GDPR
1. General Data Protection Regulation (GDPR)
The General Data Protection Regulation (GDPR) is a European regulation for the protection of natural persons in the processing of personal data. Personal data is any information that relates to an identified or identifiable natural person (individual). This new regulation will enter into force in all European Member States on 25.05.2018.
This results in the following relevant rights vis-a-vis DEAMP AS for those concerned, among others:
the right to (i) data disclosure, (ii) data transmission, (iii) data deletion, (iv) data rectification, (v) revocation of consent and (vi) limitation of processing.
2. Rights of affected persons: customers and other groups of affected persons
In order to ensure transparent presentation of the desired data and targeted processing of your request, a distinction is made between the following groups of affected persons: customers and other groups of affected persons.
The customer category includes customers or visitors of Deamp websites.
We ask you to always address your request to us by post so that we can ensure correct authentication and identification of the enquiring person.
In accordance with Articles 15 to 21 of the GDPR, the rights of the data subject are as follows:
you have the right to (i) data disclosure. This includes information about the data DEAMP AS stores about you and the extent to which DEAMP AS processes and passes on data, as well as a copy of the personal data stored about you.
If you make use of your right to data disclosure, we will provide you with information about the data DEAMP AS has stored about you as a data subject. This information will only be sent to you by post.
You have the right to (ii) data transmission. If we automatically process your personal data provided by you on the basis of your consent or a contract with you (including your employment contract), you have the right to receive the data in a structured, current and machine-readable format. You may transmit this data to another responsible person without any impediment by DEAMP AS. You also have the right to have the personal data transmitted directly by DEAMP AS to another responsible person, insofar as this is technically feasible and provided that the rights and freedoms of other persons are not affected by this.
If you exercise your right to data transmission, you will receive the data DEAMP AS has stored about you as the data subject in a machine-readable format. This information, including instructions for downloading your data, will only be sent to you by post.
You have the right to (iii) data erasure. This means the immediate deletion of your personal data stored by DEAMP AS, provided that the legal requirements are met. If we have passed your data on to third parties, we will inform them of the deletion, insofar as this is legally required.
Please note that your right to erasure is subject to restrictions. For example, we may not have to or are not allowed to delete any data that we have to keep for legal retention periods. Data that we need to assert, exercise or defend legal claims is also excluded from your right of deletion. Your rights are regarding personal data DEAMP AS can identify as you, not opinions, strategies or similar communicated inside DEAMP AS about you.
Fraudulent requests will be denied or not responded to.
If you exercise your right to data erasure, all your personal data will be deleted from the systems of DEAMP AS immediately and irrevocably, unless we are entitled or obliged to further processing.
You have the right to (iv) data rectification. This means the immediate correction and or completion of the personal data stored about you at DEAMP AS. If you exercise your right to data rectification, we will make the desired changes in all our systems. We will only send you confirmation of this by post.
You have the right to (v) revocation of consent. Where you have provided your consent to us processing your personal data, you may withdraw this consent at any time. Please note that the revocation is only effective for the future.
Processing that took place before the revocation is not affected by this.
If you exercise your right to revoke declarations of consent, you revoke all declarations of consent you have given to DEAMP AS. All personal data processed on the basis of your declarations of consent will then be deleted immediately and irrevocably from the systems of DEAMP AS, unless we are entitled or obliged to further processing. An example of such an obligation is the performance of a contract to which the data subject is a party.
If you exercise your right to restrict processing, we will block your personal data in accordance with legal requirements. We will only send you confirmation of this by a valid email address.
3. Process flow for customer enquiries
We would like to point out that the enquiry concerns DEAMP AS only. Other personal data may also be held by third parties, such as by Google Analytics. Declarations of consent to third parties must be revoked with them. After receipt of your signed GDPR request form, Deamp will process this in due time. Any feedback, including data if applicable, will be sent exclusively by post. We thank you for your cooperation.
If you, as the customer concerned, wish to exercise your rights, please contact us by post.
DEAMP AS
Postboks 800
Sentrum
7408 Trondheim
4. Data Protection Officer
Contact details of our company Data Protection Officer:
e-mail:mail(ætt*)deamp.com – *replace ætt with @