Privacy Statement for Eviny

Data protection is the right to privacy and to make decisions about your own personal data. Personal data is information and assessments that can be linked to you as a person, such as your name and contact information, but also a lot of other information that can be linked to you more indirectly.

It is important to us that you know why we collect and process personal data about you, what kind of personal data we process about you and how we safeguard your privacy.

This Privacy Statement provides you with general information about why and how Eviny collects and processes your personal data, as well as what personal data is concerned. We provide you with information about how we safeguard your privacy, as well as what rights you have when we process your personal data.

Data Controller

As part of our marketing and in connection with visits to our website, all companies in the Eviny Group process personal data in their capacity as employers, as service providers and as purchasers.

The controller of your personal data will normally be the Eviny company with which you have (entered into) an agreement or contacts.

When do we process personal data?

Eviny processes personal data in the following contexts:

• about customers in order to fulfill customer agreements
• about anyone seeking to work for Eviny in connection with recruitment
• about customers or anyone involved in marketing and service sales
• about supplier’s contacts
• about anyone visiting our website in order to understand how they are being used
• about anyone visiting our buildings and installations
• about anyone attending our events
• about anyone who contacts us by phone, e-mail or on social media
• about anyone who is a representative of political parties and the authorities

Basis for processing

We process personal data about you on the basis of one of the following:

• Your consent
• An agreement we have entered into
• Our statutory obligations
• Our legitimate interests

Privacy Statement amendments

Eviny will amend the Privacy Statement when necessary. This privacy statement will always be the most current version.

What personal data do we process?

Personal information

Name and other contact information (address, telephone number, e-mail address). Information that is required for identifying you (date of birth and national identity number, etc.).

Contractual data

Information that is required for fulfilling any agreements that we have with you (customer number, invoice information, customer dialogue) and information about products/services.

Payment and credit information

Account details, payment cards, creditworthiness, payment status, etc.

Electronic data

This is information that is related to visits to our website (visitor statistics, cookies, IP addresses, devices used, type of browser, etc.).

Eviny uses cookies on its website. A cookie is a small text file that is placed in your browser's internal memory when you visit our website.

You can read about what cookies we use and what we use this data for below.

Most modern browsers are set to accept cookies automatically, but you can choose to change your settings to prevent them from being accepted. This will mean that some of the functions will not work as intended. On our website, it will not be possible to log in to My Pages or fill out forms, etc. without cookies.

Security data

Information that we use to ensure the use of our services and installations (passwords and login information).

Technical data

Information relating to the use of installations and applications (metering information, charging stations).

Consumption information

Information about your consumption of our services, as part of your customer relationship (e.g. electricity and energy consumption, metrics, use of charging services).

Information relating to job applications

Information provided in job applications (name and contact information, CVs, certificates, references) and information obtained through the recruitment process (interviews, personal assessments, settings, etc.).

Use of data processors

Eviny also uses external partners for processing your personal data. We enter into a data processing agreement with all those companies which process personal data on our behalf. Our data processors cannot process your personal data in any other way than the one which has been agreed with us.

Where is data obtained from?

In most cases your personal data is collected when you contact us or enter into agreements with us. In some cases, we can also collect personal data about you from external sources (third parties), e.g. Elhub, public address registers, credit information agencies, debt collection agencies, installation companies, developers, marketing partners, insurance companies.

How do we protect your data?

We implemented a number of security measures that are designed to protect your personal data. For example, we use access management for your data. This means that our employees' access to and processing of your personal data is based on your service requirements and these employees are subject to a duty of confidentiality.

Storage times and deletion procedures

Your personal data will not be stored for longer than necessary for fulfilling our processing objectives and our statutory obligations. Storage will be conditional on the nature of your customer relationship with Eviny and on the type of personal data concerned. For example, data about a customer's energy consumption may have a different storage time to that which applies to invoice information.

Disclosure of personal data to others

Eviny does not disclose your personal data to outsiders without such disclosure taking place in accordance with one of the following:

• with your consent
• pursuant to legislation and any appurtenant regulations
• a court order or order issued by another competent authority
• as part of justified payment collection

Measurements undertaken on our website

We use Piwik Pro (åpnes i nytt vindu) to measure how our website is used. We use this data to improve our website's functionality and user-friendliness. All measurements are limited to movements into and on our website.

For example, we measure:

• Which pages are used the most and how users move between pages on our website.
• The type of device and browser used.
• How long each page is visited for.
• Where the user came from when he or she opened one of our pages.

Your IP address is well hidden behind a code, so it is very difficult to know which physical device or person the data concerned belongs to.

Eviny can also share this information with marketing channel providers. In such cases the data will be used for measuring the effects of marketing measures, i.e. the popularity of our advertisements on other websites or applications. The data will not be used for designing personal marketing measures targeted directly at you.

Your rights

Eviny's processing of your personal data is regulated under the Norwegian Personal Data Act and in the General Data Protection Regulation. These data protection regulations provide you with a number of rights relating to our processing of personal data about you.

Full information about your rights is available on the Norwegian Data Protection Authority's website. (åpnes i nytt vindu) Below you will find your most important rights and how you can go about exercising them.

Right of access to your own personal data

You have the right to be informed about any processing that we carry out and you can request access at any time to any personal data that Eviny processes and has registered about you.

Right to correct personal data

You can ask for data about you to be corrected if it is not correct or is incomplete.

Right to deletion

In some cases, you may ask us to delete your personal data. This is sometimes referred to as the "right to be forgotten". However, we cannot delete any personal data that we have a statutory obligation to process.

Right to limited processing of your personal data

In some cases, you have the right to ask for the processing of your personal data to be restricted (frozen/stopped). In such cases we cannot use the data that we have registered about you, but we may still store it.

Right to object to the processing of your personal data

If justified by your particular situation, you are entitled to object to the processing of your personal data when we process your personal data on the basis of our legitimate interests.

Right to opt out of electronic marketing communications

You can always object to us using your personal data for direct marketing purposes.

Right to data portability

If we process personal data about you on the basis of your consent or an agreement, you can ask us to transfer your personal data to you or to another data controller.

Right to withdraw consent

If you have given Eviny permission to process personal data about you, you have the right to withdraw your consent at any time. In such cases processing cannot be continued. However, the withdrawal of consent does not affect the legality of any processing carried out before you withdrew your consent.

General powers of attorney

If you are going to make changes or want to access information about a customer relationship that you are not the legal owner of, you must fill out a form that provides you with general powers of attorney. (åpnes i nytt vindu)

Data Protection Officer

Eviny has its own Data Protection Officer who provides guidance in order to ensure that personal data is processed in a satisfactory manner and in accordance with the data protection regulations.

If you have any questions or objections to Eviny's processing of personal data, you can also contact our Data Protection Officer by sending an e-mail to personvernombud@eviny.no (Åpner epostklient)

Our Data Protection Officer has a duty of confidentiality, so all enquiries are treated in confidence.

Appealing to the Norwegian Data Protection Authority

You can also appeal to the Norwegian Data Protection Authority if you believe that our processing of your personal data is not in accordance with this Privacy Statement or if you think that we are not complying with your rights in accordance with the data protection legislation.

We would appreciate it if you could contact us first so that we can have the opportunity to amicably resolve the matter for you.

Contact us

Please contact our Customer Services Centre if you have any questions about how we process your personal data or whether or not you would like to exercise your rights.

We will respond to you within 30 days after we have received your enquiry.