Data Policy

Privacy Statement

Personal data is information that can be linked to you as a person. It is important that you know what kind of personal data TOPRO Industri AS process about you, so that you can safeguard your rights under the data protection legislation. In this statement, you can read more about when and how we process personal data about you.

Data Controller

TOPRO Industri AS is the data controller for all personal data we process, this also applies to all our branches and subsidiaries internationally. This means that TOPRO Industri AS has the responsibilities and obligations under the General Data Protection Regulation (GDPR). If you have any questions related to the privacy policy or our responsibility as data controller, please contact Data Protection Officer in TOPRO Industri AS, at privacy@topromobility.com.

Personal data we process and information about the data collection:

All personal data we have about you, is data you have provided to us. This may also include data we have received from public agencies to provide the services to which you are entitled. We do not use any data other than what is strictly necessary to perform our work or provide the service or product you have ordered. We will only share your personal data with other providers if the data is necessary for them to perform their tasks and if public organizations request and have the right to access your data. In such cases, your data is secured by our data processing agreement. We will not keep your data for longer than necessary.

We may receive personal information from you in the following cases:

• If you buy goods or services from us, through online stores or customer portals.
• Contact our customer centre through forms on our website, send an e-mail or call us.
• If you apply for a job, both unsolicited and through job advertisements.
• If you use our website.
• If we may receive personal data from other sources when you encounter us via the public sector or our partners/suppliers.

Sharing your personal data with us is voluntary. However, certain information may be necessary to perform a service or agreement you have entered with us.

This is the data we can collect; its purpose, legal basis, data nature and retention time after last interaction:

We have secured your personal data through data processing agreements, where applicable. Where we must transfer data to a third country when this is necessary to deliver the service, this is secured with an SCC.

Processing of personal information

• We make every effort to ensure that all personal information is as up-to-date and accurate as possible. You can contact us at any time and ask for corrections if you believe the information we have about you is incorrect or incomplete.
• We have established routines and measures to protect your personal data, and all processing of the data takes place in accordance with applicable law. The measures include, among other things, risk assessments, technical systems and physical procedures to ensure information security, routines for verifying access and correction requests, and notification routines if a breach of the General Data Protection Regulation occurs.
• We regularly delete all unnecessary personal information in our systems and only store your personal information for as long as it is necessary for the fulfillment of the purposes of the processing of the information. However, this does not apply if storage is required by law for a longer period than the purpose indicates.

Your rights

The General Data Protection Regulation gives you the following rights:

• The right to see your personal data
• The right to ask for corrections. If something is wrong, we will correct this.
• The right to be deleted. This can be affected by our duties in relation to accounting law, or other regulations and laws, as we aren’t able to delete information before we’ve carried out our duties.
• The right to limit what we collect. Have we collected too much information? Let us know!
• The right to data portability. Do you wish to move your personal data? We can arrange this.
• The right to protest. If you disagree with how we use your data, then let us know.
• The right to complain. If you would like to complain, please let us know. You also have the right to complain to your Data Protection Authority. The link to the authorities you will find here: https://www.edpb.europa.eu/about-edpb/about-edpb/members_en#member-EDPS

If you would like to exercise any of your rights mentioned above, or if you have any questions about how we handle the General Data Protection Regulation, our privacy statement or other questions about your personal data, please contact us by e-mail: privacy@topromobility.com.