NVE-RME (Org. No. NO 970 205 039), with ultimate responsibility resting with the Director General, is the data controller for your personal data. The data controller determines the purpose of processing personal data and the means to be used.
If you have questions related to NVE-RME’s processing of your personal data or this privacy statement, wish to lodge a complaint or raise a concern related to NVE-RME’s, please contact us at rme@nve.no
News subscription
You can subscribe to our news service by registering your e-mail address on our Norwegian website (see footer). Your e-mail address are stored in the website’s publication solution and are therefore not available to anyone other than the solution administrators. The e-mail you receive from us will contain a link to “your page” where you can view all your subscriptions and decide if you want to stop one or more subscriptions. When you unsubscribe, the information about you will also be deleted.
If you have any questions about your news subscription, please send us an e-mail: rme@nve.no
When you visit our webiste, NVE-RME may process the following information about you
NVE-RME will be able to collect and store your IP address (the number that identifies your computer or other equipment on the Internet) and other information about your computer for system administration and statistical purposes (e.g. to calculate the number of visitors to our website), based on NVE-RME’s legitimate interest in improving and administering our website. We will only store your IP address for the period during which you visit the website; then it will be deleted or anonymised.
Cookies and web statistics
When you visit our website, your browser communicates certain electronic information. We use this information to improve the content of our website. As a visitor to our website, you may voluntarily provide personal data such as your e-mail address if you wish to subscribe to our news alerts. Our web editor has day-to-day responsibility for processing personal data on our website. Epinova is our service provider for the publishing solution.
With a view to improving the content of our website, we use the Google Analytics analysis tool and Siteimprove to collect statistics on our visitors and their usage patterns. Google Analytics and Siteimprove uses what are known as cookies, which are small text files stored in your browser’s internal memory when you visit a website. The most common browsers are set up to accept cookies automatically, but you can change this setting in your browser yourself.
As a visitor to our website, you have the right to know which data we are collecting about you, (ref. Section 2-7b of the Norwegian Act relating to electronic communications). The table below presents an overview of the cookies used on our website, and what they are used for:
NVE uses these information capsules:
8D697695-9132-49B8-A489-BFBC3D7C3313 100
UMB_UCONTEXT
UMB_UPDCHK
XSRF-TOKEN
XSRF-V
__atuvc
__utma
_ga
_gat
nmstat
From time to time NVE-RME’s website may contain links to other websites. When you follow one of these links, you leave NVE-RME’s website. These third party websites have their own privacy statements that determine how the website is operated and how data is collected and processed, and whether the website stores cookies and other tracking technology on your computer.
NVE-RME is not responsible for third party websites, how they operate and how they process your personal data. We recommend that you read the privacy statements and terms of use on third-party websites when you visit and use these websites.
When you like or follow our Facebook page or our other social media accounts, this will be shared with the given platform. The same applies to other activity on our social media pages, such as content you post and posts you like. The given platform will be responsible for the personal data it collects and processes. You can find more information about this processing and your rights in the given platform’s privacy statement.
NVE-RME stores your personal data as long as it is necessary to achieve the purposes for which the personal data was collected, as defined in this privacy statement. This means that, as a rule, NVE-RME will delete your personal data if you unsubscribe from our newsletter and/or news alerts or otherwise inform us that you wish to have your personal data deleted.
However, we note that legal obligations, such as statutory requirements for continued storage of data for accounting purposes may necessitate continued storage of your personal data. We may also continue to store your personal data if such storage is necessary to safeguard NVE-RME’s or a third party’s legitimate interests, including for the purpose of establishing, exercising or defending a legal claim.
NVE-RME stores the data for the following periods:
- Documentation obtained during control activities is deleted once the control has been completed, provided that the information shows that the employees covered by the request for access to information are receiving at least the pay and working conditions as stipulated by statutory regulations. If the documentation shows a discrepancy, the documentation will be retained until the discrepancy has been rectified and the case has been closed.
- Reports from controls will be retained for as long as is necessary to continuously monitor suppliers, including evaluating suppliers’ results against previous results.
The data may also be stored for a longer period than indicated above if such continued storage is required to:
- determine, invoke or defend a legal claim,
- safeguard NVE-RME’s legitimate necessary interests, such as potential dispute with a supplier
- fulfil statutory requirements, including requirements for continued storage under accounting legislation, the Norwegian Security Act and the Norwegian Archive Act.
NVE-RME is subject to statutory requirements to control subcontractors’ pay and working conditions, pursuant to the Norwegian Procurement Act, the Norwegian Regulations concerning pay and working conditions in government contracts, the Norwegian General Applications Act, the Norwegian Regulations on the obligation to provide information, the obligation to ensure compliance, and the right of inspection, and the Norwegian Construction Client Regulations.
In order to comply with this statutory obligation to control and ensure compliance, NVE-RME may process the following information about employees, temporary personnel or apprentices working at our suppliers and subcontractors:
- Contact details and other identifying information, including names, addresses, National Identification Numbers or D-numbers, gender, citizenship etc.
- Employment and assignment contracts
- Information on pay and working conditions, including time sheets and working hours, pay and supplements (overtime supplements, shift and rota supplements and inconvenience supplements), payroll deductions and coverage of expenses related to travel, board and lodging, insurance and other employment information.
We collect the information from the supplier, and if relevant from the subcontractor and the data subject in connection with such controls.
NVE-RME will also process personal data for certain other purposes, including in connection with the following:
- NVE-RME is required to have systems that facilitate contact with the licensees. Access to such systems requires registration, and NVE-RME will process certain personal data about individual users at the various licensees, such as name and e-mail address, in connection with the creation of user accounts and administration of the system. The processing is necessary to provide the user access to the system, as well as to safeguard NVE-RME’s legitimate interests with regard to system maintenance and system improvement.
- NVE-RME is responsible for energy regulation, and will undertake various construction works in connection with improvements, maintenance and development of facilities and installations. In connection with such construction work, NVE-RME will issue various notifications etc. to the area affected by the work, which requires NVE-RME to process certain personal data, including contact details such as name and e-mail address. The legal basis for the processing will vary depending on the situation, but will normally be based on the consent of the data subject, which is obtained in connection with the data subject requesting to receive such information.
- Anyone who wishes to submit proposals for R&D projects may do so on NVE-RME’s website. In order to follow up relevant proposals and communicate with those submitting proposals, NVE-RME requires the contact details of the person submitting the proposal, including name, e-mail address, telephone number and any organisation with which the person is affiliated. It is necessary to process this personal data in order to follow up the proposal with a view to entering into a potential cooperation agreement, as well as to safeguard NVE-RME’s legitimate interest in assessing the quality etc. of the proposal.
- NVE-RME will also process certain personal data in connection with recruitment. All recruitment to NVE-RME will take place through NVE-RME’s dedicated recruitment system, as stated in the individual job advertisement. A separate privacy statement concerning recruitment is available in this system.
NVE-RME will store this personal data for as long as necessary to achieve the purposes as defined above. Note that continued storage may also be necessary to fulfil the statutory obligations to which NVE-RME is subject or as a result of NVE-RME’s legitimate interests, including for historical purposes or if it is necessary to determine, invoke or defend a legal claim.
NVE-RME may disclose your personal data to third parties within the framework of the purposes stated in this privacy statement, provided that NVE-RME has a legal basis for this disclosure. For example, your personal data may be disclosed to public authorities to comply with statutory requirements (e.g. to the Norwegian Labour Inspection Authority in connection with inspections of pay and working conditions).
NVE-RME may disclose your personal data to suppliers who perform services for NVE-RME, for example, suppliers of e-mail services, system suppliers etc. Suppliers process personal data on behalf of NVE-RME and in accordance with established agreements, and will only use the personal data for the purposes for which the data has been obtained. NVE-RME will ensure that all suppliers meet the requirements for satisfactory security for your personal data.
All of processing of our users’ personal data takes place within the EU/EEA.
NVE-RME takes your privacy seriously and we have implemented appropriate technical and organisational security measures to protect your personal data against breaches of personal data security, unauthorised access to and disclosure of personal data.
You have the right to request access to and correction or deletion of the personal data we process about you. Furthermore, you also have the right to request limited processing, to object to processing and, in some consent, you may withdraw your consent for our processing of personal data at any time. If you wish to exercise your rights, please contact NVE-RME by e-mail at rme@nve.no.
You also have the right to submit a complaint about our processing of your personal data to the Norwegian Data Protection Authority.
NVE-RME will from time to time make amendments to this privacy statement. An updated version of NVE-RME’s privacy statement will be available on our website at all times. We encourage you to visit our website regularly to keep up to date on the current privacy statement. If we change how we process personal data, this statement will be updated and we will notify this change on our website or by using your contact details.