Privacy Policy
1. INTRODUCTION
NFM is committed to maintaining your confidence and trust. This Privacy Policy outlines how we collect, use, disclose, and protect your personal data in compliance with the General Data Protection Regulation (EU) 2016/679 (GDPR) and applicable national laws.
By using our website, you agree to this Privacy Policy. If you do not agree, please discontinue use of our website.
2. HOW WE COLLECT INFORMATION
We collect personal data in the following ways:
- Automatically collected data: Browser type, IP address, pages visited, referring website, and timestamps. This data is aggregated for analytics and website improvements.
- Directly provided data: When you submit contact forms, inquiries, or job applications.
- Cookies and tracking technologies: Used for analytics and functional improvements (see Section 5).
3. LEGAL BASIS FOR DATA PROCESSING
NFM processes personal data based on the following legal grounds under GDPR:
Purpose | Legal Basis (GDPR Article) |
Responding to inquiries | Legitimate interest (Art. 6(1)(f)) |
Processing job applications | Contract necessity (Art. 6(1)(b)) |
Sending marketing emails | Consent (Art. 6(1)(a)) |
Website analytics and cookies | Consent (Art. 6(1)(a)) |
Legal and regulatory compliance | Legal obligation (Art. 6(1)(c)) |
4. DATA RETENTION
We retain personal data only for as long as necessary for its intended purpose:
- Inquiries: 12 months
- Recruitment applications: 12 months, or 2 years with consent for future recruitment
- Customer transaction data: 5 years (for legal compliance)
- Cookies: As specified in Section 5
- Newsletter subscription data: Until user opts out
5. COOKIES AND TRACKING TECHNOLOGIES
We use cookies on our website to enhance user experience and ensure functionality. These cookies may include essential cookies required for website operation, as well as third-party cookies for analytics or marketing purposes.
We do not use a solution that stores or provides access to detailed information about individual users’ consent or cookie usage. This means we have no insight into the specific data collected by any third-party providers.
Cookie | Type | Purpose | Retention Period |
_ga (Google Analytics) | Analytics | Tracks visitor behaviour | 2 years |
SessionID | Essential | Maintains session state | Session |
MarketingCookie | Marketing | Customises advertising | 6 months |
Users can manage cookie preferences via their browser settings or our Cookie Consent Manager.
For further information on how third-party cookies operate, users should refer to the privacy policies of the respective providers, such as Google Analytics. (https://policies.google.com/privacy).
6. INTERNATIONAL DATA TRANSFERS
NFM may transfer personal data outside the European Economic Area (EEA). Such transfers are protected by:
- Binding Corporate Rules (BCRs), or
- Standard Contractual Clauses (SCCs) approved by the European Commission.
Users may request a copy of these safeguards by contacting us at iod@nfm.no.
7. SECURITY MEASURES
We implement industry-standard security measures, including:
- Data encryption
- Access controls and authentication mechanisms
- Regular security audits
While we strive to protect personal data, we cannot guarantee absolute security due to the nature of internet communications.
8. YOUR RIGHTS UNDER GDPR
You have the following rights concerning your personal data:
- Right of access (Art. 15) – Request a copy of your data.
- Right to rectification (Art. 16) – Correct inaccurate data.
- Right to erasure (Art. 17) – Request deletion of data.
- Right to restriction of processing (Art. 18) – Limit processing in certain circumstances.
- Right to data portability (Art. 20) – Request a transfer of your data.
- Right to object (Art. 21) – Object to certain processing activities.
- Right not to be subject to automated decision-making (Art. 22).
To exercise these rights, please contact us at iod@nfm.no.
9. NEWSLETTER AND EMAIL COMMUNICATION
We use Mailchimp to send newsletters and marketing emails. By subscribing to our newsletter, you consent to the processing of your data through Mailchimp. You may opt out at any time by clicking the unsubscribe link in our emails.
10. RECRUITMENT DATA
At NFM Group, we are committed to protecting your personal data throughout the recruitment process. When you apply for a job with us, we collect and process only the information necessary to evaluate your application—such as your CV, application letter, education, work history, and interview-related data.
Your data is processed based on your consent, as well as our legitimate interest in conducting a professional recruitment process. We use the recruitment system Talent Recruiter by Talentech to manage applications and store data. Your information is securely stored within this system for up to 12 months, unless you choose to withdraw your consent earlier.
Only relevant individuals involved in the recruitment process, such as HR and hiring managers, will have access to your data.
You have the right to access, correct, delete, or object to the processing of your data at any time. To exercise your rights, please contact the person listed in the job advertisement or email us at iod@nfm.no.
11. DATA SHARING WITH THIRD PARTIES
We do not sell personal data. We may share information only:
- With affiliates and service providers for business operations.
- When required by law or to protect legal rights.
- In the event of mergers, acquisitions, or asset transfers.
12. CHILDREN’S PRIVACY
Our website is not intended for minors under 18 years. If we discover we have collected personal data from a minor, we will delete it.
13. POLICY UPDATES AND USER NOTIFICATION
We may update this Privacy Policy periodically. Changes will be posted on this page with an updated revision date. Users will be notified of major changes via email or website banner notifications.
14. CONTACT INFORMATION
For questions regarding this Privacy Policy or data processing, contact us:
Tel. +47 64 85 14 00
E-mail: marketing@nfm.no
NFM Group AS, Norway
