Veidekke is concerned that you should feel secure when you visit our website and that your personal information is handled appropriately. If you have any questions, you will find the contact info at the end of this document. Veidekke’s Group CEO is responsible for the enterprise’s processing of personal data.
The managing director/general manager of each company is the data controller. Wherever daily responsibility is delegated, this appears under each individual point. Such delegation applies only to the duties and not the responsibility.
This document provides information about your rights when information is gathered about you from our website, general information about how we process personal data, what your rights are, and who to contact if you have any questions regarding the rules for Privacy Protection/GDPR (General Data Protection Regulation).
1 Processing of personal data on Veidekke’s and its subsidiaries' websites.
The web editor has the day to day responsibility for Veidekke’s processing of personal data on Veidekke’s and its subsidiaries' websites, unless otherwise stated below.
It is voluntary for visitors to the website to provide personal data in connection with services, such as receiving newsletters. The basis for the data processing is the consent of the individual, unless otherwise specified.
Iterate is the Veidekke’s data controller for the web pages, and is our provider for the development and maintenance of the website.
Evry is our systems operator for the web pages veidekke.no, veidekke.com, stalbygg.no, blockberge.no, valdresbygg.no, and asphaltcoredams.com.
Only Veidekke and Evry have access to the information collected. A separate data processing agreement between Veidekke and Evry regulates which information the provider has access to and how it should be processed.
1.1 Web statistics
Veidekke collects anonymised information about visitors to the web pages mentioned in clause 1.
The aim of this is to develop statistics that we use to improve and further develop the information offered on our websites. We can see how many people visit different pages, how long the visit lasts, what websites users come from and what browsers are used.
The information is handled in de-identified and aggregated form. De-identified means that we cannot trace the information we collect back to each individual user.
We collect the full IP address, but the IP address is de-identified so that only the first three groups in the address are used to generate statistics. That is, if the IP address consists of the numbers 220.127.116.11, only 195.159.103. xx will be used.
In addition, the IP addresses are processed at the aggregate level, meaning that all data is merged into a group and is not individually processed. We use the Google Analytics analysis tool and GA Audiences on our websites.
These are open source tools (GPL) installed on a dedicated server at the service provider. Information from this tool is not divulged from Veidekke to other players. Access to Google Analytics is provided to the media agencies with which Veidekke has an agreement, for the purpose of analysing statistics.
By browsing Veidekke’s web pages, it is considered that you have given your consent.
Cookies are small text files placed on your computer when you download a website.
Storage of data and processing of this data is not permitted unless the user has both been informed about,and has given consent to, the processing.
The user is entitled to know about and approve what data is being processed, the purpose of the processing and who processes the data, cf. Internet Neutrality Act Section 2-7b.
The following cookies are used on Veidekke’s web pages:
Facebook custom audiences
Google Tag Manager
Veidekke stores information about which keywords visitors are using in the Google Analytics search tool.
The purpose of the processing is to improve the content of the web pages based on searches that do not have hits, but which are relevant.
The search usage pattern is stored in a separate database, and is stored only in aggregated form. Only the keyword is saved and cannot be linked to any other information about the user, such as the IP address.
1.4 Search employment
Applications must be submitted via our recruitment portal at www.veidekke.no/jobb.
When you wish to seek employment with Veidekke, you are asked to give your consent to the processing of your personal data. Required personal data to be collected is your name, address, email and phone number.
Information about the storage time of your application is stated on the consent form.
Veidekke and its subsidiaries do not send out newsletters on their web pages.
1.6 Requests for services
On some of Veidekke’s web pages, it is possible to submit forms with requests for services, such as asphalt paving. Here can you post your contact information and a brief description of the desired service.
Veidekke processes personal data you provide to us in connection with interest or as a (future) customer.
This may include e.g. name, date of birth, e-mail address, postal address, telephone number or other information you provide us or that is required to manage/fulfil the customer relationship, including with regard to rights and obligations, guarantee obligations and similar.
In connection with a customer relationship it may be necessary for us to require credit information for the purpose of assessing creditworthiness. Veidekke complies with applicable legislation relating to personal data and privacy.
These personal data are included in Veidekke’s e-mail system and are processed as described in clause 2.
1.7 Subscribe to press releases
At Veidekke.no and Veidekke.com you can subscribe to press releases. Veidekke then registers name, company, email and telephone, and automatically sends out press releases to the provided email address. You can cancel your subscription at any time by following this link.
Only the email address is required information.
2 Email and telephone
Veidekke uses email and telephone as part of its daily work.
Relevant information emerging from telephone calls and email exchange is recorded and processed only for the purpose for which they are obtained. Veidekke’s staff also use email in general dialogue with internal and external contacts.
Each employee is responsible for deleting messages that are no longer relevant, and at least every year go through and delete unnecessary content in their email box. On termination of employment, email accounts are deleted, but some relevant emails will normally be transferred to colleagues.
Sensitive personal data should not be sent by email. Please note that regular email is unencrypted. We therefore encourage you not to send confidential, sensitive or other private information via email.
3 Social media
Veidekke has several Facebook pages that each company is responsible for.
Veidekke uses Facebook pages to communicate with potential customers, and for interested parties to obtain information about Veidekke, and obtain answers to any questions.
Job ads are also posted, and visitors are able to ask questions about them.
Do not post sensitive information about yourself, or personal information about others. Veidekke looks through all comments and deletes inappropriate posts.
Veidekke has several Instagram accounts that the different parts of the company are responsible for. Veidekke uses the accounts for marketing and communication with potential customers, employees and partners.
Do not post sensitive information about yourself or personal information about others in the comments section. Veidekke looks through all comments and deletes inappropriate posts.
Veidekke in Norway has a LinkedIn page. It is used to communicate with potential employees and to give those interested the opportunity to see useful information on Veidekke and receive answers to any questions.
Job ads are also posted and visitors have the opportunity to ask questions about them.
Do not post sensitive information about yourself or personal information about others. Veidekke looks through all comments and deletes inappropriate posts.
Veidekke in Norway has a Twitter account. Veidekke uses the account for marketing and communication with potential customers, employees and partners.
Twitter functions such that it is not possible to add comments to another person's or company’s account.
Anyone who asks is entitled to receive basic information on the processing of personal data in an enterprise.
Veidekke has provided this information in this document, and will refer to it if any requests are received.
Anyone registered in any of Veidekke’s systems is entitled to have access to their own information. They also have the right to require that incorrect, incomplete or information that Veidekke is not permitted to process is rectified, deleted or supplemented.
Complaints from registered parties will be responded to at no cost and by no later than 30 days. The registered party can contact Veidekke’s independent Data Protection Officer, and alternatively contact the Norwegian Data Protection Authority if desired.
If the processing of personal data is based on consent, this can be withdrawn at any time. This will not affect the processing that has occurred prior to the consent being withdrawn.
5 Contact information