PROCESSING OF PERSONAL INFORMATION Updated 06.12.2023

​

This privacy policy applies to Østnes Helicopters Group which includes the companies Kjell A Østnes AS (967 461 490, Tullins gate 2, 0166 Oslo, Norway), Kjell A Östnes AB (559296-3648, Östjädra 1, 752 92 Västerås, Sweden), Østnes Aero AS (986 297 626, Tullins gate 2, 0166 Oslo, Norway), Dragonfly AS (914 284 341, Tullins gate 2, 0166 Oslo, Norway) and Eggemoen Heli Paint AS (930 582 956, Flyplassveien 22, 3514 Hønefoss, Norway).

1. Data processing manager
Kjell A Østnes AS (967 461 490) Tullins gate 2, 0166 Oslo.  

2. Contact for questions regarding personal data and data that require discretion
Østnes Helicopters Group, post@ostnes.com

3. What is personal data?

Personal data is information that may be directly or indirectly linked to a living person. For example, names and social security numbers, but also other information specific to the person's physical, genetic, mental, economic, cultural, or social identity. For example, your IP address or a recording of your voice may be personal data if they can be connected to you.

Some personal data is considered particularly sensitive and is covered by special rules. Sensitive personal data means information that reveals, for example, membership in a trade union or information about health.

Østnes Helicopters does not collect particularly sensitive personal data.

4. Common data sources and data collection methods
The information in the register is usually collected from the registered individuals themselves. Personal and other information may be collected through the registration and with the use of services and programs related to Østnes Helicopters Group. Based on business activities, it is also a possibility that personal information could be collected interactively, e.g. in meetings or by telephone. In addition, data-driven data collection methods can be used. Personal information can also be retrieved and updated from demographic records, credit records, records provided by commercial marketing companies and similar reliable private or public records and sources.

5. Why do we collect personal data?

The purpose of the processing of customers personal data and the legal basis for the processing
The purpose of the processing of customers' (including potential customers) personal data is to handle, develop and maintain the customer relationship between the data controller and the customer and for other similar business activities. The personal information can therefore e.g. be used to make related products and services available to the customer, for customer relationship management and for development, analysis, communication, marketing and business planning. In addition, personal information can be used for direct marketing or the like. In such cases, relevant security requirements will be met, in addition to the fact that there is always an opportunity to terminate the subscription. Personal information can also be used in research and development contexts such as to improve and develop IT systems and business processes at Østnes Helicopters Group. The legal basis for the processing of personal data It is Østnes Helicopters Groups legal right to manage its business, which also applies to, but not limited to, communicating with its customers, and marketing its companies and products. The legal basis for the processing of personal data may also be the conclusion of an agreement to which the data subject is a party or has taken part in the implementation of a declaration of intent in which the data subject has given their consent.

6. Data content in the register
The register may contain the data subjects' names, e-mail address, street address, country, telephone /phone number, company name and data regarding the use of electronic services (e.g. read or search data, IP addresses and cookies). In addition, the register may contain other information that the registered individual has provided.

7. Log data and cookies
Through participation in electronic business, Østnes Helicopters Group can automatically track certain types of information, such as IP addresses, geographical origin and browser type, even before any information is explicitly requested. In addition, Østnes Helicopters Group uses cookies to collect data. Cookies are small files that may contain an anonymous individual identifier. Cookies are sent to the browser from websites and stored on the registered computer's hard drive. The registered individual can set their browser to defer all cookies or to inform when a cookie is sent / stored. If the data subject does not accept the cookies, it may result in our services not working optimally.

8. Storage time for personal information
Østnes Helicopters Group stores personal information in the register in accordance with applicable law and only for as long as is necessary to carry out the purpose of the register. In general, information is stored as long as it is in accordance with applicable laws and regulations for a maximum of six (6) years after the customer relationship with the data subject has ceased. In addition, the storage of the information can in some cases where it is required by law be stored longer, e.g. in the production, exercise or defense of legal claims, conducting internal investigations or if required by applicable law. The above storage period is based on information and requirements related to e.g. product and service guarantees, product liability laws and the burden of proof in potential legal actions. Østnes Helicopters Group strives to ensure that stored data is valid within a reasonable limit by regularly deleting unnecessary data and updating outdated data.

9. Disclosure and transfer of personal information
Personal information is not usually transferred to third parties. However, personal information may be passed on to subcontractors of the Østnes Helicopters Group for the purposes described in this privacy policy unless the data subject has explicitly prohibited this. In addition, information must be provided to third parties in certain circumstances when required by applicable law. Due to technical and practical requirements, personal data may be processed in geographical locations other than the country in which the data subject is located, including locations outside the EU or the European Economic Area (including Switzerland). In such cases, the processing and transfer of personal data shall take place in accordance with applicable law (e.g. based on the EU Commission's standard agreement) and Østnes Helicopters Groups data processing declaration and rules, including decisions on appropriate security measures. Personal information can also be presented and transferred to subsidiaries and other companies that are part of the Østnes Helicopter Group, for the purposes stated above.

10. Principles of data protection and security
Databases containing personal data are protected by firewalls, passwords and other technical measures. Physical databases and their backups are located behind locked doors. Upon receiving the information, strict procedures and security measures are followed to prevent unauthorized and illegal access to, alteration or use of personal information. All safety measures used are appropriate and in accordance with the usual standard. Østnes Helicopters Group continuously monitors the technical development to ensure that the level of data protection is updated. Folders with personal information that are handled manually are also found behind locked doors where no outsiders have access. Access to the information is only given to certain individuals who work for Østnes Helicopters Group and who need the information to perform their tasks. The individuals who process the information in this register as part of their tasks receive regular training and guidance in data protection and data security.

11. Rights of registered individuals
The registered individual has the right to:

•  ask the data controller for access to personal data about themselves and control them

• request the correction or deletion of their personal data or restrict the processing

• refuse the processing of their personal data 

• if applicable, transfer their personal data from one system to another.

All requests due to the above rights must be notified in writing to the contact mentioned in section 2 of this privacy policy (or e.g. by unsubscribing from the e-mail list described in the marketing communication section, if applicable). In cases where the processing of personal data is based on the data subject's consent, the data subject may withdraw his or her consent at any time. Withdrawal of consent does not, however, affect the legality of lawsuits that were initiated before the consent was withdrawn. In addition, the data subject can always register a complaint to the relevant supervisory authority if the data subject concludes that Østnes Helicopters Group has not processed the personal data in accordance with current privacy legislations.

12. Revision of the privacy policy
This privacy policy is valid until further notice and available on Østnes Helicopters Groups website. Østnes Helicopters Group's reserves the right to revise this privacy policy and recommends that the data subjects check the contents of the privacy policy on a regular basis.

​

​