1. Data Controller

The controller of the personal data processed on this website within the meaning of Article 4(7) of the General Data Protection Regulation (GDPR) is:

HELSE PRO AS

c/o Rödl & Partner Accounting AS
Karenslyst allé 2
0278 Oslo, Norway

HELSE PRO AS processes personal data in accordance with the General Data Protection Regulation (GDPR) as implemented into Norwegian law through the Norwegian Personal Data Act (Personopplysningsloven).

The company is responsible for ensuring that personal data is processed lawfully, fairly, and transparently in accordance with applicable data protection legislation.

2. General Information on Data Processing

We process personal data only in accordance with applicable data protection regulations, including the General Data Protection Regulation (EU) 2016/679 (GDPR) and applicable Norwegian data protection legislation.

Personal data is processed for the purposes of:

• operating and maintaining our website,
• responding to inquiries,
• communicating with customers, partners, and interested individuals,
• managing recruitment processes,
• carrying out our business activities.

We only process personal data where there is a valid legal basis for such processing.

3. Visiting Our Website

When you visit our website, certain technical information is automatically collected and processed.

This information may include:

• IP address of the device used,
• date and time of access,
• pages visited,
• browser type and version,
• operating system,
• referring website URL.

The processing of this data is necessary to ensure the security, stability, and proper functioning of our website.

The legal basis for this processing is Article 6(1)(f) GDPR, based on our legitimate interest in providing a secure and functional website.

4. Contact Form and Communication

If you contact us through our website contact form or by other communication channels, we process the information you provide.

This may include:

• name and surname,
• company name,
• email address,
• telephone number,
• the content of your message.

We process this information solely for the purpose of responding to your inquiry and maintaining communication with you.

The legal basis for processing is:

• Article 6(1)(b) GDPR, where the inquiry concerns a potential contractual or business relationship;
• Article 6(1)(f) GDPR, where processing is based on our legitimate interest in communicating with potential customers, partners, and other interested persons.

5. Job Applications and Recruitment

Our website may provide information regarding employment opportunities and allow individuals to contact us regarding career opportunities.

If you send us application documents or personal information related to recruitment, we process this data exclusively for the purpose of evaluating your application and conducting the recruitment process.

This may include:

• name and contact details,
• professional qualifications and experience,
• CV/resume,
• certificates,
• other documents voluntarily submitted by the applicant.

The legal basis for processing recruitment data is Article 6(1)(b) GDPR and, where applicable, other provisions of applicable employment and data protection law.

If special categories of personal data are processed, such processing will only take place where permitted under Article 9 GDPR and applicable national legislation.

Application data will be deleted when it is no longer necessary for the recruitment process, unless legal obligations require longer retention.

6. Cookies

Our website uses cookies.

Cookies are small text files stored on your device that help ensure the proper functioning of the website and improve user experience.

Necessary cookies

Technically necessary cookies may be used without your prior consent because they are required for the basic operation and security of the website.

Optional cookies

Analytics, statistics, marketing, or other non-essential cookies are only used after obtaining your consent.

The use of cookies is also governed by applicable Norwegian electronic communications legislation, including the Norwegian Electronic Communications Act (ekomloven), where applicable.

You may change or withdraw your cookie preferences at any time through the cookie settings available on our website.

7. Hosting and Technical Operation of the Website

Our website is operated using the WordPress content management system.

The website is hosted by an external hosting service provider.

The hosting provider may process technical information automatically transmitted when you use our website, including:

• IP addresses,
• access logs,
• technical information necessary for secure and stable operation.

This processing is carried out to ensure the security and reliability of our website.

The legal basis is Article 6(1)(f) GDPR.

Where required, we have entered into a data processing agreement with our hosting provider in accordance with Article 28 GDPR.

8. Third-Party Services and Data Processors

We may use external service providers to support our website operation and business activities.

Such providers may include, for example:

• website hosting providers,
• IT service providers,
• communication tools,
• recruitment-related service providers.

These providers are carefully selected and are contractually required to process personal data only in accordance with our instructions and applicable data protection laws.

Where necessary, appropriate data processing agreements are concluded in accordance with Article 28 GDPR.

9. International Transfers of Personal Data

Your personal data is generally processed within the European Economic Area (EEA).

If personal data is transferred to countries outside the EEA, we ensure that appropriate safeguards are implemented in accordance with Chapter V GDPR, such as:

• an adequacy decision by the European Commission,
• Standard Contractual Clauses approved by the European Commission,
• other legally permitted safeguards.

10. Disclosure of Personal Data

We do not sell or otherwise disclose personal data to third parties.

Personal data may only be disclosed where:

• it is necessary to provide requested services,
• it is required to fulfil contractual obligations,
• we are legally required to do so,
• disclosure is necessary to protect our legitimate interests.

11. Data Retention

We retain personal data only for as long as necessary to fulfil the purpose for which it was collected or for as long as required by applicable legal obligations.

Once the purpose of processing no longer applies, personal data will be securely deleted.

12. Your Rights

Under the GDPR and applicable Norwegian data protection legislation, you have the following rights:

• the right to access your personal data (Article 15 GDPR),
• the right to request correction of inaccurate data (Article 16 GDPR),
• the right to request deletion of your data (Article 17 GDPR),
• the right to restrict processing (Article 18 GDPR),
• the right to data portability (Article 20 GDPR),
• the right to object to certain processing activities (Article 21 GDPR).

To exercise your rights, please contact us using the contact details provided above.

13. Right to Lodge a Complaint

If you believe that we process your personal data unlawfully, you have the right to lodge a complaint with the competent data protection supervisory authority.

If you are located in Norway, you may contact:

Datatilsynet (Norwegian Data Protection Authority)

Website: https://www.datatilsynet.no

You may also contact the supervisory authority in your country of residence.

14. Changes to This Privacy Policy

We reserve the right to update this Privacy Policy when necessary due to:

• changes to our website,
• changes to the services we provide,
• changes in applicable legal requirements.

The current version of the Privacy Policy will always be available on our website.