25 June 2019
In connection with your participation at the North Sea Well Productivity Network (“NSWPN”), Ridge AS will, as a data controller, collect and process personal data about you for the purposes specified below. Ridge AS processes your personal data in accordance with the principles in EU’s General Data Protection Regulation (“GDPR”) and the Norwegian Personal Data Act.
Therefore, please read this text carefully in order to understand how we process your personal data.
- Which data do we collect about you and for which purposes
- The legal basis for the collection and processing of your personal data
- From whom do we collect your personal data?
- Who do we share your personal data with and why?
- How long do we store your data?
- Your rights
- Revision of our privacy notice
Which data do we collect about you and for which purposes
We collect and process the following types of personal data:
- e-mail address;
- office location; and
- employment and education details (e.g. previous employment and education details, previous engagements)
The personal data listed above is collected and processed for the following purposes:
- development in the well industry
- competence building and skills upgrading
- sharing knowledge and experience
- communication within NSWPN On-line Portal Development
The legal basis for the collection and processing of your personal data
We collect and process your data based on the following legal basis:
- Performance of a contract, see GDPR article 6 paragraph 1 (b);
- The legitimate interests of Ridge AS; see GDPR article 6 paragraph 1 (f)
The legitimate interests pursued by Ridge AS include the following purposes:
- secure continuity in the NSWPN and retain the knowledge
The NSWPN is a well-established, but informal group of 90+ well completion, fluids and formation damage specialists from 20 North Sea oil companies. The NSWPN is established to share knowledge and experience between oil companies. The members of the NSWPN shares and communicates through the NSWPN On-line Portal (the “Portal”). To make this communication possible Ridge AS has to process personal data concerning the users of the Portal. The basis for processing personal data is a contract between Ridge AS and the users of the Portal. In the Portal users can upload files, have online discussions etc. The users can deactivate their account, e.g. if the user ends his/hers employment with one of the companies in the NSWPN. To prevent interruption of continuity and loss of important knowledge Ridge AS have a legitimate interest in keeping the files, comments etc. that the former user has published or posted in the Portal also after the user has deactivated their profile.
From whom do we collect your personal data?
We collect your personal data from you and your employer.
Who do we share your personal data with and why?
In connection with one or more purposes outlined above, your personal data may be disclosed to and shared with the following recipients:
- public authorities; and
- our professional advisors (e.g. auditor and legal advisors).
Who do we transfer your personal data to?
Transfer of personal data to data processors
We may transfer your data to IT providers, including cloud service providers, or to vendors of external services, who process and /or store the personal data on our behalf.
Transfer of personal data to data controllers
We may transfer your personal data to other data controllers, e.g. if Ridge AS has a obligation to transfer the data to public authorities.
Transfer of personal data to recipients in countries outside the EU/EEA
We may transfer your personal data to recipients located in countries outside the EU/EEA for the purposes listed in section 1. The transfer may only take place if there are an adequate level of protection in place. The basis for the international transfer is either EU’s Model Clause Agreement, or the US Privacy Shield Certification.
How long do we store your data?
We store the personal data for as long as necessary to fulfil the purposes above, however, only as long as the consent is existing and not withdrawn, and/or for no longer than we would have a legitimate interest. Your personal data will be deleted in accordance with the specific retention policies for personal data.
Subject to the conditions set out in the applicable Data Protection legislation, you enjoy the rights set out below. In the following, you can read about your rights, and how to perform them.
The right to request access to your personal data
You can send us a request for access to get information about whether we process personal information about you in connection with your membership in NSWPN, and thus gain insight into what information we process about you if you are registered.
The right to rectification of your personal data
If you believe the information we have stored about you is incorrect (e.g. new phone number or change of position or employment) you can request that we correct this at any time.
The right to erasure of your personal data
You can withdraw your consent to process personal data at any time. If you withdraw your consent, we will delete your personal information that is processed on this basis.
If you request erasure of your personal data, the data will be deleted. However, the right to erasure is not absolute, as it should be balanced against legal requirements and Ridge’s legitimate interest.
The right to restriction of processing
If you do not wish us to delete your information but want us to stop processing them in ways other than storage, you may, under certain circumstances, have the right to request this.
The right to data portability
According to Article 20 of the GDPR you have the right to data portability for personal information about yourself that you have given to Ridge AS and which has a basis for processing in consent or agreement. If you wish to exercise your right to portability, the relevant information from your profile will be exported to a Microsoft Excel document and handed over to you.
The right to objection to the processing of your personal data
You have the right to object to processing of personal data concerning you, where the processing is based on legitimate interest of Ridge AS or public interest. If so, Ridge AS will no longer process your personal data unless there is a legitimate ground for doing so which, according to a balancing test, is overriding.
The right to lodge a complaint
You also have the right to lodge a complaint with the competent supervisory authority. In Norway this is ‘Datatilsynet’ (the data protection authority). Complaints can be submitted on their websites by following this link: datatilsynet.no
If you have any questions in regard to the protection of your personal data or if you wish to exercise your legal rights, please contact us by sending an e-mail to firstname.lastname@example.org
Revision of our privacy notice
We keep our privacy notice under regular review and thus the notice may be subject to changes. The date of the last revision of the privacy notice may be found on the top of the page.