Privacy policy

Introduction

This privacy policy has been prepared by Euforum AS ("Euforum" or "we") to provide you with information on how and on what basis we collect and process your personal data, what we use the data for and how we safeguard your privacy. In addition, the privacy statement describes what rights you as a data subject have under the EU General Data Protection Regulation 2016/679 (GDPR) and the Norwegian data protection legislation (together "Personvernlovgivningen").

You and your privacy are important to us, and we want you to always feel safe and have full confidence in us. Euforum is responsible for the processing of personal data described in this declaration. The data controller is responsible for safeguarding your rights under the Data Protection Act, including your right to receive information about how your personal data is processed.

What is personal data?

Personal data is any information or assessment that can be linked to a physical person or a small group of people ("data subjects"). Examples of what constitutes personal data are name, social security number, address, telephone number and e-mail address. Personal data may also include special categories (previously referred to as "sensitive") personal data, such as information about a person's state of health, religious beliefs, ethnic origin or information about a person's sexual relations or orientation.

By processing of personal data, we mean the collection, storage, compilation, deletion and any other use of personal data.

Who do we process personal data about?

This privacy policy covers the processing of personal data about the following categories of persons:

People who have contacted us for questions or other inquiries via forms on our website, email, or via social media
People who subscribe to our newsletter via us
People who attend our events
Contacts at suppliers, business customers, partners and other stakeholders
People who have applied for a job with us, or are otherwise relevant for employment with us

How is the information collected?

Euforum collects information through forms on our website, or by registering in our CRMsystem as part of establishing a business relationship. Providing this information is voluntary. If you choose not to provide your personal data, we may be prevented from giving you access to the product or service.

Forms we use:

Contact form (link to write an email to us)
Subscription form for newsletters/neighborhood alerts
Form for registration in our CRM system
Form for registration on our recruitment pages

How do we use personal data?

Personal data that are processed through use of websites/social media

When you register via a form on our website or write to us on social media, we may collect the following personal data:

Name/Company name
Address/company address
E-mail address
Your phone number
Other personal data included in your message to us

All inquiries received by e-mail (via the contact form on our website) are stored in Office365 at Microsoft with limited access.

We process this personal data in order to respond to your inquiries. The legal basis for our processing of your personal data is our legitimate interest in marketing and improving our services.

Personal data that is processed if you subscribe to our newsletter/neighbor alerts

If you receive newsletters, neighbor alerts, other marketing emails or invitations to our events from us, we may process personal data such as:

Name
E-mail address
Your phone number
Job title and employer (if you represent a corporate customer or a supplier)

Information collected via newsletter subscriptions is stored in Salesforce Marketing Cloud with limited access.

We process the above-mentioned personal data for marketing purposes and to notify neighbors about upcoming events. The legal basis for our processing of your personal data is that you have given us your consent to this processing. This consent can be withdrawn at any time if you no longer wish to receive news, notifications and information from us.

Personal data processed when you participate in our events

Unity Arena has a wide range of different types of events throughout the year. Several events are in the "high security" category. For this reason, it is necessary for the arena to have camera surveillance to ensure security, including to protect the lives and health of the audience and employees, as well as to prevent and solve criminal offenses.

Cameras have been set up to monitor the building's facade and entrances, as well as public areas. In this regard, we may process your personal data in the form of a photo/video of you.

Your privacy is important to us. Personal data processed in connection with camera surveillance is stored in accordance with the Regulation on camera surveillance in businesses. We have implemented several security measures to ensure that your personal data is safe, such as strict access controls, access control, logging and encryption.

The legal basis for our processing of your personal data is our legitimate interest in ensuring that participants and employees are safe, as well as ensuring that no unauthorized persons can enter the building.

Personal data processed about contact persons at suppliers, business customers and partners

If you are our contact person at one of our suppliers, business customers, partners or other stakeholders, we may collect the following personal data:

Name/Company name
Address/company address
Job title
E-mail address
Your phone number

Information about contact persons at suppliers, business customers, partners and other stakeholders is stored in our CRM system (SuperOffice).

The purpose of this processing is to establish and manage our customer and supplier relationships, for invoicing purposes and to be able to deliver our services/products to you or your employer. The legal basis for our processing of your personal data is our legitimate interest in maintaining and administering our relationship with the business for which you are the contact person. Any information about you that is included in purchase or other bookkeeping documentation will be processed on the basis of our obligations under bookkeeping legislation.

Personal data processed in relation to recruitment

In relation to recruitment, we will process the personal data that you provide to us connected to the recruitment process, including your name, contact information, study and work experience, current job title, etc. We may also process the names and contact details of any references you provide.

We use the recruitment system ReachMee by Talentech in our recruitment processes. ReachMee by Talentech has created a separate privacy policy where you can read more about their processing of your personal data. This statement is available to you on our recruitment pages.

The purpose of this processing is to be able to assess you as a potential employee, and to form a sound basis for decision-making in our recruitment processes. The legal basis for our processing of your personal data is our legitimate interest in recruiting and employing relevant candidates in our business.

How long do we store your personal data?

We will delete or anonymize personal data when it is no longer necessary for the purpose for which it was collected, as well as in accordance with the following deletion procedures:

The personal data collected because you have contacted us for questions or other inquiries via forms on our website or via social media will be deleted after your inquiry has been answered.

Video recordings from events must generally be deleted after 7 days, but can be stored for up to 30 days in the event of incidents where the police have asked for video recordings to be handed over.

If you have agreed to receive newsletters/neighbor alerts, we will continue to process your personal data until you unsubscribe yourself.

Information in our CRM system is stored for as long as it is needed to fulfill our obligations to our suppliers, business customers, partners or other stakeholders, or until you want it deleted.

Information about job applicants who are not hired will be automatically deleted 12 months after the last submitted application.

Disclosure of personal data and use of data processors

Euforum makes use of various service providers to the extent necessary to deliver products and services to you. This includes our suppliers of systems, software and marketing and recruitment services. We have entered into data processing agreements with the suppliers that protect your personal data and ensure that the suppliers cannot use information beyond what follows from this privacy statement.

We will not disclose your personal data to parties other than those mentioned above, unless we are required by law to disclose this information.

In some cases, in order to fulfill the purposes described above, we will disclose your personal data to countries outside the EU/EEA. We ensure that your personal data is adequately secured, for example by entering into Standard Contractual Clauses (SCC) prepared by the European Commission.

Rights

If we process your personal data, you have a number of rights under the Data Protection Act that you can assert against us.

Access: You can contact us if you want access to what personal data we process about you, including if you want to receive a copy of it.
Rectification: If the personal data we hold about you is incorrect, you may request that we rectify it.
Deletion: You can ask us to delete your personal data, which we will respect and comply with unless, for example, we are required to retain your personal data or there are other circumstances that make continued storage necessary.
Restriction of processing: In accordance with the Data Protection Legislation, you may also demand that our processing of your personal data be restricted, if the conditions for this under the Data Protection Legislation are met. If the processing is restricted, your personal data will only be stored.
Protest against the processing: Where our processing is based on legitimate interests, you have the right to object to the processing of your personal data. If you object, we will stop the processing in question, unless there are compelling legitimate grounds for continuing the processing.
Data portability: If we process personal data about you based on consent or for the performance of a contract and the personal data is processed automatically, you can ask us to provide the personal data to you or to a third party in a structured, commonly used and machine-readable format.

Where our processing of your personal data is based on consent, you may withdraw your consent at any time.

Please note that the rights above are not absolute and that there may be exceptions or limitations to the exercise of the rights. If you have any questions or wish to exercise any of your rights, please contact us. You can find our contact details at the bottom of this privacy policy. You will receive a response from us as soon as possible, and at the latest within 30 days. If we see that the processing time will be longer than 30 days, we will let you know.

The Norwegian Data Protection Authority, complaints and applicable privacy legislation

The Norwegian Data Protection Authority (Datatilsynet) is responsible for monitoring data protection regulations and supervising Norwegian companies' processing of personal data. You can contact us at any time if you have complaints related to our processing of your personal data. You can also complain to the Norwegian Data Protection Authority or a supervisory authority in the EU/EEA country where you live or work, or where the alleged infringement has taken place.

Contact information for the Norwegian Data Protection Authority can be found on their website, here. On the website you will also find further information about our obligations under the applicable data protection legislation.

The current version of the Data Protection Act is available on Lovdata. The Personal Data Act and GDPR can be found here.

Use of cookies

When you visit our website, we and certain third parties will be able to collect information about how you use our website through the use of cookies that are stored on your device. You can read more about our use of cookies in our cookie policy here.

Changes

From time to time, we may revise this privacy policy, for example as a result of changes to our processing of personal data or as a result of changes to data protection legislation. When the privacy policy changes, an updated version will be published on our website. If we make major changes to our privacy policy, we will notify you and, if necessary, ask for your consent again.