Privacy Policy

Privacy Policy for customer, Distributor, Supplier and Partner contacts

KA Group AG, with its registered address at Europaallee 39, 8004 Zurich Switzerland, (“Kongsberg” “we”, “our” and “us”), is controller for the processing of your personal data[1] as described below. Kongsberg Automotive GmbH, with its registered address at Zeppelinstrasse 4, Hallbergmoos DE-853 99, is the representative established in the European Union.

We care and value your privacy. Through this privacy policy we therefore wish to provide you with information on how we process your personal data as well as what rights you have in relation to our processing of your personal data in your role as representative of our current or potential customers, distributors, suppliers or partners and when you visit our websites.

We process your personal data for the following purposes:

Hereinafter when we, in this privacy policy, refer to “your company” we refer to your employer or the company that you represent.

Below you can read more about how we process your personal data when you interact with us in different situations. Should you have any questions regarding our processing of your personal data, or if you wish to exercise any of your rights under data protection legislation, please contact us via our e-mail address specifically designated for this purpose gdpr@ka-group.com.


Below you can find more detailed information about the following topics:

From where do we collect your personal data? 

Are you required to provide personal data to us? 

Who can gain access to your personal data and why?

Where are your personal data processed? 

What rights do you have in relation to our processing of your personal data? 

Detailed description on how we process your personal data

If you have contacted us before we have a relationship with your organisation 

If your company is our current customer, distributor or supplier 

If you have chosen to subscribe to our newsletter 

If you use our website 

If you interact with us on our social media accounts 

Balancing of interests assessments when processing personal data based on the lawful basis “legitimate interests” 

 

From where do we collect your personal data?

We collect your personal data directly from you, for example when you contact us. We may also collect your personal data directly from your organisation, if they state you as their representative. If you use our website, we will also use Google services to collect information on your browsing of our website to analyse your use of our website.

Are you required to provide personal data to us?

If your company purchase products from us we need to process your personal data, e.g. in order for us to comply with legal obligations to which we are subject. In any other case you are free to choose if you wish to provide your personal data to us.

Who can gain access to your personal data and why?

Your personal data is primarily processed by us at Kongsberg. However, in certain instances, we share your personal data with third parties as described below.

If you want to know more about who we share your personal data with, please feel free to contact us. Our contact details can be found in the beginning of this privacy policy.

Where are your personal data processed?

We, as well as our processors, mainly process your personal data within EU/EEA. In certain instances, we will process your personal data outside of the EU/EEA according to below.

If your personal data is transferred to a third country, Kongsberg will always take suitable and appropriate safeguards to protect the personal data being processed. This means we will only transfer your personal data outside the EU/EEA where there is an adequate safeguard for doing this, either if the transfer of your personal data is done to a country that the European Commission has approved as providing an adequate level of protection for personal data, that the transfer is based on the European Commission approved standard contractual clauses or that the transfer is made to an organisation which is Privacy Shield-certified.

If you want to know more about who we share your personal data with, please feel free to contact us. Our contact details can be found in the beginning of this privacy policy.

What rights do you have in relation to our processing of your personal data?

According to applicable data protection legislation, depending on the circumstances, you are entitled to a number of different rights which are set out below.

If you have any questions regarding these rights or if you want to use any of your rights, you are welcome to contact us. Our contact details can be found in the beginning of this privacy policy.

Right to information and access

You have the right to obtain a confirmation on whether or not we process your personal data. If we process your personal data, you also have a right to receive information about how we process the personal data and to receive a copy of your personal data.

Right to withdraw consent

If you have given your consent to us process your personal data to send you newsletter you have a right to, wholly or partly, withdraw any given consent for the processing of your personal data.

Right to object

You have the right to object to our processing of your personal data if we use it for marketing purposes.

You also have a right to object to our processing of your personal data when the processing is based on the legal basis “legitimate interest”. The situations when we base our processing on our legitimate interest are stated in the below charts and you can read more about our balancing of interest assessments in the end of this privacy policy. In some instances we may continue to process your personal data even if you have objected to our processing. This can be the case if we can show compelling legitimate reasons for the processing that outweigh your interests or if our processing is necessary for the purpose of establishing, exercising or defending against legal claims.

Right to rectification

You have a right to have inaccurate personal data corrected and to have incomplete personal data completed.

Right to erasure (“right to be forgotten”) and restriction of processing

You have the right to have your personal data erased in certain instances. This is the case e.g. when the personal data is no longer necessary for the purposes for which it was collected or otherwise processed, or you withdraw your consent on which the processing is based and where we process your personal data on the basis of our legitimate interest and we find, following your objection (see below under Right to object), that we do not have an overriding interest in continuing to process it.

You also have a right to request that we restrict our processing of your personal data. For example, when you question the accuracy of the personal data, when you have objected to our processing of your personal data based upon our legitimate interest, or where the processing is unlawful, and you oppose to the erasure of your personal data and instead want us to restrict our processing.

Right to data portability

You have a right to in certain instances be provided with such personal data (concerning you) that you have provided to us, in a structured, commonly used and machine-readable format. You also have a right to in certain instances have such personal data transferred to another controller, where technically feasible.

Right to lodge a complaint to a supervisory authority

You have the right to lodge a complaint to a supervisory authority concerning our processing of your personal data.

Such a complaint can be filed to the authority in the EU/EEA member state where you live, work or where the alleged infringement of applicable data protection legislation has occurred.

Detailed description on how we process your personal data

The below charts describes in detail why we process your personal data, which personal data we process, the lawful basis for the processing and for how long we process your personal data.

If you have contacted us before we have a relationship with your organisation

Why do we process your personal data?

What personal data do we process?

What is the lawful basis for the processing?

How long do we store your personal data?

To communicate with you who have contacted us via e-mail or telephone.

Name, telephone number, e-mail address and other personal data that you provide to us.

Our legitimate interest to process your personal data to communicate with you or your organisation.

We will store your personal data for as long as the matter is unresolved.

 

If your company is our current customer, distributor or supplier

Why do we process your personal data?

What personal data do we process?

What is the lawful basis for the processing?

How long do we store your personal data?

  • To negotiate and enter into an agreement with your organisation.
  • To administrate our relationship with your company (e.g. communicate with our customer, distributor or supplier and process any order our customer or distributor has placed).

Name, organisational belonging, position in your organisation, telephone number and e-mail address.

If you represent a customer or distributor:

Information about the order your company has made.

Our legitimate interest to process your personal data to be able to negotiate and enter into an agreement with your company and to administrate the agreement.

Your personal data will be removed if we conclude that we not will enter into an agreement with your organisation.

If your company becomes our customer, distributor or supplier we will store your personal data for this purpose as long as the company you represent are our customer/distributor/supplier, however for a shorter period of time if we get information that you no longer represent the organisation.

If you represent a customer or distributor:

  • To create and enable your company to create an account, including to communicate with you.
  • To give your company the benefits of having an account, i.e. to enable you to place an order.

Name, organisational belonging, e-mail address, username and password.

Our legitimate interest to process your personal data to provide your organisation’s account, to administer such an account and to give your company the benefits of having an account.

We will store your personal data for as long as your company is our customer or distributor, however for a shorter period of time if we get information that you no longer represent your organisation.

You can delete your organisation’s account whenever you want. If you do so, we will immediately stop storing your personal data for this purpose.

If you represent a customer or distributor:

  • To comply with bookkeeping and accounting law.

Name, history regarding payments made and other information that constitutes accounting records.

The processing is necessary to comply with legal obligations to which we are subject, i.e. the bookkeeping and accounting act.

We will store your personal data until and including the seventh year after the end of the calendar year for the fiscal year to which the personal data relates or as long as relevant bookkeeping and accounting laws requires.

  • To handle complaints or other claims.
  • To defend ourselves against claims and complaints.
  • To initiate any claims.

Name, organisational belonging, position at your organisation, telephone number, e-mail address and information concerning the complaint or claim.

Our legitimate interest to process your personal data to handle a complaint and/or legal dispute in relation to your organisation.

We will store your personal data until we have processed the complaint and for the duration of the potential dispute.

 

If you have chosen to subscribe to our newsletter

Why do we process your personal data?

What personal data do we process?

What is the lawful basis for the processing?

How long do we store your personal data?

  • To send newsletters that you have subscribed to.

Name and e-mail address.

Your consent.

We will store your personal data until you unsubscribe.

 

If you use our website

Why do we process your personal data?

What personal data do we process?

What is the lawful basis for the processing?

How long do we store your personal data?

  • To analyse the use of our website by using cookies and Google Analytics.
  • To improve our website based on the information we have compiled through using Google Analytics.

Information which we collect through cookies, i.e. IP-address, personal data related to your devise/browser (from which area in the country you reside in that you use our website from and which screen resolution you have) and your activities on our website.

Our legitimate interest to process your personal data to improve our website in order to improve the user experience of our website.

We will store your personal data for a period of six months after your visit to our website.

You can read more about our use of cookies in our cookie policy here.

 

If you interact with us on our social media accounts

Why do we process your personal data?

What personal data do we process?

What is the lawful basis for the processing?

How long do we store your personal data?

  • To communicate with you on our social media accounts (Facebook, Instagram, Twitter and LinkedIn), e.g. if you comment on a post, and to keep records of such communication for reference.

Information from your profile on the social media in question (user name and any picture you have chosen for your account) and information which you provide on our page.

Our legitimate interest to process your personal data to communicate with you on our social media platforms.

Your personal data will be removed if you ask us to remove it or if you yourself delete the content, but we will otherwise store the personal data on the social media platform until further notice.

Balancing of interests assessments when processing personal data based on the lawful basis “legitimate interests”

As we state above, for some purposes, we process your personal data based upon our “legitimate interest”. By carrying out a balancing of interests assessment concerning our processing of your personal data, we have concluded that our legitimate interest for the processing outweighs your interests or rights which require the protection of your personal data.

If you want more information in relation to our balancing of interests assessments, please do not hesitate to contact us. Our contact details can be found at the beginning of this privacy policy.

 

Kongsberg adopted this privacy policy on May 10, 2019.

 

[1] Personal data is any information that can be used directly or indirectly to identify you, such as your name or telephone number.