GDPR AND PERSONAL DATA
How the Port of Oslo processes your personal data.You can contact the Port of Oslo by mail: Oslo Havn KF co/HR, Postboks 230 Sentrum, 0103 Oslo. Or email us at: personvern@oslohavn.no.
Documents in the public domain
The Port of Oslo may need to collect, receive, or in some other way process your personal data. When personal data is acquired by the Port of Oslo, it is generally regarded as being in the public domain and can be requested. There are also special rules governing documents in the public domain. These rules relate specifically to filing (retention) and erasure (discarding). To enable the Port of Oslo to file or discard your personal data and other information, there must be separate basis to do so. For further information, please contact the Port of Oslo. The Port of Oslo processes your personal data in compliance with the stipulations in the Data Protection Regulation (EU) 2016/679, as well as other governing legislation.
How have we obtained your personal data?
In the majority of cases you have personally provided us with personal data for us to deal with a matter on your behalf, although sometimes we could have received your personal data from a third party. If you have any questions about where your personal data has been obtained, please contact The Port of Oslo[1].
What is personal data?
Personal data is any form of information that can identify a living person.
What does personal data processing involve?
Personal data processing covers all the means employed to process personal data. This could take the form of collection, retention, deletion, dissemination, filing and copying etc.
Personal data controller
The personal data controller is the Port Director of the Port of Oslo. The Port of Oslo are thus responsible for your personal data being processed lawfully, securely, and in all respects correctly. If you have any questions about the processing of your personal data, please contact the Port of Oslo. The personal data controller decides the purpose of, and the tools used to process, personal data. You are entitled to receive a digital copy, free of charge, of your personal data that is processed by us. To receive a free digital copy, you must be able to document/identify that you are the person you pretend to be.
Why do we process your personal data (purpose)?
If you submit an application to us, you wish to enter the port area, or if you require a service from us, we must be able to verify that you really are the person you pretend to be in order to deal with the matter at hand. We also need information about you in order to be able to deal correctly with a particular matter, a request you may have made, your employment at the port etc. We will not process your personal data if we do not have valid legal basis for doing so.
Why are we permitted to process your personal data (legal grounds)?
For example, if the Port of Oslo is under a legal obligation to offer access to certain services, such as a call by a vessel or entry into the port area, the port has the right to process personal data about you in order to comply with statutory requirements (legal obligations). The Port of Oslo is entitled to process your personal data when carrying out its official duties. When you have an agreement with the Port of Oslo, processing your personal data is permitted in order to fulfil the agreement. One or more of the following requirements must be satisfied for us to process your personal data:− The data subject has granted her/his consent that her/his personal data may be processed for one or more specific purposes.− The processing is necessary to fulfil an agreement to which the data subject is a party, or to take action at the request of the data subject before such an agreement is entered into.− The processing is necessary to discharge a legal obligation that rests with the personal data controller.− The processing is necessary to safeguard interests that are of fundamental importance to the data subject or to another physical person.− The processing is necessary to perform a task that is of general interest or as part of the exercising of official duties by the personal data controller.− The processing is necessary for purposes pertaining to the legitimate interests of the personal data controller or a third party, unless the data subject’s interests or fundamental rights and freedoms weigh more heavily and require that personal data is protected, particularly when the data subject is a child.
Who has access to your personal data?
The employees at the Port of Oslo who need to access your personal data in order to carry out their legal obligation and deal with a particular matter or issue. It could be your contact person, an IT technician, a member of the administrative staff, or an external supplier. The party in question obviously depends on the nature of the matter.
Third country
If your personal data is processed outside the EU/EEA (third country), we will inform you. The processing will in that case take place in accordance with the protection rules embodied in data protection legislation.
How long will your personal data be retained?
Your personal data will be retained by the Port of Oslo until the purpose of the processing of the personal data has been fulfilled. The personal data will then be processed according to the rules applicable to the Port of Oslo relating to what are termed document management plans and erasure decisions. Personal data received by the Port of Oslo is generally in the public domain. Consequently, the Port of Oslo is not permitted to erase or retain data arbitrarily. Contact the Port of Oslo for further information.
Your rights when personal data is processed by us
You can do the following:− Request access to your personal data− Request rectification or erasure of personal data or the imposition of a processing restriction− Object to processing of your personal data− Request data portability− At any time revoke any consent that may have been granted. If you revoke your consent, revocation becomes effective from the date on which revocation was made.− File a complaint regarding our processing of your personal data with the Integrity Protection Authority As there are special rules regarding the processing of documents that are in the public domain, some of these rights are limited. If you want to exercise any of your rights concerning your personal data, please contact the Port of Oslo.
Automated decision-making and profiling
It could be the case that we use automated decision-making and profiling. This means that a decision can be reached automatically based on the data you have furnished to us, and that we can use a record of your data to form a complete picture of you and your needs.
Further processing
If your personal data is to be processed for any reason other than the original reason, you will be notified about this before new processing commences. [1] You can contact the Port of Oslo by mail: Oslo Havn KF co/HR, Postboks 230 Sentrum, 0103 Oslo. Or email us at: personvern@oslohavn.no