Privacy Notice

In connection with your participation at the THREE60 Energy Network Portal (the “Portal”), THREE60 Energy (hereby referred to as “THREE60“) will, as a data controller, collect and process personal data about you for the purposes specified below. THREE60 processes your personal data in accordance with the principles in EU’s General Data Protection Regulation (“GDPR”) and the Norwegian Personal Data Act.

Therefore, please read this text carefully in order to understand how we process your personal data.

Topics:

Which data do we collect about you and for which purposes
The legal basis for the collection and processing of your personal data
From whom do we collect your personal data?
Who do we share your personal data with and why?
How long do we store your data?
Your rights
Contact
Revision of our privacy notice

Which data do we collect about you and for which purposes

We collect and process the following types of personal data:

name;
photo;
e-mail address;
employer
title;
office location; and
employment and education details (e.g. previous employment and education details, previous engagements)

The personal data listed above is collected and processed for the following purposes:

development in the well industry
competence building and skills upgrading
sharing knowledge and experience
communication within THREE60 Energy on-line Portal Development

The legal basis for the collection and processing of your personal data

We collect and process your data based on the following legal basis:

Performance of a contract, see GDPR article 6 paragraph 1 (b);
The legitimate interests of THREE60; see GDPR article 6 paragraph 1 (f)

The legitimate interests pursued by THREE60 include the following purposes:

secure continuity in the THREE60 Energy Group and retain the knowledge

The Portal is established to share knowledge and experience, for members to communicate. To make this communication possible THREE60 has to process personal data concerning the users of the Portal. The basis for processing personal data is a contract between THREE60 and the users of the Portal. In the Portal users can upload files, have online discussions etc. The users can deactivate their account, e.g. if the user ends his/hers employment with one of the companies in the THREE60 Group. To prevent interruption of continuity and loss of important knowledge THREE60 have a legitimate interest in keeping the files, comments etc. that the former user has published or posted in the Portal also after the user has deactivated their profile.

From whom do we collect your personal data?

We collect your personal data from you and your employer.

Who do we share your personal data with and why?

In connection with one or more purposes outlined above, your personal data may be disclosed to and shared with the following recipients:

public authorities; and
our professional advisors (e.g. auditor and legal advisors).

Who do we transfer your personal data to?

Transfer of personal data to data processors

We may transfer your data to IT providers, including cloud service providers, or to vendors of external services, who process and /or store the personal data on our behalf.

Transfer of personal data to data controllers

We may transfer your personal data to other data controllers, e.g. if THREE60 has a obligation to transfer the data to public authorities.

Transfer of personal data to recipients in countries outside the EU/EEA

We may transfer your personal data to recipients located in countries outside the EU/EEA for the purposes listed in section 1. The transfer may only take place if there are an adequate level of protection in place. The basis for the international transfer is either EU’s Model Clause Agreement, or the US Privacy Shield Certification.

How long do we store your data?

We store the personal data for as long as necessary to fulfil the purposes above, however, only as long as the consent is existing and not withdrawn, and/or for no longer than we would have a legitimate interest. Your personal data will be deleted in accordance with the specific retention policies for personal data.

Your rights

Subject to the conditions set out in the applicable Data Protection legislation, you enjoy the rights set out below. In the following, you can read about your rights, and how to perform them.

The right to request access to your personal data

You can send us a request for access to get information about whether we process personal information about you in connection with your membership in the Portal and thus gain insight into what information we process about you if you are registered.

The right to rectification of your personal data

If you believe the information we have stored about you is incorrect (e.g. new phone number or change of position or employment) you can request that we correct this at any time.

The right to erasure of your personal data

You can withdraw your consent to process personal data at any time. If you withdraw your consent, we will delete your personal information that is processed on this basis.

If you request erasure of your personal data, the data will be deleted. However, the right to erasure is not absolute, as it should be balanced against legal requirements and THREE60’s legitimate interest.

The right to restriction of processing

If you do not wish us to delete your information but want us to stop processing them in ways other than storage, you may, under certain circumstances, have the right to request this.

The right to data portability

According to Article 20 of the GDPR you have the right to data portability for personal information about yourself that you have given to THREE60 and which has a basis for processing in consent or agreement. If you wish to exercise your right to portability, the relevant information from your profile will be exported to a Microsoft Excel document and handed over to you.

The right to objection to the processing of your personal data

You have the right to object to processing of personal data concerning you, where the processing is based on legitimate interest of THREE60 or public interest. If so, THREE60 will no longer process your personal data unless there is a legitimate ground for doing so which, according to a balancing test, is overriding.

The right to lodge a complaint

You also have the right to lodge a complaint with the competent supervisory authority. In Norway this is ‘Datatilsynet’ (the data protection authority). Complaints can be submitted on their websites by following this link: datatilsynet.no

Contact

If you have any questions in regard to the protection of your personal data or if you wish to exercise your legal rights, please contact us by sending an e-mail to three60network@ridge.no

This information was updated 29.10.20 and we will update this page with a new date should we make any amendments to our Privacy notice.