Introduction
Thank you for participating in this survey. By giving your feedback e.g., to webinars (webinar survey), to product delivery (product delivery survey) or in support cases, you provide us with your personal data. DNV ("we") respects your privacy and is committed to protecting it through compliance with this notice.
This Privacy Statement outlines how DNV collects and processes your personal data during a survey. You can find information on (1) who is responsible for collecting your data, (2) what data we collect, (3) why we need it, (4) on which legal basis do we process your personal data, (5) how we process it and (6) what are your rights regarding your personal data.
Personal data in this regard shall mean any information relating to an individual, who can be identified, directly or indirectly, in particular by reference to an identifier such as a name, an identification number, location data, an online identifier or to one or more factors specific to the physical, physiological, genetic, mental, economic, cultural or social identity of that individual.
Processing shall mean any operation which is performed on personal data, such as collection, recording, organization, structuring, storage, adaptation or alteration, retrieval, consultation, use, disclosure by transmission, dissemination or otherwise making available, alignment or combination, restriction, erasure or destruction.
1. Who is responsible for collecting your data
The controller responsible for the processing of your personal data in accordance with the General Data Protection Regulation (GDPR) and national data protection laws is
DNV AS
Veritasveien 1
1362 Høvik
Norway
2. What personal data we collect
In terms of the survey, we process personal data to invite you to a survey or to send you a survey reminder. The processing is limited to the following personal data:
- First name, surname
- Email address
- Feedback data
3. Why we need your personal data
DNV process your personal data for the following purposes:
- To provide you with an opportunity to give DNV feedback at different steps of your journey.
- To respond to complaints or general feedback given by you.
- To improve the overall customer experience.
- To improve our own processes based on the feedback.
4. On which legal basis do we process your personal data
The personal data is being processed based on Article 6 (1) lit f. GDPR (legitimate interest). The above-mentioned purposes constitute our legitimate interest.
Participation in all surveys is voluntary.
5. How we process your personal data
We will process personal data as name and email-address, which is provided directly from you, e.g., when you register with us by setting-up a contact record, sending us requests or questions, prepare orders, or place orders or access downloads or conclude a service contract.
We process feedback data, when you volunteer to answer our survey. We use GetFeedback from Momentive as our trusted customer feedback tool, to create surveys and store your feedback data. GetFeedback is integrated into Salesforce CRM. When you access the survey link send out via Email by Salesforce CRM, the browser of GetFeedback opens and collects your feedback response, which is also stored in Salesforce CRM.
6. With whom will we share your personal information
In connection with one or more of the purposes outlined in the “How do we use information about you?” section above, your personal information is shared in:
- GetFeedback, as our survey tool
- Salesforce, as our CRM system
7. Data Retention
We retain personal information as long as it is necessary to fulfill the purposes identified in the section “Why do we need your personal data?” or as otherwise necessary to comply with applicable laws, and professional standards. Personal data is kept as long as it is necessary to act on the customer feedback, therefore data will be deleted when the process is closed. When we process data for statistical and analytical purposes only aggregated data is used. If personal data is needed for the outer loop, consent will be obtained.
8. What are your rights regarding your personal data
You may be entitled to exercise some or all the following rights free of charge:
1 Revoke Consent
You are entitled to revoke your consent for DNV to process and store your personal data at any time. If you choose to have your data processing activities revoked, your data will be deleted, unless there is a legal justification or obligation to retain the data. Please note this will not impact data processing activities that have taken place before such withdrawal/revocation.
2 Request Access
You are entitled to request information about whether your personal data is retained and to request access to and/or duplicates of your personal data retained by DNV. You can request information including the purpose of the processing, the categories of data concerned, and the recipients or categories of recipients to whom the data are disclosed, and where possible, the envisaged period for which the personal data will be stored, or, if not possible, the criteria used to determine that period.
3 Request Correction
You are entitled to request correction of your personal data to the extent that it is inaccurate or incomplete. You can also make changes and corrections to your information at any time by updating your profile online via your dashboard.
4 Request Download
You are entitled to request to receive the personal data concerning you, which you have provided to us, in a structured, commonly used and machine-readable format and have the right to transmit those data to another controller without hindrance from our side.
5 Restrict Processing
In certain circumstances, you are entitled to restrict processing of your personal data, e.g., because of the incomplete or inaccurate nature of the personal data, because it is no longer needed for the purposes for which it was collected, the consent on which the processing was based has been revoked, or you have taken advantage of an existing right to object to the data processing.
6 Request Deletion
You are entitled to request deletion of your personal data, e.g., because of the incomplete or inaccurate nature of the personal data, because it is no longer needed for the purposes for which it was collected, the consent on which the processing was based has been withdrawn, or you have taken advantage of an existing right to object to the data processing.
7 Right of appeal
You are entitled to lodge complaints before the competent data protection regulator if you think that a processing violates any applicable law.
8 Right to object
In addition, you have the right to object, on grounds relating to your particular situation, that your personal data shall be subject to a processing. In this case, please provide us with information about your situation. After the assessment of the facts presented by you, we will either stop processing your personal data or present you our compelling legitimate grounds for an ongoing processing.
8. Revision of the Privacy Statement
DNV may change or update the privacy statement without notice. All such changes will take effect once they have been posted on the electronic application site. It is your responsibility to monitor such updates. The privacy statement was last updated on the date stated at the beginning of this privacy statement.
9. Contact Details
If you are concerned about the use of the Data or have any questions regarding this Privacy Statement, please contact our data protection officer via:
a) Dataprotection@dnv.com or
b) Get back to us using the same postal address as listed below:
DNV AS
Veritasveien 1
1363 Høvik
Norway