Privacy Policy
1. INTRODUCTION
NFM is committed to maintaining your confidence and trust. This Privacy Policy outlines how we collect, use, disclose, and protect your personal data in compliance with the General Data Protection Regulation (EU) 2016/679 (GDPR) and applicable national laws.
By using our website, you agree to this Privacy Policy. If you do not agree, please discontinue use of our website.
2. HOW WE COLLECT INFORMATION
We collect personal data in the following ways:
- Automatically collected data: Browser type, IP address, pages visited, referring website, and timestamps. This data is aggregated for analytics and website improvements.
- Directly provided data: When you submit contact forms, inquiries, or job applications.
- Cookies and tracking technologies: Used for analytics and functional improvements (see Section 5).
3. LEGAL BASIS FOR DATA PROCESSING
NFM processes personal data based on the following legal grounds under GDPR:
Purpose | Legal Basis (GDPR Article) |
Responding to inquiries | Legitimate interest (Art. 6(1)(f)) |
Processing job applications | Contract necessity (Art. 6(1)(b)) |
Sending marketing emails | Consent (Art. 6(1)(a)) |
Website analytics and cookies | Consent (Art. 6(1)(a)) |
Legal and regulatory compliance | Legal obligation (Art. 6(1)(c)) |
4. DATA RETENTION
We retain personal data only for as long as necessary for its intended purpose:
- Inquiries: 12 months
- Recruitment applications: 6 months, or 2 years with consent for future recruitment
- Customer transaction data: 5 years (for legal compliance)
- Cookies: As specified in Section 5
- Newsletter subscription data: Until user opts out
5. COOKIES AND TRACKING TECHNOLOGIES
We use cookies on our website to enhance user experience and ensure functionality. These cookies may include essential cookies required for website operation, as well as third-party cookies for analytics or marketing purposes.
We do not use a solution that stores or provides access to detailed information about individual users’ consent or cookie usage. This means we have no insight into the specific data collected by any third-party providers.
Cookie | Type | Purpose | Retention Period |
_ga (Google Analytics) | Analytics | Tracks visitor behaviour | 2 years |
SessionID | Essential | Maintains session state | Session |
MarketingCookie | Marketing | Customises advertising | 6 months |
Users can manage cookie preferences via their browser settings or our Cookie Consent Manager.
For further information on how third-party cookies operate, users should refer to the privacy policies of the respective providers, such as Google Analytics. (https://policies.google.com/privacy).
6. INTERNATIONAL DATA TRANSFERS
NFM may transfer personal data outside the European Economic Area (EEA). Such transfers are protected by:
- Binding Corporate Rules (BCRs), or
- Standard Contractual Clauses (SCCs) approved by the European Commission.
Users may request a copy of these safeguards by contacting us at iod@nfm.no.
7. SECURITY MEASURES
We implement industry-standard security measures, including:
- Data encryption
- Access controls and authentication mechanisms
- Regular security audits
While we strive to protect personal data, we cannot guarantee absolute security due to the nature of internet communications.
8. YOUR RIGHTS UNDER GDPR
You have the following rights concerning your personal data:
- Right of access (Art. 15) – Request a copy of your data.
- Right to rectification (Art. 16) – Correct inaccurate data.
- Right to erasure (Art. 17) – Request deletion of data.
- Right to restriction of processing (Art. 18) – Limit processing in certain circumstances.
- Right to data portability (Art. 20) – Request a transfer of your data.
- Right to object (Art. 21) – Object to certain processing activities.
- Right not to be subject to automated decision-making (Art. 22).
To exercise these rights, please contact us at iod@nfm.no.
9. NEWSLETTER AND EMAIL COMMUNICATION
We use Mailchimp to send newsletters and marketing emails. By subscribing to our newsletter, you consent to the processing of your data through Mailchimp. You may opt out at any time by clicking the unsubscribe link in our emails.
10. RECRUITMENT DATA
By clicking on the “Apply”, “Apply now” button or by sending a recruitment application to NFM Production Sp. z o.o. (Employer, data controller) in any other manner, you agree to the processing by the Employer of your personal data contained in the recruitment application in order to conduct recruitment for the position indicated in the advertisement.
If you want us to keep your CV in our database, add the following consent to your CV and send us your CV again: “I agree to the processing of personal data contained in my recruitment application by NFM Production Sp. z o.o. for future recruitment purposes”.
You can withdraw your consent at any time by contacting us at iod@nfm.no.
11. DATA SHARING WITH THIRD PARTIES
We do not sell personal data. We may share information only:
- With affiliates and service providers for business operations.
- When required by law or to protect legal rights.
- In the event of mergers, acquisitions, or asset transfers.
12. CHILDREN’S PRIVACY
Our website is not intended for minors under 18 years. If we discover we have collected personal data from a minor, we will delete it.
13. POLICY UPDATES AND USER NOTIFICATION
We may update this Privacy Policy periodically. Changes will be posted on this page with an updated revision date. Users will be notified of major changes via email or website banner notifications.
14. CONTACT INFORMATION
For questions regarding this Privacy Policy or data processing, contact us:
Tel. +47 64 85 14 00
E-mail: marketing@nfm.no
NFM Group AS, Norway
