Personal Data Protection (GDPR) at Veidekke

Introduction

This information tells how Veidekke ASA (org. no.: 917 103 801) and its subsidiaries collect and use personal information about you as visitors.

Veidekke is concerned that you should feel secure when you visit our website and that your personal information is handled appropriately. If you have any questions, you will find the contact info at the end of this document.

Veidekke’s Group CEO is responsible for the enterprise’s processing of personal data. The managing director/general manager of each company is the data controller. Wherever daily responsibility is delegated, this appears under each individual point.

Such delegation applies only to the duties and not the responsibility. This document provides information about your entitlements when information is gathered about you from our website, general information about how we process personal data, what your rights are, and where to contact if you have any questions regarding the rules for Privacy Protection/GDPR (General Data Protection Regulation).

 

1 Processing of personal data on Veidekke’s and its subsidiaries' websites.

The web editor has the daily responsibility for Veidekke’s processing of personal data on Veidekke’s and its subsidiaries' websites, unless otherwise stated below.

It is voluntary for visitors to the website to provide personal data in connection with services, such as receiving newsletters. The basis for the data processing is the consent of the individual, unless otherwise specified.

Iterate is the Veidekke’s data controller for the web pages, and is our provider for the development and maintenance of the website.

Evry is our systems operator for the web pages veidekke.no, veidekke.com, stalbygg.no, blockberge.no, valdresbygg.no, and asphaltcoredams.com. For www.veidekkebolig.no, separate documentation is available regarding personal data.

Information collected in connection with the operation of the website is stored on separate servers operated by the provider. Only Veidekke and Evry have access to the information collected. A separate data processing agreement between Veidekke and Evry regulates what information the provider has access to and how it should be handled

 

1.1 Web statistics

Veidekke gathers de-identified information about visitors to the web pages mentioned in point 1.

The aim of this is to develop statistics that we use to improve and further develop the information offered on our websites. We can see how many people visit different pages, how long the visit lasts, what websites users come from and what browsers are used.

The information is handled in de-identified and aggregated form. De-identified means that we cannot trace the information we collect back to each individual user. We collect the full IP address, but the IP address is de-identified so that only the first three groups in the address are used to generate statistics. That is, if the IP address consists of the numbers 195.159.103.82, only 195.159.103. xx will be used.

In addition, the IP addresses are processed at the aggregate level, meaning that all data is merged into a group and is not individually processed. We use the Google Analytics analysis tool and GA Audiences on our websites.

These are open source tools (GPL) installed on a dedicated server at the service provider. Information from this tool is not divulged from Veidekke to other players. Access to Google Analytics is provided to the media agencies with which Veidekke has an agreement, for the purpose of analysing statistics.

 

1.2 Cookies

Veidekke uses cookies in order to remember who you are and to provide you with the best user experience. We are required by the EU to inform you of this. By browsing Veidekke’s web pages, it is considered that you have given your consent.

Cookies are small text files placed on your computer when you download a website. Storage of data and processing of this data is not permitted unless the user has both been informed about,and has given consent to, the processing.

The user is entitled to know about and approve what data is being processed, the purpose of the processing and who processes the data, cf. Internet Neutrality Act Section 2-7b. The following cookies are used on Veidekke’s web pages:

 

Advertising:

Doubleclick
Facebook custom audiences
Facebook pixel


Essential:

Google Tag Manager


Site Analytics:

Google Analytics
GA Audiences


Social media:

Facebook connect

 

How to manage cookies (nettvett.no)

 

1.3 Search

Veidekke stores information about which keywords visitors are using in the Google Analytics search tool.

The purpose of the processing is to improve the content of the web pages based on searches that do not have hits, but which are relevant. The search usage pattern is stored in a separate database, and is stored only in aggregated form.

Only the keyword is saved and cannot be linked to any other information about the user, such as the IP address.

 

1.4 Search employment

Applications must be submitted via our recruitment portal at www.veidekke.no/jobb.

When you wish to seek employment with Veidekke, you are asked to give your consent to the processing of your personal data. Required personal data to be collected is your name, address, email and phone number. Information about the storage time of your application is stated on the consent form.

 

1.5 Newsletter

Veidekke and its subsidiaries do not send out newsletters on their web pages.

 

1.6 Requests for services

On some of Veidekke’s web pages, it is possible to submit forms with requests for services, such as asphalt paving. Here can you post your contact information and a brief description of the desired service. This information is entered in Veidekke’s email system and is processed as described in step 2.

 

1.7 Subscribe to press releases

At Veidekke.no and Veidekke.com you can subscribe to press releases.

Veidekke then registers name, company, email and telephone, and automatically sends out press releases to the provided email address. You can cancel your subscription at any time by following this link. Only the email address is required information.

 

2 Email and telephone

Veidekke uses email and telephone as part of its daily work.

Relevant information emerging from telephone calls and email exchange is recorded and processed only for the purpose for which they are obtained. Veidekke’s staff also use email in general dialogue with internal and external contacts.

Each employee is responsible for deleting messages that are no longer relevant, and at least every year go through and delete unnecessary content in their email box. On termination of employment, email accounts are deleted, but some relevant emails will normally be transferred to colleagues. Sensitive personal data should not be sent by email.

Please note that regular email is unencrypted. We therefore encourage you not to send secret, sensitive or other confidential information via email.

 

3 Social media

3.1 Facebook

Veidekke has several Facebook pages that each company is responsible for. Veidekke uses Facebook pages to communicate with potential customers, and for interested parties to obtain information about Veidekke, and obtain answers to any questions. Job ads are also posted, and visitors are able to ask questions about them. Do not post sensitive information about yourself, or personal information about others. Veidekke looks through all comments and deletes inappropriate posts.

 

3.2 Instagram

Veidekke has several Instagram accounts that the different parts of the company are responsible for. Veidekke uses the accounts for marketing and communication with potential customers, employees and partners. Do not post sensitive information about yourself or personal information about others in the comments section. Veidekke looks through all comments and deletes inappropriate posts.

 

3.3 LinkedIn

Veidekke in Norway has a LinkedIn page. It is used to communicate with potential employees and to give those interested the opportunity to see useful information on Veidekke and receive answers to any questions. Job ads are also posted and visitors have the opportunity to ask questions about them. Do not post sensitive information about yourself or personal information about others. Veidekke looks through all comments and deletes inappropriate posts.

 

3.4 Twitter

Veidekke in Norway has a Twitter account. Veidekke uses the account for marketing and communication with potential customers, employees and partners. Twitter works so that it is not possible to add comments to another person's or company’s account.

 

4 Rights

Anyone who asks is entitled to receive basic information on the processing of personal data in an enterprise.

Veidekke has provided this information in this document, and will refer to it if any requests are received. Anyone registered in any of Veidekke’s systems is entitled to have access to their own information.

They also have the right to require that incorrect, incomplete or information that Veidekke is not permitted to process is rectified, deleted or supplemented. Complaints from registered parties will be responded to at no cost and by no later than 30 days.

The registered party can contact Veidekke’s independent Data Protection Officer, and alternatively contact the Norwegian Data Protection Authority if desired. If the processing of personal data is based on consent, this can be withdrawn at any time. This will not affect the processing that has occurred prior to the consent being withdrawn.

 

5 Contact information

Email: personvern@veidekke.no