Privacy policy
This declaration applies from 01.11.22.
This privacy policy explains how
- 4human HRM AS (org. no. 897 757 222)
- 4human TQM AS (org. no. 984 036 736)
- 4human QM365 AS (org. no. 989 298 291)
from now on referred to as 4human, we or us, mainly process personal data related to you in the role of:
- contact person at customer/supplier/partner
- job seeker
- former employee
- visitors to 4human's website
- recipient of marketing material
- Participant in courses or user forums
- registered in one of our cloud services
4human works continuously with privacy and this privacy policy can be changed when we find it necessary, and this includes adaptation to privacy legislation.
This statement is written in accordance with the Personal Data Processing Act of June 15, 2018.
Explanation of terms
Processing of personal data - any collection, recording, organization, structuring, storage, adaptation or alteration, retrieval, consultation, use, disclosure by transmission, dissemination or any other form of making available, alignment or combination, restriction, erasure or destruction of personal data.
Responsibility for processing/controller - 4human 4human is the data controller for all processing of personal data where we ourselves decide why to collect and use personal data. It is 4human that decides with which tools this should happen. In other words, we are responsible for the use of personal data.
Data Processor - will be the person or persons who will process personal data on our behalf. The Data Processor can only use the personal data that they process on our behalf for what we have decided it should be used for.
Personal data - is direct or indirect information about a natural person that allows that person to be identified. For example, name, e-mail address, behavioral patterns or IP address.
Data subject - is the natural person about whom personal data has been collected.
Contact person at customer/supplier or partner
- name
- phone number
- role
This is as part of the administration of the contractual relationship between us and the customer/supplier or partner. We have received information about you as a contact person either from yourself or from your employer. We delete the contact person information from our systems when we are notified by our customers/suppliers or partners that you have left. There will be exceptions to this, such as in our accounting system, where your contact information will remain on existing invoices or in e-mail correspondence about the customer relationship.
Pursuant to the Marketing Control Act, we may market our own products and services to our existing customers. You, as the customer's contact person, can opt out of this. You cannot opt out of operational messages or other messages from us that are necessary to maintain the service agreement we have with you or the company you are the contact person for.
Job seekers
We process personal data about job applicants in order to assess whether you are suitable for the job you have applied for. And we process your data for the purpose of entering into an employment contract with you. The vast majority of the personal data we process about you will be information that you provide to us yourself. When checking references, your references may provide us with new personal data about you. We may also use open sources such as the internet and social media in the recruitment process. If we use any of these sources for information about you that we believe will be relevant to the recruitment process, you will be given the opportunity to correct any incorrect information.
We delete information about job applicants who do not get the job after the hiring process is over. If we want to keep information about you longer, we ask for your consent.
Former employees
After termination of the employment relationship, 4human will be required by law to store some of your personal data. It will also be necessary to store personal data about former employees for the purposes of pensions and any occupational injury cases. Upon termination of the employment relationship, we will review the personal data we have about you and delete the data we no longer have any purpose for storing.
It will be natural to store personal information about former employees such as name, position, work area and duration of the employment relationship throughout 4human's lifetime. This is based on an assessment that you are part of our company's history.
Visitors to 4human's website
When you visit 4human's websites, we collect data about you through what are called cookies. We collect data related to the equipment you use to visit our website, your IP address and how you move around our website. We collect this information about you in order to provide you with the best possible user experience while visiting us. The legal basis we use to collect this information is our legitimate interest in developing our websites so that we can provide you with the best possible user experience. Click here to read more to read more about cookies and how you can manage their use.
Recipient of marketing material
4human can send marketing material (newsletters) to potential customers when we have received consent for this from you. We must be able to document this consent, and you can withdraw this consent at any time.
Participant in course or user forum
For those who wish to participate in our free courses, we collect the following personal data:
- name
- phone number
- position
- business affiliation
We hold this information as part of a contract between you and us. We have given you a free course in return for us having contact information about you. If we have no contact with you during the next 12 months after the free course, your information will be deleted from our systems, unless you have agreed to receive newsletters or other marketing material.
If you are a participant in paid courses/user forums, we will ask for the same contact information as above. This information about you will be stored in our accounting system on the invoices for your participation. Here, the Bookkeeping Act will determine when your personal data will be deleted.
Registered in one of our cloud services
As a cloud service provider, 4human makes its programs available to our customers. In these cases, we are the data processor and it will then be the company with which you are associated whose privacy policy will apply to you. Our customer (the company you are affiliated with) is the data controller and we at 4human are a supplier to the company in question. If you would like more information about how your personal data is processed in our cloud services, you must contact the person responsible for our systems in your company.
Information security
4human protects your personal data with technical and organizational security measures. 4human uses ISO27001 as a framework for information security and in addition, 4human HRM and 4human TQM are certified according to the standards ISO27001- information security management system, ISO27018- information security for personal data in cloud services and ISO27701- management system for the processing of personal data both as data controller and data processor.
Your rights as a registrant
- you always have the right to ask for incorrect information about you to be corrected
- you always have the right to request access to the personal data we hold about you (applies to job applicants and former employees). For all other data subjects, this statement explains what we have registered about you
- you always have the right to request the deletion of your personal data, but as this statement shows, we cannot always comply with this request
As a data subject, you can exercise your rights regarding 4human's processing of personal data by sending an e-mail to: [email protected]. You are entitled to a response without undue delay, and at the latest within 30 days.
If you have any questions about the privacy policy or your rights, you can also contact our data protection officer, Marit Buset, directly via e-mail: [email protected]
Contact information
If you believe that we have not complied with your rights under the Personal Data Act or otherwise violated your privacy, please contact us at [email protected]
You also have the right to file a complaint directly with the Norwegian Data Protection Authority. The contact information is available at datatilsynet.no