Privacy Policy

ONwork AS is a Norwegian company («ONwork », «we» or «us») and delivers Services which helps companies connect their company's work processes directly to a designated team, and monitor workflows, tasks and related documents in other IT-systems («Services»). We are committed to your privacy, and we will make sure to keep your personal data private and secure. We will further ensure that you can safely enforce your privacy rights.

This Privacy Policy applies to ONwork’s processing of personal data where ONwork acts as a data controller, including processing related to visitors to our websites, marketing activities, customer relations, recruitment and other business-related activities.

References to “Services” in this Privacy Policy are for descriptive purposes only and do not govern ONwork’s processing of personal data on behalf of customers.

Processing of personal data on behalf of customers in connection with the use of the ONwork Services is governed by a separate Data Processing Agreement (“DPA”) entered into between ONwork and the relevant customer.

ONwork is the data controller of the processing of your personal data. We adhere to applicable Norwegian privacy law and meet the requirements according to applicable laws and regulations within the EU/EEA such as the General Data Protection Regulation (“GDPR”)

It is important that you read this Privacy Policy and understand our collection, storage, use and disclosure of your personal information as described in this Privacy Policy. You are advised to review this Privacy Policy periodically for any changes.

We collect, store and use personal data for several purposes and on different legal basis.

Legitimate interests. ONwork processes personal data on the basis of our legitimate interests, not overridden by your rights. The legal basis of handling your information is legitimate interest for the following purposes:

To provide you with the website.
To process and respond to your requests and inquiries.
To promote, develop and improve our services, products and content.
To inform you about new developments, features, terms, products, services or promotions, specials, special events, or other activities and to plan and administer the foregoing.
To ensure the technical functionality of the website.
To prevent fraud and perform other security measures.

Legal obligation. ONwork must comply with applicable law and may therefore process your personal data as a contact person for your company. The basis of our processing is legal obligations for the following purposes:

Bookkeeping.

Consent. In case any processing is not covered by our legitimate interests, ONwork will ensure to collect your consent for such processing.

I short, we collect and process your data when you use our websites, when you sign up for our services, subscribe to our newsletter, when you contact us and when you fill out voluntary forms issued by us. Below we have listed all the specific ways we collect data from you and what categories of data we typically process, as well as the legal basis for such processing.

Please note that we only process your personal data to the extent that it is necessary for the performance of the below-mentioned purposes.

The website can send out newsletters via email if you have registered to receive this. In order for us to be able to send an email, you must register an email address. Hubspot is the data processor for the newsletter. The email address is stored in a separate database and is not shared with others. Your email address is deleted when you cancel your subscription. The email address is also deleted if we receive feedback that it is not active.

The basis for sending such e-mails to contact persons with our existing customers is to uphold our legitimate interest in following up our customers by providing relevant news and relevant information about our services (GDPR art. 6.1 f), see also the Norwegian Marketing Act art. 15(3)). If you are not an existing customer or user, the basis for sending such e-mail would be your express consent (GDPR art. 6.1 a).

In order to enable you to use our Chatbot we process personal data about you. We collect only personally identifiable information that is specifically and voluntarily provided by visitors to the Chatbot. Information attained by the Chatbot is used only for the intended purpose stated at the time that the information is collected.

We make every practical effort to avoid excessive or irrelevant collection of data. We will limit the information collected to only the minimum information required to complete a user's request. We suggest that you do not provide sensitive information of this nature. If you do wish to provide sensitive information for any reason, Onwork accepts your explicit consent to use that information in the ways described in this Privacy Policy or as described at the point where you choose to disclose this information.

We collect this information to be able to uphold the legitimate interest we have in replying to your requests or questions (GDPR art. 6.1 f).

ONwork uses HubSpot to analyse usage patterns and enhance your user experience on our website. You are completely anonymous until you fill out a contact, registration or other form on our site. When you fill out these forms, we collect certain information which is used as described in this Privacy Policy.

We collect this information to be able to carry out our contract with you (GDPR art. 6.1 b) or to uphold the legitimate interest we have in replying to your requests or questions (GDPR art. 6.1 f).

Our website has links to other sites, which have their own privacy policies. If you provide personal data to these sites, their privacy policies apply. ONwork isn’t responsible for how these sites handle your data. We recommend reading their privacy policies and Terms of Use.

If you like, comment or interact in any way with our page on Facebook, some of your personal information becomes available to us such as your name, profile picture, comments and likes. All this information is specifically and voluntarily provided by visitors to the Facebook page.

We do not store this information anywhere, though it will still be available to us on the social media page. We use this information to track trends, engagement and likes, and we do not use this information otherwise unless it is to get in contact with you directly to respond to your comment or interaction.

We collect this information to uphold our legitimate interest in marketing of our products and services. The processing also upholds our legitimate interest in replying to your requests or questions, and in order to stay updated on trends and likes (GDPR art. 6.1 f)

We also receive from Facebook an aggregated view of how people interact with our Facebook Page and information about age, location and gender of people who are following us. This functionality is managed by Facebook. None of the information provided to us allows us to specifically identify any individuals. For more information about Facebook Page Insights, visit https://www.facebook.com/legal/terms/information_about_page_insights_data

Facebook is responsible for its own processing of your personal data that Facebook initiates and controls. For more information on how Facebook processes your data, visit https://www.facebook.com/privacy/policy/

When your company register as a customer with us, the company must provide us with certain information that we collect and process in our customer relation management systems. This includes the company contact person's name and contact information, company information, payment information, purchase history, communications with us, as well as other information the company provide us with in relation to its customer relationship with us.

We collect and process this information to be able to provide you with a contractual service (GDPR art. 6.1 b) and to uphold our legitimate interest in improving our relations to our customers and to be able to provide good customer care and service (GDPR art. 6.1 f).

In some cases, we are also compelled to process information for compliance with a legal obligation, such as compliance with the Norwegian Bookkeeping Act, or when required by law, court orders or legal processes (GDPR art. 6.1 c).

You are welcome to apply for a position with us. If you decide to do so, we will ask you to provide certain categories of personal data:

Basic information: e.g. name, date of birth and nationality;
Contact information: e.g. your address, e-mail and phone number;
Qualifications: e.g. your CV, application, diplomas and transcripts of records, language knowledge, courses, certifications and any other information you provide us with in your application or interviews with us;
Background information: e.g. information provided to us by your references, which we either collect through official sources or through references you provide us with; and
Our assessments: i.e. assessments and comments we make in relation to our internal assessment of your application.

You provide us with such personal information, as well as any other information that you might choose to share with us in this respect, on a voluntary basis. We will collect and process this information in order to respond to your application and to consider whether to enter into an employment contract with you (ref. GDPR art. 6(1) letter b). We will delete the information related to your application as soon as it is no longer relevant for this purpose.

Cookies are small text files that are saved on your hard drive and associated to your browser, and which provide us with information. They serve to make our web-services more user-friendly and efficient. We use cookies and similar technology to store your website preferences, combat fraud and illegal activity, analyse our services, improving our website and to fulfil other legitimate purposes.

We use necessary cookies in order to uphold our legitimate interest in providing you with a functional webpage (ref. GDPR art. 6(1) letter f).

Web Analysis

To offer a user-friendly website, we look at the user pattern of those who visit the pages. To analyse the information, we use the analysis tool Google Analytics. Google Analytics uses cookies, which register your IP address and provide information about your movements on the web. Cookies help us understand how you interact with our website so we can improve your experience.

Examples of what the statistics answer us are; how many visit different pages, how long the visit lasts, which websites the users come from and which browsers are used. None of the cookies make it possible for us to link information about your use of the website to you as an individual. The information collected by Google Analytics is stored on Google’s servers in the USA.

Received information is subject to Google’s privacy policy. An IP address is defined as personal information because it can be traced back to a specific hardware and thus to an individual. We use Google Analytics’ tracking code that anonymizes the IP address before the information is stored and processed by Google. Thus, the stored IP address cannot be used to identify the individual user.

Where personal data is transferred outside the EU/EEA, such transfers are carried out in accordance with applicable data protection legislation, including the use of relevant transfer safeguards.

Website Functionality

We use cookies to operate our website and present data. Cookies store information like your chosen language and help balance system load for a better user experience. For services requiring login or search, cookies ensure data is presented to the correct user.

We collect this information to uphold our legitimate interest in being able to display our website to you, as well as our legitimate interest in measuring and improving the performance of our digital channels, as well as the marketing of our products and services (GDPR art. 6.1 f).

You have several rights under the applicable data protection regulations. We have provided a list of the rights you can exercise in your relationship with us as a data controller below. If you wish to exercise your rights, please contact us and we will respond to your inquiry as soon as possible, but no later than a month after the receipt of your enquiry.

Access: You have a general right of access to the personal data we have registered about you.
Rectification and erasure: You have a general right to request that we should rectify any incorrect personal data about you and erase personal data about you. Please note that personal data that is essential to the customer relationship with us cannot be deleted, unless you also explicitly request termination of the customer relationship with us.
Restriction: You have a general right to ask us to stop (“freeze”) the processing of your personal data, e.g. where you are of the opinion that we process personal data about you illegally and you do not wish us to erase these data pursuant to our routines for such erasure until the matter has been clarified.
Data portability: You have a general right to request transfer of your personal data in a common, machine-readable format.
Objection: You have a general right to object to our processing of personal data about you if this is justified by special circumstances on your part.
Right to appeal: If you do not agree with the way in which we process your personal data, you may submit an appeal to the Norwegian Data Protection Authority (Datatilsynet). We ask that you contact us beforehand, so that we may clarify any misunderstandings.
Withdraw your consent: If our processing of personal data is based on your consent, you have the right to withdraw your consent at any time, without affecting the lawfulness of processing based on consent before its withdrawal.

ONwork - Privacy Policy

Legal basis and purpose of the processing

What personal data we collect, how and from whom

Newsletter

Chatbot

Registration and Forms

External Links and Social Media

Customer relations

Applying for a position with us

Coockies

Our use of cookies

Your rights

Duration of storage of personal data

Updating this Privacy Policy

Contact