We care about your privacy
Embriq protects your privacy and your personal data. This means that Embriq endeavours to collect and process personal data only to the extent necessary.
The new General Data Protection Regulation (GDPR) has strengthened the protection of individuals with regard to their personal data. This has prompted Embriq to review our routines and how they are structured to ensure that the rights of individuals are protected.
This document contains a description of how Embriq processes personal data and what rights you have and also provides information about who you can contact if you have any further questions about the processing of your personal data.
Personal data controller
Embriq AS, org. no. 993 884 871, is responsible for the company’s processing of personal data.
Data processors
In some instances we use data processors, which are companies that carry out data processing on behalf of Embriq. In those cases where data processors are used, Embriq will ensure that an agreement governing the data processing is entered into before the data processing begins.
Where do we process your personal data?
Embriq endeavours to process all your personal data within the EU/EEA.
Where personal data is processed outside the EU/EEA, Embriq will take the necessary measures to ensure the level of protection that the General Data Protection Regulation requires. This includes the use of such measures as the EU’s Standard Contractual Clauses and recognised frameworks such as the Privacy Shield.
Security
To protect the personal data that Embriq processes, we use a range of security systems, such as antivirus software, firewalls and access rights management. We also use encryption for enhanced protection of sensitive personal data. Embriq is always working to maintain and improve the security of our IT environment.
How long do we keep your personal data?
Embriq never stores your personal data for longer than is necessary for the specific purpose. For more information, please refer to the different retention periods indicated under each purpose.
What are your rights as a data subject?
Right of access (right to a register extract)
Embriq is always transparent about how we process your personal data. If you want to know more about what personal data we process about you, you can always request access to your data in the form of a register extract. When we receive a request of this kind, we may ask for additional information to ensure efficient handling and that the data is provided to the right person.
Right to rectification
You can request the correction of your personal data if it is incorrect. Within the scope of the specified purpose, you also have the right to supplement any incomplete personal data.
Right to erasure
You can request that your personal data is erased in the following situations:
- The information is no longer required for the purpose for which it was collected and processed.
- You object to the balancing of interests that we have performed on the basis of legitimate interests and your objection overrides our legitimate interest.
- Your personal data must be erased in order to fulfil a legal obligation to which we are subject.
Embriq has the right to refuse your request if there are legal obligations that prevent the immediate erasure of your personal data. Such obligations may relate, for example, to accounting and tax laws or other legislation with which we must comply. It may also be the case that the processing is necessary for the establishment, exercise or defence of legal claims. If we are prevented from erasing the personal data as requested, we will instead block the personal data from being used for purposes other than those that are preventing the requested erasure.
Right to restriction of processing
You have the right to request that our processing of your personal data be restricted. If you are contesting the accuracy of the personal data that we process, you can request that the processing be restricted for the time we need to verify the accuracy of the personal data. If we no longer require your personal data for the purpose specified, but you need it in order to establish, exercise or defend legal claims, you can request that the processing of the data be restricted at Embriq. This means that you can require us to refrain from deleting your data.
If you have objected to processing on the basis of our legitimate interest, you can require the processing to be restricted for the time we need to verify whether Embriq’s legitimate interest overrides your interest in having the data erased. Where processing has been restricted in the situations referred to above, we are only permitted to process the data for the establishment, exercise or defence of legal claims, to protect the rights of others or if you have given us your consent.
Right to object to certain types of processing
You always have the right to object to the processing of personal data that is based on a balancing of interests or if your personal data has been used for direct marketing purposes. In order for us to continue processing your personal data following such an objection, we must demonstrate a compelling necessary legitimate interest for the processing in question that overrides your interests, rights and freedoms. Otherwise, we are only permitted to process the data for the establishment, exercise or defence of legal claims.
Right to data portability
If our right to process your personal data is based on your consent or is for the performance of a contract with you, you have the right to request that the personal data about you that you have provided to us be transmitted to another controller (known as data portability). A prerequisite for data portability is that it is technically feasible to transmit the data using a computer program.