Last updated [
Axaz AS (org. no. 926 559 745) ("Axaz
Axaz process among others personal data relating to contact persons at its customers, service providers and business partners, potential candidates and others who contact Axaz or visits our webpage. The personal data may be provided by the data subject itself, from publicly accessible sources or third parties such as service providers, partners etc.
We may process your personal data in connection with the following processing activities:
- Conntractual relationship:
In a contractual relationship between Axaz and individuals, personal data may be necessary to the execution or the performance of the contract (GDPR Article 6 (1) (b)), such as contact information and other personal data necessary to fulfill the contract.
- Contract management and business relationship:
In connection with the administration and management of contracts with Axaz' customers, business partners etc. and for business and partner relationship purposes, Axaz may process personal data such as contact information of contact persons at such customers, business partners, in addition to personal data contained in contracts, ongoing commercial correspondence, invoices, minutes of meeting etc. The legal basis is Axaz' legitimate interest in entering into business relationships, fulfil contracts and administrate such relationship (GDPR Article 6 (1) (f)).
- Respond to inquiries:
Axaz may process personal data in order to follow-up inquiries from potential candidates, website users, and others who contact Axaz. Axaz may process personal data such as contact information and other personal data provided in connection with the inquiry. The legal basis for such processing is Axaz' legitimate interest in providing support to answer and manage inquiries and other communication (GDPR Article 6 (1) (f)).
- Use of Axaz' website:
- Marketing, newsletters etc.;
If you have signed up for marketing or our newsletter, we may process your name, contact information etc. in order to submit such materials to you. Such processing is based on your consent (GDPR Article 6 (1) (a)).
If you apply to a position in Axaz, Axaz may process your personal data in order to assess your application such as CV, application, certificates, references and other information you may provide or which we need to verify to assess your application. The legal basis for such processing is normally that it is necessary in order to take steps at the request of the candidate prior to (potentially) entering into an employment contract. The processing may also be based on our legitimate interest in finding the best candidate for the position (GDPR Article 6 (1) (f)), or your consent (GDPR Article 6 (1) (a)).
- Ensure compliance and legitimate interests:
Axaz may also process personal data in order to comply with statutory obligations to which Axaz is subject, and to safeguard own or third parties’ legitimate interests, e.g. in relation to establishing a legal claim or preventing unauthorized access to or disclosure of personal data GDPR Article 6 (1) (f)).
- Legal obligations:
Axaz may process personal data due to legal obligations applicable to the operation of Axaz (GDPR Article 6 (1) (c)), such as accounting obligations.
Axaz may, on a case-by-case basis, process personal data for other purposes and rely on different legal grounds, such consent or legitimate interest or, in accordance with applicable data protection law, as set forth in an applicable privacy notice.3. Retention period
Axaz will retain your personal data for as long as it is necessary to fulfil the purposes for processing as defined above. If the processing is based on consent, the processing will cease when you withdraw your consent. You can withdraw your consent at any time.
For applicants for positions with us, we will store the personal data as long as the recruitment process is ongoing. If the applicant is not employed, we will delete the personal data no later than one year from the position was filled, unless consent has been given for further storage.
Please note that continued storage may be necessary due to statutory obligations to which Axaz is subject to e.g. statutory rules related to storage for accounting purposes, or due to Axaz' legitimate interests, e.g. for the purpose to establish, exercise or defend a legal claim.4. Disclosure to third parties
We will only disclose your personal data to third parties to the extent we have a legal basis for such disclosure.
We use data processors to collect, store and otherwise process personal data on our behalf. The relationship to such suppliers is governed by a data processor agreement, which inter alia ensures information security for your personal data.
Axaz may process and store your personal data outside the EU/EEA. All processing in a third country will be subject to mechanisms ensuring sufficient security for your personal data, such as EU Standard Contractual Clauses or an adequacy decision from the EU Commission, in addition to all necessary requires steps under applicable law in order for such transfer of your personal data to be compliant with applicable law.
In some cases, Axaz may disclose personal data to public authorities in order to meet statutory requirements or comply with government orders, for example to comply with obligations under accounting or tax legislation. Public authorities will be responsible for processing the personal data we provide in such cases.5. Security
Axaz values your privacy rights and has taken reasonable steps to protect the users' privacy, including by implementation of physical, technical and organizational measures, to prevent loss, alterations, theft and unauthorized access to information stored and otherwise processed.
6. Third party websites and social media
If Axaz makes changes in the processing of personal data, this policy will be updated, and the change will be notified on our webpage
or by use of your contact information.