Privacy Policy of Nordhav Fiskeri AS

1. Introduction and company information

This privacy policy explains how Nordhav Fiskeri AS collects, uses, stores, shares, and protects personal data in connection with its sea-fishing business activities, including commercial operations, customer and supplier relations, vessel operations, logistics, administration, and website or communication services.

Data controller: Nordhav Fiskeri AS

Address: Nordhav Fiskeri AS, Fiskergata 12, 7010 Trondheim, Norway

Email: [email protected]

Phone: +47 73 84 29 56

This policy applies to personal data relating to customers, suppliers, business partners, website visitors, job applicants, employees, crew members, and other individuals whose data is processed by Nordhav Fiskeri AS in the course of its operations.

2. Data collection and processing

Nordhav Fiskeri AS may collect and process the following categories of personal data, depending on the relationship and context:

• Identification data: name, date of birth, national identification numbers where required by law, job title, and role.
• Contact data: address, email address, telephone number, and other communication details.
• Business and contractual data: company affiliation, order history, invoices, payment records, delivery details, contract terms, and correspondence.
• Operational data: vessel-related logs, crew schedules, safety records, certifications, training records, and compliance documentation.
• Technical data: IP address, device information, browser type, cookies, and website usage data where applicable.
• Recruitment data: CVs, application materials, references, qualifications, and interview notes.
• Security and compliance data: access logs, incident reports, and records required for legal, regulatory, or safety purposes.

Personal data may be collected directly from the individual, from employers or business partners, from public sources, from authorities, or from third parties acting on behalf of Nordhav Fiskeri AS.

Nordhav Fiskeri AS does not intentionally collect more data than is necessary for the relevant purpose. Where required, special categories of personal data are processed only in accordance with applicable law and with appropriate safeguards.

3. Purpose of data processing

Nordhav Fiskeri AS processes personal data for the following purposes:

• to operate and manage its sea-fishing business;
• to enter into, perform, and administer contracts;
• to manage customer, supplier, and business partner relationships;
• to handle orders, deliveries, invoicing, accounting, and payments;
• to comply with legal obligations, including tax, accounting, labor, safety, fisheries, and maritime requirements;
• to ensure vessel, workplace, and operational safety;
• to recruit and assess job applicants and crew members;
• to maintain internal administration, quality control, and business records;
• to protect the rights, property, and security of Nordhav Fiskeri AS, its personnel, and third parties;
• to communicate with individuals and respond to inquiries;
• to improve services, systems, and operational efficiency;
• to detect, prevent, and investigate fraud, misuse, or other unlawful activity.

4. Legal basis for processing

Nordhav Fiskeri AS processes personal data only where a lawful basis exists under applicable privacy law. Depending on the context, the legal basis may include:

• Performance of a contract: where processing is necessary to enter into or perform a contract with the data subject or to take steps at the request of the data subject prior to entering into a contract.
• Legal obligation: where processing is required to comply with applicable laws and regulations.
• Legitimate interests: where processing is necessary for the legitimate interests of Nordhav Fiskeri AS or a third party, provided such interests are not overridden by the data subject’s rights and freedoms.
• Consent: where the individual has given clear and informed consent for a specific purpose.
• Vital interests: where processing is necessary to protect the vital interests of an individual in an emergency.

Where special categories of personal data are processed, Nordhav Fiskeri AS will rely on an appropriate legal basis and implement additional safeguards as required by law.

5. Data sharing and third parties

Nordhav Fiskeri AS may share personal data with third parties where necessary and lawful, including:

• accountants, auditors, legal advisers, and consultants;
• IT and cloud service providers;
• payment processors, banks, and financial institutions;
• logistics, transport, and delivery partners;
• public authorities, regulators, tax authorities, and law enforcement agencies;
• insurance providers;
• recruitment and HR service providers;
• vessel, maritime, safety, and compliance service providers;
• other business partners where disclosure is necessary for operational purposes.

All third parties are required, where applicable, to process personal data in accordance with contractual obligations, confidentiality requirements, and applicable data protection laws. Nordhav Fiskeri AS does not sell personal data.

6. Data transfer to third countries

In some cases, personal data may be transferred to countries outside Norway or the European Economic Area if this is necessary for the operation of Nordhav Fiskeri AS or if a service provider is located abroad.

Where such transfers occur, Nordhav Fiskeri AS will ensure that appropriate safeguards are in place, such as:

• an adequacy decision by the relevant authority;
• standard contractual clauses or equivalent transfer mechanisms;
• supplementary technical and organizational measures where necessary;
• other lawful transfer mechanisms permitted under applicable privacy law.

Individuals may contact Nordhav Fiskeri AS for further information about international data transfers and the safeguards used.

7. Storage duration

Nordhav Fiskeri AS retains personal data only for as long as necessary for the purposes for which it was collected, or for as long as required by law, contract, or legitimate business needs.

Retention periods may vary depending on the type of data and the purpose of processing. In general:

• contractual and accounting records are retained for the period required by applicable accounting and tax laws;
• customer and supplier correspondence is retained for as long as necessary to manage the relationship and resolve disputes;
• recruitment data is retained for the duration of the recruitment process and, where permitted, for a limited period thereafter;
• operational, safety, and compliance records are retained in accordance with legal and regulatory requirements;
• technical logs are retained for a limited period unless a longer period is required for security or legal reasons.

When personal data is no longer needed, Nordhav Fiskeri AS will delete, anonymize, or securely archive it in accordance with applicable requirements.

8. User rights

Subject to applicable law, individuals whose personal data is processed by Nordhav Fiskeri AS may have the following rights:

• Right of access: to obtain confirmation of whether personal data is processed and to receive a copy of that data.
• Right to rectification: to request correction of inaccurate or incomplete personal data.
• Right to erasure: to request deletion of personal data in certain circumstances.
• Right to restriction: to request that processing be limited in certain situations.
• Right to data portability: to receive personal data in a structured, commonly used, machine-readable format and, where technically feasible, to have it transmitted to another controller.
• Right to object: to object to processing based on legitimate interests or to direct marketing, where applicable.

To exercise these rights, individuals may contact Nordhav Fiskeri AS using the contact details provided below. Nordhav Fiskeri AS may request additional information to verify identity before responding to a request. Certain rights may be limited where processing is necessary to comply with legal obligations or to establish, exercise, or defend legal claims.

9. Withdrawal of consent

Where processing is based on consent, the individual has the right to withdraw consent at any time. Withdrawal of consent does not affect the lawfulness of processing carried out before the withdrawal.

Consent may be withdrawn by contacting Nordhav Fiskeri AS at [email protected] or by using any other withdrawal method communicated at the time consent was obtained. If consent is withdrawn, Nordhav Fiskeri AS will stop the relevant processing unless another lawful basis applies.

10. Right to complain

Individuals have the right to lodge a complaint with the competent data protection authority if they believe that Nordhav Fiskeri AS has processed personal data in violation of applicable law.

Before filing a complaint, individuals are encouraged to contact Nordhav Fiskeri AS directly so that concerns may be reviewed and, where possible, resolved promptly.

11. Data security

Nordhav Fiskeri AS implements appropriate technical and organizational measures to protect personal data against unauthorized access, loss, misuse, alteration, disclosure, or destruction. These measures may include:

• access controls and role-based permissions;
• password protection and authentication measures;
• secure storage and transmission methods;
• backup and recovery procedures;
• staff confidentiality obligations and training;
• monitoring and incident response procedures;
• regular review of security practices and vendor controls.

Although Nordhav Fiskeri AS takes reasonable steps to protect personal data, no system can be guaranteed to be completely secure. In the event of a personal data breach, Nordhav Fiskeri AS will take appropriate action in accordance with applicable law.

12. Contact information

For questions, requests, or concerns regarding this privacy policy or the processing of personal data, please contact:

Nordhav Fiskeri AS
Fiskergata 12, 7010 Trondheim, Norway
Email: [email protected]
Phone: +47 73 84 29 56

13. Changes to privacy policy

Nordhav Fiskeri AS may update this privacy policy from time to time to reflect changes in legal requirements, business operations, or data processing practices. The updated version will be made available through appropriate channels and will take effect from the date stated in the revised policy.

Individuals are encouraged to review this privacy policy periodically to stay informed about how Nordhav Fiskeri AS processes personal data.