Arctic Securities AS
Valid from 25.08.19
2. Legal basis for our processing of personal data
Arctic Securities AS does not intend to process special categories of personal data, such as data on racial or ethnic origin, political opinions, religious or philosophical beliefs, trade union membership, genetic data, biometric data for the purpose of uniquely identifying a natural person, data concerning health or data concerning a natural person's sex life or sexual orientation.
Arctic Securities AS will only process special categories of personal data as specified above at your request, i.e., when you submit such data to Arctic Securities AS through your use of Poption. By submitting such special categories of personal data you are deemed to have provided us with your informed, expressly and freely given consent to process such data.
3. How personal data is collected through your use of Poption
Arctic Securities AS may collect your personal data:
- during your registration of a profile with Arctic Securities AS through Poption,
- when you use Poption to submit information by filling out forms, subscribe to notifications (e.g., email), modify your user profile,
- by monitoring your use of the service, through e.g. web analytic tools.
We may also collect your personal data through your use of supported third party services. Use of these third party services are governed by the third party's own terms and data processing provisions. By logging in to these third party services from Poption you are deemed to have consented to our processing of the personal data submitted to us by the third party service, pursuant to your request.
Poption currently supports the following third party services:
- Vitnemålsportalen, provided by Feide pursuant to the following data privacy provisions: https://www.feide.no/personvern-og-samtykke
- LinkedIn, pursuant to the following data privacy provisions: https://www.linkedin.com/legal/privacy-policy
4. Purpose of the processing of personal data
Arctic Securities AS will process information as mentioned above for the purposes of:
- providing the Poption service;
- improving or otherwise modifying the Poption service;
- replying to you communications and contacting you for recruitment purposes;
- performing our statutory obligations towards you as a data subject.
5. Retention period
Arctic Securities AS will retain your personal data until the purposes of the processing have been fulfilled, at the latest within 6 months from the end of your specified graduation semester or within 60 months from today, whichever comes first. Personal data will be deleted or anonymized at the end of the retention period, unless statutory obligations prevents such deletion.
6. Where personal data is processed
The data controller is Arctic Securities AS, which may be contacted at email@example.com.
Arctic Securities AS may use processors and sub-processors and transfer personal data to these sub-processors, including sub-processors in countries not within the EU or EEA. In such cases, Poption will transfer personal data subject to appropriate safeguards provided by the sub-processors, such as a legally binding and enforceable instrument between public authorities or bodies (e.g., the EU-US Privacy Shield Framework), or standard data protection clauses adopted by the EU Commission. A copy of such safeguards may be obtained by contacting Arctic Securities AS.
7. Transfer of personal data to others
Notwithstanding the above, Arctic Securities AS will not transfer or provide access to Data Subject's personal data to any third party except when, to the extent, and to persons
(i) With the data subject's consent,
(ii) required by law, or
(iii) necessary in order to perform Arctic Securities AS's statutory obligations, or to exercise its legal rights, or defend against claims or other process.
Arctic Securities AS ensures that it has implemented and will continue to employ appropriate measures to ensure that personal data are processed securely and in compliance with the applicable law.
8. Your rights as a data subjectRight of access and right to rectification or erasure of personal data
Upon the data subject's request, Arctic Securities AS will grant the data subject access to, all personal data that Arctic Securities AS maintains about the data subject, unless such personal data is otherwise available to the data subject or Arctic Securities AS is legally prohibited from disclosing such personal data.
If any personal data prove to be incorrect or misleading, the data subject is entitled to have the data rectified or restricted. Registered data subjects can access, correct and erase their personal data through the Poption recruitment platform.Rights in connection with disclosure
In all cases where Arctic Securities AS is allowed to disclose personal data to third parties, it will ensure that the person to whom disclosure is made grants the respective Data Subject the same rights as those set forth herein with respect to the processing of such Personal Data (including the right to be informed about the data maintained on the Data Subject and the right to correct or have corrected incorrect or misleading information).Right to data portability
The data subject has the right to receive the personal data concerning him or her, which he or she has provided to Arctic Securities AS, in a structured, commonly used and machine-readable format and have the right to transmit those data to another controller without hindrance from Arctic Securities AS.Right to lodge a complaint with a supervisory authority
The data subject has the right to lodge a complaint with a supervisory authority if the data subject considers that the processing of personal data relating to him or her infringes his or her rights.Right to withdraw consent
9. Change of policy