Privacy policy
Privacy Policy and GDPR Compliance Procedures at Gleding United AS
Gleding United AS is committed to protecting the privacy and personal data of our customers, employees, and partners in accordance with the EU General Data Protection Regulation (GDPR) and applicable Norwegian legislation. Our guidelines and procedures ensure that all processing of personal data is conducted in a secure, lawful, and transparent manner.
We adhere to the following fundamental principles for the processing of personal data:
Lawfulness, Fairness, and Transparency
- We collect and process data in a lawful and transparent way.
- We provide clear information to data subjects about how their data is used.
Purpose Limitation
- Data is collected for specific and legitimate purposes and is not used for any other purpose.
Data Minimization
- We only collect the information necessary for the intended purpose.
Storage Limitation
- Data is stored only for as long as it is necessary for the specific purpose and in accordance with legal requirements.
Integrity and Confidentiality
- We protect data against unauthorized access, loss, or misuse.
Accountability
- We document and regularly review our data processing procedures.
2. Procedures for Compliance
2.1 Data Collection and Processing
- Personal data is collected only with a valid legal basis (e.g., consent or contractual necessity).
- We regularly review and document our processing activities.
2.2 Rights of Data Subjects
- We have procedures in place to handle requests for:
- Access, rectification, deletion, and restriction of personal data.
- The right to withdraw consent.
2.3 Data Security
- We have implemented technical and organizational measures, including access controls and encryption, to protect data.
- Regular security reviews and risk assessments are carried out.
2.4 Handling Data Breaches
- We have a contingency plan to detect, report, and handle data privacy breaches.
- Any serious breaches are reported to the Norwegian Data Protection Authority (Datatilsynet) within 72 hours.
2.5 Data Processing Agreements
- We enter into agreements with all third parties that process data on our behalf to ensure GDPR compliance.
Contact info
Gleding United AS, Eidsvollgata 51, 4307 Sandnes
post@gleding.com