HydraWell, as a Data Controller, are required to transparently and clearly describe how we process personal data. This Privacy Notice explains how we obtain, use and keep personal data obtained from our Customers, Suppliers and Website User

 

1. WHAT INFORMATION DOES THE COMPANY COLLECT AND HOW IS IT USED?

HydraWell collects and processes a range of information about you which includes:

  • Your name and business contact details (including address, job title, email address and telephone
    number).
  • Personal information on directors, officers and shareholders for screening purposes to ensure
    HydraWell comply with legal and regulatory obligations, including trade control, anti-money laundering,
    anti-bribery and corruption laws and other regulatory requirements.

Data is stored in a range of different places, including our Customer Relationship Management System (CRM), contracts database, marketing/mailing lists and email system.

When you submit your personal details via our Website Contact Form, we will use that information to respond to your message, which will be relayed to the relevant department, who will respond directly to you.

The information captured in the Contact Form will be added to our CRM Database, so that we can manage future communications with you, which will include information about our range of products and services.
We process this information for the purpose of our Legitimate Interests, however, if you do not wish to hear from us, you can unsubscribe at any time, using the unsubscribe option within the message/email or by contacting us directly at post@hydrawell.no

Please be assured that we will never buy, sell or trade personal data to any third parties.

We will occasionally contact you with information about our Company and the products and services that we provide. You can stop receiving this information, at any time, by either using the unsubscribe feature in each electronic message or by contacting us directly at post@hydrawell.no

 

2. WHY DOES THE COMPANY PROCESS PERSONAL DATA?

HydraWell needs to process data for the following purposes:

• For the purpose of our legitimate interests e.g. business development, marketing, promotion, etc
• Concluding, performing and managing new and existing contracts
• Legal and/or regulatory compliance, including our HSE obligations

 

3. WHO HAS ACCESS TO DATA?

Your information will be shared internally with HydraWell Staff, if access to the data is necessary for
performance of their roles and, where necessary, competent public authority, government, regulatory or
fiscal agency where it is necessary to comply with a legal or regulatory obligation to which HydraWell Group
is subject to. In all circumstances the data will be subject to confidentiality arrangements.

 

4. HOW DOES THE COMPANY PROTECT DATA?

HydraWell have implemented a number of operational controls and internal policies to ensure that your
data is not lost, accidentally destroyed, misused or disclosed, and is not accessed except by our employees
in the performance of their duties.

Any personal data transferred outside of the European Economic Area is subject to contractual agreements
and is protected by appropriate safeguards, which guarantee an adequate level of data protection wherever
your data is physically kept.

Where we engage third party suppliers to process data on our behalf, we do so on the basis of written
instructions, ensuring the third party has implemented appropriate technical and organisational measures
to ensure the security of data.

 

5. FOR HOW LONG DOES THE COMPANY KEEP DATA

Hydrawell will hold data for the duration of our contractual relationship with you and for a period of 5 years
thereafter, as set out in our Record of Processing Activities and our internal retention policies.

In cases where data is held for a longer period of time or where there is a legal or regulatory reason to do
so, data will be deleted when it is no longer required for the legal or regulatory purpose it was held for.

 

6. YOUR RIGHTS

As a data subject, you have a number of rights, as follows:

• To access and obtain a copy of your data on request;
• To change incorrect or incomplete data;
• To delete or stop processing your data, in certain circumstances;
• To object to the processing of your data in certain circumstances;
• To stop processing data for a period if data is inaccurate or there is a dispute about whether or not your
interests override our legitimate grounds for processing data

 

If you would like to exercise any of these rights, or if you are unhappy with how Hydrawell has processed
your personal data, please contact our Data Protection Officer. All correspondence should be addressed
to Gro Lunde: gl@hydrawell.no