have signed up for marketing or our newsletter, we may process your name, contact information etc. in order to submit such materials to you. Such processing is based on your consent (GDPR Article 6 (1) (a)).
-
Recruitment: If you apply to a position in Axaz, Axaz may process your personal data in order to assess your application such as CV, application, certificates, references and other information you may provide or which we need to verify to assess your application. The legal basis for such processing is normally that it is necessary in order to take steps at the request of the candidate prior to (potentially) entering into an employment contract. The processing may also be based on our legitimate interest in finding the best candidate for the position (GDPR Article 6 (1) (f)), or your consent (GDPR Article 6 (1) (a)).
-
Ensure compliance and legitimate interests: Axaz may also process personal data in order to comply with statutory obligations to which Axaz is subject, and to safeguard own or third parties’ legitimate interests, e.g. in relation to establishing a legal claim or preventing unauthorized access to or disclosure of personal data GDPR Article 6 (1) (f)).
-
Legal obligations: Axaz may process personal data due to legal obligations applicable to the operation of Axaz (GDPR Article 6 (1) (c)), such as accounting obligations.
Axaz may, on a case-by-case basis, process personal data for other purposes and rely on different legal grounds, such consent or legitimate interest or, in accordance with applicable data protection law, as set forth in an applicable privacy notice.
3. Retention period
Axaz will retain your personal data for as long as it is necessary to fulfil the purposes for processing as defined above. If the processing is based on consent, the processing will cease when you withdraw your consent. You can withdraw your consent at any time.
For applicants for positions with us, we will store the personal data as long as the recruitment process is ongoing. If the applicant is not employed, we will delete the personal data no later than one year from the position was filled, unless consent has been given for further storage.
Please note that continued storage may be necessary due to statutory obligations to which Axaz is subject to e.g. statutory rules related to storage for accounting purposes, or due to Axaz' legitimate interests, e.g. for the purpose to establish, exercise or defend a legal claim.
4. Disclosure to third parties
We will only disclose your personal data to third parties to the extent we have a legal basis for such disclosure.
We use data processors to collect, store and otherwise process personal data on our behalf. The relationship to such suppliers is governed by a data processor agreement, which inter alia ensures information security for your personal data.
Axaz may process and store your personal data outside the EU/EEA. All processing in a third country will be subject to mechanisms ensuring sufficient security for your personal data, such as EU Standard Contractual Clauses or an adequacy decision from the EU Commission, in addition to all necessary requires steps under applicable law in order for such transfer of your personal data to be compliant with applicable law.
In some cases, Axaz may disclose personal data to public authorities in order to meet statutory requirements or comply with government orders, for example to comply with obligations under accounting or tax legislation. Public authorities will be responsible for processing the personal data we provide in such cases.
5. Security
Axaz values your privacy rights and has taken reasonable steps to protect the users' privacy, including by implementation of physical, technical and organizational measures, to prevent loss, alterations, theft and unauthorized access to information stored and otherwise processed.
6. Third party websites and social media
Axaz' websites may include links to other third-party sites. These third-party sites have own privacy policies that determines how personal data are collected and processed. If you submit personal information to any of these third-party sites, your information is governed by their privacy policies. Axaz takes no responsibility for such third-party sites, how they are operated and how they process your personal data. We recommend that you familiarize yourself with such third-party sites' privacy policies and terms of use when visiting and using such sites.When you "like" or join our Facebook page or other social media accounts, this will be shared with the relevant platform. The same applies to any activities on our social media accounts, such as content posted by you or posts that you like. The relevant social media platform has own privacy policies, in which you can find more information about the processing of personal data in relation to such social media platforms.
7. Your rights
As a data subject, you are entitled to request access to the personal data we process about you, request that Axaz updates or corrects your personal data and/or withdraw any consent to processing. In some circumstances, you are also entitled to request that your personal data is erased, request restriction of processing or object to processing and/or request data portability. In order to utilise your rights, you may contact Axaz by using the contact information stipulated in section 1 above. You are also entitled to lodge a complaint with a supervisory authority if you believe that Axaz' processing of your personal data is contrary to relevant data protection laws.
8. Changes to the privacy policy
If Axaz makes changes in the processing of personal data, this policy will be updated, and the change will be notified on our
webpage or by use of your contact information.
