Privacy policy

By this privacy policy we describe the categories of personal data we process and the purpose the personal data is collected for, how we use and otherwise process such personal data and how you may exercise your rights in accordance with applicable data protection laws, including the General Data Protection Regulation (EU) 2016/679 (GDPR). The processing of personal data, such as the name, address, e-mail address, or telephone number of a data subject shall always be in line with the General Data Protection Regulation (GDPR) and in accordance with the country-specific data protection regulations applicable to Glamox.

This privacy policy represents the privacy policy applicable to any legal entity directly or indirectly owned by more than 50% of Glamox AS (hereinafter referred to as Glamox). The privacy policy applies to www.glamox.com and websites of any Glamox legal entity when the legal entity acts as a controller.

Last update: 25.11.2022

1. Who is the controller?

Glamox AS, VAT no 912 007 782, operates the www.glamox.com website(s) and is the controller for the processing of personal data generated from using the site(s) and for the processing described in this privacy policy. Note that local versions can apply under country-specific websites and the Glamox company resident in the specific country act as a controller for such country-specific website(s) and processing of your personal data for the purpose to provide local services and communication.

 

2. How to exercise your rights?

If you have any comments on his privacy policy or want to review, update, remove or correct your personal information please send an e-mail to: privacy@glamox.com

If you have unresolved concerns or if you consider that our processing of your personal data infringes your rights you also have the right to complain to the supervisory authority competent to resolve such concerns according to the applicable law, but Glamox encourages you to contact us first in order to clear any misunderstandings.

Please use the contact details below:

 

Glamox AS
Hoffsveien 1C
0275 Oslo
Norway
Email: privacy@glamox.com
Website: www.glamox.com

 

3. What is the legal basis for our processing of personal data?

Our processing of personal data is relying on one or more of the legal bases listed below:

Your consent as registered subject to the processing of personal data for one or more specific purposes. If we rely on your consent you may withdraw this at any time.

The processing is necessary to establish and fulfil our obligations under an agreement that you as the registered subject is party to.

The processing is necessary for fulfilling a legal obligation for which we are responsible, including establishing, exercising and defending legal claims.

The processing is necessary for purposes related to the legitimate interests pursued by us or a third party unless your interests as a registered subject or fundamental rights and liberties take precedence and require protection of the personal data, especially if the registered subject is a child (balancing of interests).

The processing is necessary to respond to your requests.

The processing is necessary to protect the vital interests of any person.

Any other legal basis permitted by local law.

 

4. What categories of personal data is collected?

Glamox may process different personal data for different business purposes and legitimate reasons depending upon you being e.g. a customer, supplier, business partner, or job applicant and how you interact with us.  

We collect your data when you visit our websites, applications or social media channels, purchase and use our products, services, web-based tools, mobile applications, systems, subscribe to our newsletters, webinars, provide to us your goods or services, contact our customer support, join our business events, participate to our contests, promotions and surveys or otherwise interact with us.

When you provide information to us directly we collect categories of personal data such as personal identification data (name, surname, title, date of birth), contact information data (email, phone number, address, country), account login information (login ID, password or other security codes), images or videos, or quotes from which you may be identified e.g. pictures uploaded to accounts or otherwise provided to us for example in the context of a webinar or interview, or any other information you decide to voluntarily share with any Glamox entity. We may also receive your personal data from business partners who consider our products and services relevant for you and ask us to let you know. When you visit a Glamox website, general data is collected through cookies as described in our cookie policy. This general data and information are stored in the server log files. Collected information may be (1) the browser types and versions used, (2) the operating system used by the accessing system, (3) the website from which an accessing system reaches our website (so-called referrers), (4) the sub-websites, (5) the date and time of access to the website, (6) IP addresses, (7) the Internet service provider of the accessing system, and (8) any other similar data and information that may be used in the event of attacks on our information technology systems.

If you visit our premises we may also record your personal data through video or other electronic, digital or wireless surveillance systems or devices (e.g. CCTV).
The purpose for which we may process your data is for establishing and following up on customer and/or supplier relations and conclusion and execution of any agreements, e.g. sale, purchase, customer support, and warranty follow-up. Assessment, screening and rescreening of potential customers, suppliers and other business partners through due diligence, direct marketing through electronic marketing and follow-up of prospects, customers and other stakeholders, secure our  assets and interests through internal and external audits and investigations, assessments to verify conflict of interests, compliance with legal obligations and defense of legal claims.

 

5. How and why do we use personal data?

Registration and interaction on our website
When you register on our website using the various contact forms available personal data collected and stored are dependent upon the respective form used for the registration. By registering on our website, the IP address, date, and time of the registration are also stored.

When you subscribe to our newsletters the form used for this purpose determines what personal data we collect. In addition to name, we collect other contact details such as phone number, email address, employer etc. Glamox regularly informs its customers and business partners by newsletter about news, product offers and other company information. Where consent is required under the Marketing Control Act, you will have consented prior to marketing e-mails being sent. The consent may be withdrawn at any time. If we have an existing customer relationship with you, we may also use your personal data to provide communication and direct market our products and services. In addition, subscribers to the newsletter may be informed by e-mail, as long as this is necessary for the operation of the newsletter service or a registration in question, as this could be the case in the event of modifications to the newsletter offer, or in the event of a change in technical circumstances. Subscription to our newsletter may be terminated by you at any time.

The legal basis for the processing of personal data in accordance with the above is either consent or our legitimate interest in processing the information due to our business needs as part of our operation, when providing information, support and service to you, and we believe these legitimate interest take precedence over your rights to data protection.

When you apply for a position within Glamox Group
Personal data is collected when you apply for a job in one of the Glamox companies. In the recruitment process, we may use a recruitment system and job application portal operated by an external service provider on our behalf, for processing and handling your job application.

The Glamox and service provider may collect your general identification and contact information, gender, nationality, information about your education, competencies and skills, career and work history, job certificates, work permit, public roles, interests, references and other relevant background information. In addition, job applicants often provide additional personal data they consider relevant for the assessment of the application, such as contact information, family relationships and interests. In interviews we ask questions to determine whether job applicants are suited to the position. In some instances, we may use tests or questionnaires for this purpose. If a decision is made to engage a job applicant, we are then able to request further information as well as documentation of information we have already received. Providing Glamox with this type of information is voluntary.

The processing of personal data is based on the balancing of interests. We need to utilise the information as a means of evaluating applications job applicants have submitted to us. This is a legitimate interest. It is not possible to assess an application without processing personal data. Processing is therefore necessary.

We may file job applicant data for six months, in case job applicants believe that their rights have been breached.

 

When we interact with suppliers and customers
We interact with existing and potential customers and suppliers to follow up on for example offers, orders, deliveries, further sales activities, manage and coordinate marketing activities and information about our products and services This is a legitimate interest. Contact is effective only by direct communication with individuals. Processing is therefore necessary. Processing occurs in respect of the contact person's employer who is an existing or potential customer of Glamox. In addition to the name, we treat contact details, such as phone number, email address and employer, all of which are primarily related to the contact person's employment and not to the contact person's private life. The scope of data processed is kept to a strict minimum. Data that is processed is related to the customer’s or supplier's business activities.

Personal data we process is accountable to the contact person. Where consent is required pursuant to the Marketing Control Act, the contact person will have consented prior to our sending marketing e-mails. Processing of such personal data is based on the balancing of interests We believe that the legitimate interest takes precedence over the contact person’s interests.

 

When you interact with Glamox on social media platforms
Glamox has company accounts on LinkedIn, Facebook, Instagram, YouTube, Vimeo and Twitter and uses these accounts to promote our company and products to current and prospective customers, employees and the public. When interacting with us on these accounts, or if you share any content from one of these accounts we will be able to see your basic user information.  If we respond to you within the same platform we will process your personal data related to our interaction with you, but the processing of personal data on such platforms is managed by the terms of use and privacy policies applicable to each platform. You can always unfollow our social media accounts and delete comments and messages. We also encourage you to never post confidential or sensitive personal information on these accounts. Processing of personal data related to social media platforms is either based on consent or our legitimate interest.

 

When we are involved in transactions, due diligence and investigations
We may also process personal data in relation to transactions and due diligence processes. Processing of such personal data is based on the balancing of interests. We believe that the legitimate interest takes precedence over the specific data subject interests. Glamox may also, when necessary, perform integrity due diligence investigations. In this respect information regarding potential business relations, their operations and business ethics are gathered and assessed. Personal data related to positions and roles, connections and relations to public authorities, political position, possible sanction listing, legal claims etc. will be collected. Processing of any personal data in this respect is based on our duty to comply with legal obligations and legitimate interests and also where applicable, defend or establish legal claims.

When you report a concern through our whistleblowing channel personal data may be processed.

 

When we protect our premises, equipment and personnel
In relation to various safety and security measures, personal data is processed in order to safeguard and protect people, premises, systems, technology and equipment. Such safety measures include camera surveillance (CCTV), access control, IT and IP logs and identity checks. In this respect we may collect and process personal data such as name and other contact data, identity information, employment data and role, CCTV images, date and time logs etc. in order to ensure compliance with legal and contractual obligations and to secure and/or protect personnel and visitors at our locations and secure property, technology and equipment. In addition to providing support and safeguard in critical situations. The legal basis for such processing is our legitimate interest in safeguarding employees, premises and business operations and applicable legal and contractual requirements. The legal basis may also be your consent which you may withdraw at any time.

 

6. To who and when do we share this information?

We will never sell, give away or redistribute personal data to third parties, nor do we share personal data with others except for in circumstances where such sharing is necessary as part of our regular business operations and to provide our services and support to you as described herein. On this basis personal data may be disclosed in the following relations:  

 

To other companies in the Glamox-group:
Personal data may be shared with other companies in the Glamox group on a need-to-know basis.

 

To service providers:
Personal data may be shared when we outsource certain data processing activities to trusted third-party service providers for delivering services on our behalf in accordance with instructions set out in a data processing agreement with the relevant service provider. Third-party service providers are for example used for administration services, security services, consultancy purposes, recruitment services, financial services, facility management services, parking services, IT services, communication services and integrity due diligence services. In such instances, we may share your personal data with such parties to the extent necessary to perform such services.

 

Professional advisors:
Personal data may be shared with professional advisors, such as banks, insurance companies, auditors, lawyers, accountants and other professional advisors.

 

In relation to transactions like acquisition, sales, merger/demergers:
Personal data may be shared in connection with corporate transactions when we buy or sell a business or assets or part of a business or assets or in relation to any reorganization, merger/demerger, joint venture, or other disposition of our business, assets, or stock.

When required by law, regulation, legal process or an enforceable governmental request, we may share your personal data for legal reasons within the Glamox Group or to public authorities or governments but only to the extent we are required to do so.

 

7. Transfer of personal data

The Glamox Group is located in many countries around the world and as a result personal data provided to us may be transferred to or accessed by Glamox affiliates and trusted third parties around the world. Your data may therefore be processed outside your country of residence in order to be able to fulfil the purposes set out in this privacy policy. As a result, personal data may be transferred to a country outside the European Economic Area (EEA). Transfer personal data to a third country outside of the EEA that does not provide adequate protection will not take place unless appropriate safeguards are applied, or the transfer otherwise takes place in accordance with applicable data protection legislation.

 

8. Retention and deletion of personal data

Personal data will be retained as long as necessary to fulfil the purposes for which it has been collected or as long as required by applicable law. If you have a contractual relationship with us, any personal data relating to you will be retained as long as necessary to enable us to fulfil our obligations relating to that contractual relationship. If you consent to certain processing, we store your personal data until you withdraw your consent or once the personal data is no longer necessary for the purpose of the processing.

If the storage purpose is not applicable, or if a storage period prescribed by applicable laws expires, the personal data are routinely blocked or erased in accordance with legal requirements.

 

9. Your rights as a data subject

As a data subject, applicable data protection laws and regulations afford you several rights and freedoms. If you would like to exercise such rights please contact us at privacy@glamox.com

Within the limitation as set out in applicable laws and regulations you are granted the following privacy rights in relation to information collected about you through the use of our website and its online functionalities:

  • You have the right to obtain further information on our use of your personal data.
  • You have the right to request access to copies of the personal data processed about you, but not that exceptions will apply if access infringes the rights of others or pertains to business secrets.
  • You have the right to demand rectification of incorrect personal data and we advise you to inform us of any changes or discrepancies in order for us to keep the information accurate.
  • You have the right to request an electronic copy of the personal data provided by you for transfer to you or to a third party designated by you (the right to data portability).
  • You have the right to request deletion (the right to be forgotten) if you are of the opinion that we are storing data that should have been deleted within the limitations following from legal obligations to obtain such data until the statutory retention period has expired.
  • You have the right to object to the processing, including processing for marketing purposes, where you always can opt out of direct marketing from us by unsubscribing to the newsletters or other marketing e-mails that you receive from us.
  • You have the right to request that we restrict the processing of your personal data if you want us to delete the data or the processing in your view does not have a legal basis.
  • You have the right to withdraw your consent at any time.
  • Automated decisions and profiling are not used by us related to your relationship with us.
  • You have the right to complain to the Norwegian Data Protection Authority, but we encourage you to first address your concern to us, before filing such a complaint.

 

10. Security of processing

All personal data will be processed securely and we have implemented appropriate technical and organizational measures to ensure the availability, integrity and confidentiality of your personal data processed through our website in order to protect your personal data against accidental or unlawful destruction, loss, alteration or unauthorised disclosure or access. Processing of personal data is strictly limited to personnel of Glamox, its controlled business units and affiliates or third-party data processors subject to data processor agreements ensuring appropriate measures to protect the confidentiality of your personal data. However, web-based data transmissions may in principle have security gaps, so absolute protection cannot be guaranteed. 

 

11. Updates to this privacy policy

Glamox reserves the right to improve and modify this privacy policy. Revisions of this privacy policy will be published on www.glamox.com and the latest version will always be available here. We will notify our users when we make material changes to our privacy policy.

 

12. Cookies

Glamox’ web pages use cookies. Cookies are small text files stored in a computer system via a web browser to track usage patterns and record preferences and thus Glamox can provide users with more user-friendly services. You may, at any time, prevent the setting of cookies by changing the settings in your web browser. Furthermore, already set cookies may be deleted at any time via a web browser or other software programs. If you deactivate the setting of cookies in the Internet browser, not all functions of our website may be entirely usable.

There are two types of cookies, persistent cookies that remain on a user’s device for the period of time specified in the specific cookie and temporary session cookies which are deleted when you close the browser. Cookies are further categorised as strictly necessary cookies, functional cookies, statistical cookies and marketing cookies.

For more information about which cookies we use, please follow your browser instruction for a live cookie overview per web page.

Glamox uses Google as a service provider for various cookies as further described below. The operator of the Google cookies and components is Google Inc., 1600 Amphitheatre Pkwy, Mountain View, CA 94043-1351, United States.  Further information and the applicable data protection provisions of Google may be retrieved at https://www.google.com/intl/en/policies/privacy/ 

Newsletter tracking
Newsletters from Glamox contain so-called tracking pixels. A tracking pixel is a miniature graphic embedded in e-mails, which are sent in HTML format to enable log file recording and analysis. This allows a statistical analysis of the success or failure of online marketing campaigns. Based on the embedded tracking pixel, we may see if and when an e-mail was opened by a data subject, and which links in the e-mail were called up by data subjects. Personal data collected in the tracking pixels contained in the newsletters are stored and analysed in order to optimize the issuance of newsletters and adapt the content of future newsletters to the interests of the data subject. These personal data will not be passed on to third parties. You always have the right to opt out of our marketing communications. To opt out of marketing emails, simply use the functionality provided at the bottom of any email received from us. Glamox automatically regards an opt-out from marketing communications as a withdrawal of consent to receive further marketing. Personal data will be deleted by Glamox when you opt out of marketing communications.

Google Analytics
Glamox has integrated Google Analytics with the anonymizer function on our websites. Google Analytics is a web analytics service. Web analytics is the collection, gathering, and analysis of data about the behaviour of visitors to websites. A web analysis service collects, inter alia, data about the website, from which a person has come (the so-called referrer), which sub-pages were visited, or how often and for what duration a sub-page was viewed. Web analytics are mainly used for the optimization of a website and in order to carry out a cost-benefit analysis of internet advertising. 

Through Google Analytics the Glamox website uses the application "_gat. _anonymizeIp". By means of this application, the IP address of the data subject is abridged by Google and anonymised when accessing our websites from a Member State of the European Union or another Contracting State to the Agreement on the European Economic Area. The purpose of the Google Analytics component is to analyse the traffic on our website. Google uses the collected data and information, inter alia, to evaluate the use of our website and to provide online reports, which show the activities on our websites, and to provide other services concerning the use of our Internet site for us. The cookie is used to store personal information, such as the access time, the location from which the access was made, and the frequency of visits of our website by the data subject. With each visit to our Internet site, such personal data, including the IP address of the Internet access used by the data subject, will be transmitted to Google in the United States of America. These personal data are stored by Google in the United States of America. Google may pass these personal data collected through the technical procedure to third parties.

For more information please see http://www.google.com/analytics/terms/us.html . Google Analytics is further explained under the following Link https://www.google.com/analytics/

Google Remarketing
Glamox has integrated Google Remarketing services on our websites. Google Remarketing is a feature of Google AdWords, which allows us to display relevant advertising content when you browse outside of our website. Google Remarketing allows us to display ads on the Google network or on other websites, which are based on individual needs and matched to the interests of the website users.

Google Remarketing sets a cookie on the information technology system of the data subject. Google enables a recognition of the visitor of our website if he calls up consecutive web pages, which are also a member of the Google advertising network. With each call-up to an Internet site on which the service has been integrated by Google Remarketing, the web browser of the data subject identifies automatically with Google. During this technical procedure, Google receives personal information, such as the IP address or the surfing behaviour of the user, which Google uses, inter alia, for the insertion of interest-relevant advertising.

The cookie is used to store personal information, e.g. the Internet pages visited by the data subject. Each time we visit our Internet pages, personal data, including the IP address of the Internet access used by the data subject, is transmitted to Google in the United States of America. These personal data are stored by Google in the United States of America. Google may pass these personal data collected through the technical procedure to third parties.


Google AdWords
Glamox has integrated Google AdWords on our websites. Google AdWords is a service for Internet advertising that allows the advertiser to place ads in Google search engine results and the Google advertising network. Google AdWords allows an advertiser to pre-define specific keywords with the help of which an ad on Google's search results is displayed. The ad is only displayed when the user utilizes the search engine to retrieve a keyword-relevant search result. In the Google Advertising Network, the ads are distributed on relevant web pages using an automatic algorithm, considering the previously defined keywords.

The purpose of Google AdWords is the promotion of our website by the inclusion of relevant advertising on the websites of third parties and in the search engine results of the search engine Google and an insertion of third-party advertising on our website.

The data and information collected through the use of the conversion cookie is used by Google to create visit statistics for our website. These visit statistics are used in order to determine the total number of users who have been served through AdWords ads to ascertain the success or failure of each AdWords ad and to optimize our AdWords ads in the future. Neither our company nor other Google AdWords advertisers receive information from Google that could identify the data subject.

The conversion cookie stores personal information, e.g. the Internet pages visited by the data subject. Each time we visit our Internet pages, personal data, including the IP address of the Internet access used by the data subject, is transmitted to Google in the United States of America. These personal data are stored by Google in the United States of America. Google may pass these personal data collected through the technical procedure to third parties. The data subject has a possibility of objecting to the interest-based advertisement of Google. Therefore, the data subject must access from each of the browsers in use the link www.google.de/settings/ads and set the desired settings.

Vimeo
Glamox has integrated components of Vimeo on our websites.

The operating company of Vimeo is Vimeo, Inc. 555 West 18th Street, New York, New York 10011

Vimeo will receive information through the Vimeo component that the data subject has visited our website, if the data subject at the time of the call to our website is logged in on Vimeo; this occurs regardless of whether the person clicks on a Vimeo video or not. If such a transmission of this information to Vimeo is not desirable for the data subject, the delivery may be prevented if the data subject logs off from their own Vimeo account before a call-up to our website is made. Vimeo's data protection provisions, available at https://vimeo.com/privacy, provide information about the collection, processing and use of personal data by Vimeo.


SumoMe
On this website Glamox has integrated components of SumoMe. We use this service to map the general user behaviour on the website and to create forms. Read SumoMe’s privacy policy here: https://help.sumo.com/hc/en-us/articles/218958727

 

Facebook
Glamox has integrated components of the enterprise Facebook on our websites.

The operating company of Facebook is Facebook, Inc., 1 Hacker Way, Menlo Park, CA 94025, United States. If a person lives outside of the United States or Canada, the controller is Facebook Ireland Ltd., 4 Grand Canal Square, Grand Canal Harbour, Dublin 2, Ireland. 

The data protection guideline published by Facebook, which is available at https://facebook.com/about/privacy/ , provides information about the collection, processing and use of personal data by Facebook. In addition, it is explained there what setting options Facebook offers to protect the privacy of the data subject. In addition, different configuration options are made available to allow the elimination of data transmission to Facebook, e.g. the Facebook blocker of the provider Webgraph, which may be obtained under http://webgraph.com/resources/facebookblocker/ . These applications may be used by the data subject to eliminate a data transmission to Facebook.

LinkedIn
Glamox has integrated components of the LinkedIn Corporation on our websites. 

The operating company of LinkedIn is LinkedIn Corporation, 2029 Stierlin Court Mountain View, CA 94043, UNITED STATES. For privacy matters outside of the UNITED STATES LinkedIn Ireland, Privacy Policy Issues, Wilton Plaza, Wilton Place, Dublin 2, Ireland, is responsible.

With each call-up to one of the individual pages of this Internet site, which is operated by the controller and on which a LinkedIn component (LinkedIn plug-in) was integrated, the Internet browser on the information technology system of the data subject is automatically prompted to the download of a display of the corresponding LinkedIn component of LinkedIn. Further information about the LinkedIn plug-in may be accessed under https://developer.linkedin.com/plugins. During the course of this technical procedure, LinkedIn gains knowledge of what specific sub-page of our website was visited by the data subject.

LinkedIn provides under https://www.linkedin.com/psettings/guest-controls the possibility to unsubscribe from e-mail messages, SMS messages and targeted ads, as well as the ability to manage ad settings. LinkedIn also uses affiliates such as Eire, Google Analytics, BlueKai, DoubleClick, Nielsen, Comscore, Eloqua, and Lotame. The setting of such cookies may be denied under https://www.linkedin.com/legal/cookie-policy. The applicable privacy policy for LinkedIn is available under https://www.linkedin.com/legal/privacy-policy. The LinkedIn Cookie Policy is available under https://www.linkedin.com/legal/cookie-policy

Twitter
Glamox has integrated components of Twitter on our websites.

The operating company of Twitter is Twitter, Inc., 1355 Market Street, Suite 900, San Francisco, CA 94103, UNITED STATES.

With each call-up to one of the individual pages of this Internet site, which is operated by the controller and on which a Twitter component (Twitter button) was integrated, the Internet browser on the information technology system of the data subject is automatically prompted to download a display of the corresponding Twitter component of Twitter. Further information about the Twitter buttons is available under https://about.twitter.com/de/resources/buttons. During the course of this technical procedure, Twitter gains knowledge of what specific sub-page of our website was visited by the data subject. The purpose of the integration of the Twitter component is a retransmission of the contents of this website to allow our users to introduce this web page to the digital world and increase our visitor numbers. The applicable data protection provisions of Twitter may be accessed under https://twitter.com/privacy?lang=en

 

YouTube
Glamox has integrated components of YouTube on our websites.

The operating company of YouTube is YouTube, LLC, 901 Cherry Ave., San Bruno, CA 94066, UNITED STATES.  YouTube, LLC is a subsidiary of Google Inc., 1600 Amphitheatre Pkwy, Mountain View, CA 94043-1351, UNITED STATES.

YouTube and Google will receive information through the YouTube component that the data subject has visited our website, if the data subject at the time of the call to our website is logged in on YouTube; this occurs regardless of whether the person clicks on a YouTube video or not. If such a transmission of this information to YouTube and Google is not desirable for the data subject, the delivery may be prevented if the data subject logs off from their own YouTube account before a call-up to our website is made.

YouTube's data protection provisions, available at https://www.google.com/intl/en/policies/privacy/, provide information about the collection, processing and use of personal data by YouTube and Google.