Title Image

PRIVACY POLICY

Updated: 17.02.2025

 

1. Data protection – general information

 

1.1 Basics

We take the protection of your personal data very seriously. We process your personal data confidentially and in accordance with the European General Data Protection Regulation (GDPR), the Norwegian Personal Data Protection Act (Personopplysningsloven) and the Federal Data Protection Act (BDSG) of the Federal Republic of Germany. The term “personal data” in data protection law refers to all information that relates to a specific or identifiable person. This data protection declaration covers the general data protection provisions and the use of this website and the associated processing of personal data by the AMELSBERG GROUP.

 

1.2 Responsible body and data protection officer

The responsible body for data processing of the companies of the AMELSBERG GROUP is as follows:

 

AMELSBERG AS

Kjøita 25

4630 Kristiansand

Norway

 

T: +47-383-6005-0

E: mail[at]amelsberg.global

 

The responsible body is the natural or legal person who alone or jointly with others decides on the purposes and means of processing personal data. If you have any questions about this data protection declaration, please contact the responsible body directly using the contact information provided above.

 

You can reach our data protection officer by email at mail[at]amelsberg.global.

 

1.3 Purposes of processing your data

The legal term “personal data” refers to all information that relates to a specific or identifiable indivudual. We process personal data in compliance with the relevant data protection regulations, in particular the GDPR, the Norwegian Personal Data Protection Act (Personopplysningsloven) and the BDSG. We only process data on the basis of legal permission.

 

We only process personal data with your consent if the sole purpose of the processing is to carry out the transmission of a message over public communications networks, if the processing is absolutely necessary to provide a telemedia service expressly requested by the user, to fulfill a contract to which you are a party or, at your request, to carry out pre-contractual measures, to fulfill a legal obligation, if the processing is necessary to protect the vital interests of the data subject or of another natural person, or if the processing is necessary to safeguard our legitimate interests or the legitimate interests of a third party, unless your interests or fundamental rights and freedoms which require the protection of personal data prevail.

 

1.4 Collection of your data

Your data is collected when you provide it to us. This may, for example, be data that you enter in a contact form. Other data is collected automatically or with your consent when you visit the website by our IT systems. This is primarily technical data (e.g. Internet browser, operating system or time of page access). This data is collected automatically as soon as you access this website.

 

1.5 Rights regarding personal data

You have the following rights with regard to your personal data:

 

  • You have the right to request information about whether and, if so, to what extent we process personal data about you or not. You have the right to receive information about your personal data stored with us, its origin and recipient(s) and the purpose of the processing of your personal data.
  • You have the right to request that we correct your data.
  • You have the right to request that we delete your personal data.
  • You have the right to have the processing of your personal data restricted.
  • You have the right to receive the information concerning the personal data that you have made available to us in a structured, common and machine-readable format and to transmit this data to another responsible party. If you request that the data be transferred directly to another responsible party, this can only be done if it is technically feasible for us.
  • If you have given us separate consent to data processing, you can revoke this consent at any time and without giving reasons. Such a revocation does not affect the legality of the processing that was carried out on the basis of the consent until the revocation.
  • If you believe that the processing of personal data concerning you violates the applicable provisions, you have the right to file a complaint with the relevant supervisory authority, usually in the state of your habitual residence, place of work or place of the alleged violation. The right to file a complaint exists independent of other administrative or judicial remedies.

 

1.6 Storage period for personal data

Unless the following information states otherwise, we only store the data for as long as it is necessary to achieve the purpose of processing or to fulfill our contractual or legal obligations. As a general rule, we store your personal data for the duration of the usage or contractual relationship only.

 

However, storage may take place beyond the specified period in the event of a (threatened) legal dispute. We will store data in connection with consents that require proof and with complaints and claims for the duration of the statutory limitation periods. We will delete data stored for advertising purposes if you object to processing for this purpose.

 

In addition, storage obligations may arise, from commercial or tax law regulations, which result in longer storage. We will retain such personal data contained in our accounting records for ten years from the end of the calendar year in which the data was collected and will retain personal data contained in commercial letters and contracts for six years.

 

1.7 Data transfer to third countries

Our data processing may involve the transfer of certain personal data to third countries, i.e. countries in which the EU GDPR is not applicable law. Such a transfer is permissible if the European Commission has determined that an adequate level of data protection is offered in such a third country. If such an adequacy decision by the European Commission does not exist, personal data will only be transferred to a third country if suitable guarantees are in place or if the necessary requirements of the GDPR are met.

 

Unless otherwise stated below, we use the EU standard data protection clauses as suitable guarantees for the transfer of personal data to third countries.

 

As a safe third country, the USA generally has a level of data protection comparable to that of the EU. Data transfer to the USA is therefore permissible if the recipient has certification under the “EU-US Data Privacy Framework” (DPF) or has suitable additional guarantees.

 

The Norwegian Personal Data Protection Act (Personopplysningsloven) implements the EU General Data Protection Regulation into Norwegian law. Within the Norwegian legal area, we always treat personal data in accordance with the EU GDPR.

 

1.8 Recipients of personal data

We use contract partners or contract processors to process your data. The processing operations carried out by such contract processors include, for example, hosting, sending emails, maintenance and support of IT systems, accounting and billing or marketing measures.

 

A contract processor is a natural or legal person, authority, institution or other body that processes personal data on behalf of the data controller. Contract processors do not use the data for their own purposes, but carry out data processing exclusively for the controller and are contractually obliged to ensure suitable technical and organizational measures for data protection.

 

In addition, contract processors are contractually obliged to ensure the same level of data protection as we do. In addition, we may transmit your personal data to bodies such as our banks, tax consulting/auditing firm or the tax authorities.

 

1.9 Automated decision-making

Unless otherwise stated below, no automated decision-making (including profiling) takes place.

 

1.10 Right to object to direct advertising and profiling

If your personal data is processed for direct marketing purposes, you have the right to object at any time to the processing of personal data concerning you for the purpose of such advertising. If you object, your personal data will subsequently no longer be used for direct marketing purposes. This also applies to any profiling and automated decision-making.

 

1.11 Restriction of processing

You have the right to request that the processing of your personal data through us be restricted. You can contact us at any time to do so. The right to restrict processing exists in the following cases:

 

  • If you dispute the accuracy of your personal data stored by us, we usually need time to check this. For the duration of the check, you have the right to request that the processing of your personal data be restricted.
  • If the processing of your personal data was/is unlawful, you can request that the data processing be restricted instead of deleted.
  • If we no longer need your personal data, but you need it to exercise, defend or assert legal claims, you have the right to request that the processing of your personal data be restricted instead of deleted.
  • If you have objected to the processing of your personal data and the objection has not been finally resolved.

If you have restricted the processing of your personal data, this data may – with the exception of its storage – only be processed with your consent or for the establishment, exercise or defense of legal claims or to protect the rights of another natural or legal person or on the basis of applicable laws.

 

2. Data processing through our website

 

2.1 General

When you use this website, various personal data will be collected. When you use the website, we generally collect information that you provide yourself. In addition, during your visit to the website, we automatically collect certain information about your use of the website, including your IP address. In data protection law, the IP address is also generally considered personal data. An IP address is assigned to every device connected to the Internet by the Internet provider so that it can send and receive data.

 

It needs to be considered that data transmission using the Internet or IP-based services (e.g. when communicating by email) can generally have security gaps. Complete protection of data against access by third parties is not possible.

 

2.2 Use of your data

Some of the data is collected to ensure that the website is provided without errors. Other data can be used to analyze your user behavior. If contracts can be concluded or initiated via the website, the transmitted data will also be processed for contract offers, orders or other order inquiries.

 

2.3 Hosting

The provider of the hosting services we use for our web site is IONOS SE, Elgendorfer Str. 57, 56410 Montabaur, Germany (hereinafter IONOS). When you visit our website, IONOS records various log files including your IP addresses. Details can be found in the IONOS privacy policy:

 

https://www.ionos.de/terms-gtc/terms-privacy.

 

IONOS is used on the basis of the EU General Data Protection Regulation (GDPR). We have a legitimate interest in presenting our website as reliably as possible. If a corresponding consent has been requested, processing will take place exclusively on the basis of the GDPR mentioned above and insofar as the consent includes the storage of cookies or access to information in the user’s end device (e.g. device fingerprinting). Consent can be revoked at any time.

 

We have concluded a data processing agreement for the use of the above-mentioned service. This is a contract required by data protection law that ensures that the personal data of our website visitors is only processed in accordance with our instructions and in compliance with the GDPR.

 

2.4 Server log files

When you use our website for informational purposes, general information that your browser transmits to our server is initially stored automatically (i.e. not via registration or you entering your data in a form). This includes, as standard, browser type/version, operating system used, the web page accessed, the previously visited page (referrer URL), IP address, date and time of the server request and an HTTP status code.

 

The processing is carried out to protect our legitimate interests and is based on the applicable legal basis. If the processing of the data requires the storage of information in your terminal device or access to information that is already stored in the terminal device, the storage is also based on the applicable legal basis.

 

This processing serves the technical administration and security of the website. The stored data is deleted after 30 days by default, unless there is a reasonable suspicion of illegal use based on concrete evidence and further examination and processing of the information is necessary for this reason. We are not able to identify you as the data subject based on the stored information.

 

2.5 SSL or TLS encryption

This site uses SSL or TLS encryption for security reasons and to protect the transmission of confidential content, such as inquiries or contact details that you as a user send to us as the site operator. You can recognize an encrypted connection by the fact that the address line of the browser changes from “http://” to “https://” and by the lock symbol in your browser line.

 

If SSL or TLS encryption is activated, the data that you send to us under normal conditions cannot be read by third parties.

 

2.6 Cookies

Our websites use so-called “cookies”. Cookies are small data packets and do not cause any damage to your device. They are either stored temporarily for the duration of a session (session cookies) or permanently (permanent cookies) on your device. Session cookies are automatically deleted at the end of your visit. Permanent cookies remain stored on your device until you delete them yourself or they are automatically deleted by your web browser.

 

Cookies can come from us (first-party cookies) or from third-party companies (so-called third-party cookies). Third-party cookies enable the integration of certain services from third-party companies within websites (e.g. cookies for processing payment services).

 

Cookies have various functions. Many cookies are technically necessary because certain website functions would not work without them (so-called technically necessary cookies, e.g. for displaying videos). Other cookies can be used to evaluate user behavior or for advertising purposes.

 

Cookies that are required to carry out the electronic communication process, to provide certain technical functions you require or to optimize the website (e.g. to measure website usage) (necessary cookies) are stored on the basis of applicable laws, unless another legal basis is specified. We have a legitimate interest in storing necessary cookies to ensure technically error-free and optimized provision of its services. If consent to store cookies and similar recognition technologies has been requested, processing will be carried out exclusively based on this consent, and consent can be revoked at any time.

 

You can configure your browser settings so that you are informed about the setting of cookies and only allow cookies in individual cases, exclude the acceptance of cookies for certain cases or in general, and activate the automatic deletion of cookies when closing the browser. If cookies are deactivated, the functionality of this website may be restricted.

 

2.7 Contact form; inquiries by email or telephone

If you send us inquiries via the contact form or contact us by email or telephone, your details from the inquiry form, including the contact details you provided there, or your written or telephone inquiry, including all personal data resulting from it (name, inquiry) will be processed by us for the purpose of processing your request and stored by us in the event of follow-up questions. We will not pass on this data without your consent.

 

This data is processed on a legal basis if your inquiry is related to the fulfillment of a contract or is necessary to carry out pre-contractual measures. In all other cases, the processing is based on our legitimate interest in the effective processing of the inquiries addressed to us or on your consent. Consent can be revoked at any time.

 

The data you enter in the contact form will remain with us until you request us to delete it, revoke your consent to storage or the purpose for storing the data no longer applies (e.g. after your inquiry has been processed). Mandatory legal provisions – in particular retention periods – remain unaffected.

 

2.8 Plugins and tools

This website uses plugins and tools from various providers. Below you will find a description of the tools and plugins used and the relevant data protection information.

 

2.8.1 Google Fonts (local hosting)

This site uses so-called Google Fonts for the uniform display of fonts. A font is generally any type set that is available digitally on a computer or connected peripheral. Google Fonts are provided by Google. The Google Fonts for this website are installed locally. There is no connection to Google servers when the fonts are displayed on our web site.

 

Further information about Google Fonts can be found at

https://developers.google.com/fonts/faq and in Google’s privacy policy:

https://policies.google.com/privacy?hl=de.

 

2.8.2 hCaptcha

We use the hCaptcha tool (hereinafter “hCaptcha”) on this website. The provider is Intuition Machines, Inc., 2211 Selig Drive, Los Angeles, CA 90026, USA (hereinafter “IMI”).

 

hCaptcha is intended to check whether the data entry on this website (e.g. in a contact form) is carried out by a human or by an automated program. To do this, hCaptcha analyzes the behavior of the website visitor based on various characteristics.

 

This analysis begins automatically as soon as the website visitor enters a website with hCaptcha activated. For the analysis, hCaptcha evaluates various information (e.g. IP address, length of time the website visitor spends on the website or mouse movements made by the user). The data recorded during the analysis is forwarded to IMI. If hCaptcha is used in “invisible mode”, the analyses run completely in the background. Website visitors are not informed that an analysis is taking place.

 

The data is stored and analyzed on a legal basis. We have a legitimate interest in protecting our web offerings from abusive automated spying and SPAM. If consent has been requested, processing will only take place on a legally permissible basis, provided that the consent includes the storage of cookies or access to information on the user’s device (e.g. device fingerprinting). Consent can be revoked at any time.

 

Data processing is based on standard contractual clauses contained in the data processing addendum to IMI’s general terms and conditions or the data processing agreements.

 

For more information about hCaptcha, please see the privacy policy and terms of use at the following links:

https://www.hcaptcha.com/privacy and https://hcaptcha.com/terms.

 

The company is certified according to the “EU-US Data Privacy Framework” (DPF). The DPF is an agreement between the European Union and the USA that aims to ensure compliance with European data protection standards when processing data in the USA. Every company certified under the DPF undertakes to comply with these data protection standards. You can obtain further information from the provider at the following link: https://www.dataprivacyframework.gov/participant/6388.

 

2.9 Social media networks

We may maintain publicly accessible profiles on social networks. Social networks such as LinkedIn etc. can generally analyze your user behavior comprehensively when you visit their website or a website with integrated social media content (e.g. like buttons or advertising banners). Visiting our social media presences provided by these providers triggers numerous data protection-relevant processing operations.

 

2.9.1 Data processing by social media networks

If you are logged into your social media account and visit our social media presence, the operator of the social media portal can assign this visit to your user account. However, your personal data may also be recorded if you are not logged in or do not have an account with the respective social media portal. In this case, this data is collected, for example, via cookies that are stored on your device or by recording your IP address.

 

Using the data collected in this way, the operators of the social media portals can create user profiles in which your preferences and interests are stored. In this way, interest-based advertising can be displayed to you inside and outside of the respective social media presence. If you have an account with the respective social network, the interest-based advertising can be displayed on all devices on which you are logged in or were logged in.

 

Please also note that we cannot fully track data processing conducted through social media portals. Depending on the provider, further processing operations may therefore be carried out by the operators of the social media portals. Details can be found in the terms of use and data protection provisions of the respective social media portals.

 

2.9.2 Legal basis

Our social media presence is intended to ensure the most comprehensive possible presence on the Internet. This is a legitimate interest. The analysis processes initiated by the social networks may be based on different legal bases, which must be specified by the operators of the social networks.

 

If you use social networks with or without a specific user account, the terms of use and data protection provisions of the respective provider apply, over which we have no influence. We are not liable for you entering into a user agreement with another contracting party and are not responsible for the actions or provisions of the social media providers.

 

2.9.3 Storage period

The data we collect directly via the social media presence is deleted from our systems as soon as the purpose for storing it no longer applies, you request deletion, revoke your consent to storage or the purpose for storing the data no longer applies. Any cookies stored by the social media provider remain on your device until you delete them. Mandatory legal provisions – in particular retention periods – remain unaffected.

 

We have no influence on the storage period of your data, which is stored by the operators of the social networks for their own purposes. For details, please contact the operators of the social networks directly (e.g. through their privacy policy, see below).

 

2.9.4 Social media profile: LinkedIn

We have a profile on LinkedIn. The provider is LinkedIn Ireland Unlimited Company, Wilton Plaza, Wilton Place, Dublin 2, Ireland. LinkedIn uses advertising cookies.

 

If you would like to deactivate LinkedIn advertising cookies, please use the following link:

https://www.linkedin.com/psettings/guest-controls/retargeting-opt-out.

The data transfer to the USA is based on the standard contractual clauses of the EU Commission.

 

You can find details here:

https://www.linkedin.com/legal/l/dpa and

https://www.linkedin.com/legal/l/eu-sccs

You can find details on how they handle your personal data in LinkedIn’s privacy policy:

https://www.linkedin.com/legal/privacy-policy

 

3. Update and source reference

This data protection information can be updated and revised at any time. The current version published on this website with the respective change status applies.

 

Source of this data protection declaration (in excerpts): https://www.e-recht24.de

 

Revision Date: 17.02.2025