Midsund Industriservice AS wants you to feel safe that any personal data you share with us is handled securely and with care.
This privacy policy describes what personal data we process when you visit our website or contact us, what we use it for, and how we protect it.
We follow Norwegian and European law
Personal data is any information that, alone or combined with other information, can be linked to you as an individual. We process personal data in line with the law in force at any time. This includes the Norwegian Personal Data Act (personopplysningsloven), which makes the EU General Data Protection Regulation (GDPR) part of Norwegian law, and the cookie rules in the Electronic Communications Act (ekomloven).
Data controller
Midsund Industriservice AS is the data controller for the personal data processed through this website. We are also responsible for making sure that the service providers who process data on our behalf follow the law and our instructions.
Midsund Industriservice AS, org. no. 924 984 511 Sjøvikvegen 50, 6475 Midsund, Norway post@midsund-industriservice.no · +47 415 32 816
What personal data we collect and why
Our website is for information only. It has no contact forms, customer login, newsletter or online ordering, so we collect very little about you.
When you visit the website, our server automatically records technical information: your IP address, the time of your visit, the pages you open, your browser and operating system, and the page you came from. We use this to keep the website running and secure and to fix errors. This is based on our legitimate interest in operating a safe and working website.
When you email or call us, we receive your name, your contact details and whatever you choose to tell us. We use this only to answer your enquiry and to follow up on any agreement we make. This is based on our legitimate interest in replying to you, or on steps needed before entering into a contract.
Our employees are presented on the website with their name, photo, job title, work email and work phone, so that customers can contact the right person directly. This is done with the employee's knowledge.
We do not use personal data for marketing, advertising, profiling or automated decisions. We do not combine your data with data from other sources.
Cookies
Cookies are small text files stored in your browser that remember information about your visit. Our website sets no cookies of its own when you browse it, and we use no advertising or tracking cookies.
Third-party cookies (map)
Our website can show a map from Google Maps. Google sets its own cookies when the map loads, so under the Electronic Communications Act we ask for your consent first. The map stays hidden until you click to show it. Once loaded, Google processes your IP address and browser data as an independent controller, under Google's privacy policy. You can withdraw your consent at any time by deleting cookies in your browser settings.
The links to our Facebook and LinkedIn pages are plain links. Nothing is sent to those services unless you click them.
Web statistics
We use Cloudflare Web Analytics to see how many people visit the website, which pages they view, which websites they come from, and which countries, devices and browsers they use. This helps us improve the website and the information on it.
The tool uses no cookies, stores nothing on your device, and does not track you across websites or build a profile of you. We see only totals, never individual visitors. This is based on our legitimate interest in understanding how the website is used. Read more about Cloudflare Web Analytics.
Disclosure of personal data
We will never sell your personal data or share it with others for purposes other than those described in this policy. We only share it when the law requires us to, for example at the request of the police or other public authorities.
We use a few trusted service providers to run the website. They process data only on our behalf, under a data processing agreement that requires them to keep it confidential and secure:
- A hosting provider in Denmark stores the website, server logs and backups.
- Cloudflare, Inc. provides our web statistics.
Cloudflare and Google (for the map) may process data in the USA. Both companies are certified under the EU–US Data Privacy Framework, which the European Commission has found to give an adequate level of protection. Where it does not apply, the transfer is covered by the Commission's standard contractual clauses.
Storage and security
We keep personal data only as long as we have a valid reason to, and never longer than the law allows. After that it is deleted or anonymised.
- Server logs are deleted automatically after 14 days.
- Backups of the website are deleted after 14 days.
- Emails and enquiries are kept as long as needed to handle the matter. Information tied to contracts or invoices is kept for 5 years, as the Bookkeeping Act (bokføringsloven) requires.
- Employee details are removed from the website when the person leaves the company.
The website is served only over encrypted connections (HTTPS). Access to the server and the publishing system is limited to authorised people. We keep our software up to date.
Your rights
You have the right to know what personal data we hold about you, and you can contact us at any time to get a copy. You can also ask us to correct, delete or limit the use of your data, or object to how we use it. Where you have given consent, as for the map, you can withdraw it at any time. We will answer within one month at the latest, free of charge. We may ask you to confirm your identity first.
Contact us
If you have questions about privacy or want to use your rights, email post@midsund-industriservice.no or call +47 415 32 816.
If you believe we have broken the privacy rules, you can complain to the Norwegian Data Protection Authority (Datatilsynet) at datatilsynet.no.
We update this policy when we change how we process personal data. The current version is always published on this page.