Who we are
The company name is Skagerak Consulting AS (SkC). Our website address is https://www.skc.no.
The personal data we collect and why we collect it
Our processing of personal data mainly has three purposes. Most importantly, we process personal data to carry out tasks on behalf of our customers. In addition, we process personal data to maintain an ongoing dialogue with employees of our customers and partners, for market contact and internal administration.
It is necessary to process personal data in order to carry out customer assignments and ongoing operations of the company. SkC processes information about all involved contact persons. This personal information can be names, positions/titles, addresses, telephone numbers, e-mail addresses, and other information relating to the assignments.
In recruitment processes, personal information that is relevant for job applicants is processed, including name, contact information, place of study, grades, previous employers, references, personal characteristics, test results, reference information, etc. The purpose is to process personal data in order to assess current candidates. The legal basis is either consent or to carry out a process at the data subject’s request before a possible employment contract is entered into with the client.
SkC’s processing of personal data in connection with external assignments is based on a specific assignment agreement with the customer. Data processing agreements are also made with external partners who participate in the execution of customer assignments.
Processing of personal data in relation to external customer assignments
The purpose of the processing is to call in, interview, carry out written surveys, test, follow up, and have conversations with individuals and groups in connection with various customer assignments related to recruitment, management development, organizational development, etc.
The legal basis for the processing is consent. The most extensive data processing takes place in connection with recruitment assignments. All personal information relating to recruitment processes is registered and stored in an external, approved database. The job search service, and thus the database Skagerak Consulting uses in connection with its recruitment, is owned and operated by Recman AS. Only authorized persons have access to the personal data in this database. For further information on processing personal data in connection with recruitment processes, please view this link: Storage of personal data in connection with recruitment processes.
Personal data related to other types of assignments are stored in SkC’s cloud storage solution, Sharepoint, which is provided by Microsoft.
SkC has routines and documented measures ensuring that personal data stored in Sharepoint and RecMan is obtained based on consent and is stored properly.
SkC has documented technical and organizational measures ensuring that the personal data is processed to maintain confidentiality and prevent unauthorized persons from gaining access to the data.
Embedded content from other websites
Articles on this website may include embedded content (eg videos, images, articles, etc.). Embedded content from other websites behaves exactly as if the visitor had visited the website from which the embedded content originates.
Recipients of personal data and use of subcontractors
SkC uses subcontractors (data processors) to carry out customer assignments and administrative tasks. In these cases, the information is secured through data processing agreements so that the processing meets the requirements of the General Data Protection Regulation (GDPR) and that the personal information is not used for any other purpose.
SkC does not share personal data with third parties unless this third party is the client in question, the personal data is a natural part of the assignment, or another party requires disclosure through legal obligations.
The data subject’s rights
By contacting SkC, the data subject has the right to demand access to, correction, or deletion of personal data concerning the data subject. If the basis for processing personal data is consent, the data subject has the right to withdraw their consent at any time by contacting SkC.
SkC will store the personal data for as long as necessary for the purpose of processing. Personal information relating to customer assignments is stored for up to 10 years after the customer relationship/assignment ends unless otherwise agreed. Personal data for marketing purposes is stored as long as a customer relationship exists. When personal data is given by consent, it is stored until the consent is withdrawn. Personal information about business partners and suppliers is stored as long as a customer relationship exists.
Personal information provided in recruitment processes is stored for up to 24 months after the application process has ended. Consent is obtained for storage beyond this. Consent can be withdrawn at any time. SkC will then delete the information. Information stored in Recman can be deleted by the registered person logging in and deleting or updating the information. This can be done any time after the end of the recruitment process.
SkC will not store personal data beyond this unless there is another legal basis for continued processing.
The controller for personal data in SkC is Tom R. Gogstad. If you have questions related to the storage of personal data, you may contact him at: firstname.lastname@example.org