Last updated: 19.12.2022

When you use our website and/or are in contact with us, we may process personal data about you. Below you will therefore find information about personal data collected, why we do this, and your rights related to the processing of personal data.
All our processing of personal data takes place in accordance with the privacy regulations in force at any given time, including the Personal Data Act and the General Data Protection Regulation (GDPR).

Responsible for the processing of personal data
Construction Equipment Group AS, represented by the general manager, is the data controller for the companies' processing of personal data. The data controller has the ultimate responsibility for ensuring that all processing and handling of personal data takes place in accordance with applicable legislation.
Contact details for data controller:
Address: Gjerstadveien 373
Email: post@cegroup.no
Phone: +47 37 11 91 00
Organization no.: 926 678 302

Why do we collect personal data and what kind of information do we collect?
We collect and use personal data for different purposes depending on who you are and how we get in touch with you.
We process personal data: 

1) When purchasing products
To make a purchase from Construction Equipment Group AS, we need your name, address, mobile number, and e-mail. This is necessary to be able to send your order to the correct delivery address, keep up to date with order movements and contact you if there should be a need according to your orders.
The purpose of the processing is to be able to deliver the product to you and otherwise fulfil our agreement with you as part of the purchase. Including the administration of your rights of return and complaint.
As a basis for processing, we use the contractual obligation that arises as part of your purchase. This basis for processing comes from Article 6, (1), b) of the General Data Protection Regulation.

2) By communication and contact
We process personal data about those who contact us to answer and document the communication and to contact others. This applies to all forms of communication, physical and digital, written and oral.
In such cases, we process name, telephone number, e-mail address and any personal information that may result from the inquiry, including history / logs about the inquiry.
The processing of data is based on the fact that we have a necessary legitimate interest in processing personal data related to the abovementioned cf. GDPR Article 6 (1) f). 

3) When registering a user account
When you register your user account with us, you will be asked to provide your name, address, e-mail address and password.

The purpose is to be able to manage your user account and offer you an overview of orders with us, the opportunity to perform risk analysis and keep track of performed risk analysis, and other services.

The legal basis for the processing is GDPR Article 6 (1) (b) and (f).

4) Sending newsletters
When you sign up for our newsletter, we may collect and process information about your name, email address and mobile number and preferences you provide for communication from us. You must provide at least your email address when you register. You can later provide, among other things. the following information: First and middle name, Last name, Company name, Information preferences, Industry.
In connection with our mailings, we also process information about your response to our newsletters, including when you have received, opened and, if applicable, what links you have clicked on in the newsletter. In addition, we store visitor traffic from the newsletter to our website. (Name, time and IP address).
The purpose is to safeguard our interest in being able to deliver targeted newsletters to you.

The legal basis for the processing is GDPR Article 6 (1) (f) and Section 15 of the Marketing Act.

When we process personal data based on your consent, you may withdraw your consent at any time. You can unsubscribe at any time via the marketing materials sent to you or at post@cegroup.no email address.

5) Development of new and existing services
We process personal data to identify demand for new products and services and to improve already existing products and services.

We have a legitimate interest in developing the companies' products and services and the legal basis for the processing will be GDPR 6 (1) f).

6) When visiting websites / using cookies
We use cookies (cookies and similar techniques) on our website to give you as a visitor the best possible customer experience and service. Cookies are small text files that are stored on your device when you download a website. These are usually used to improve your user experience and remember who you are so that you remain logged in. The purpose of cookies is to provide the website with basic functionality such as session management, analysis, personalization, and marketing.
To analyse the user pattern on our pages, we use, among other things, analysis tools from Google Analytics, Sleeknote and Hotjar.
In addition, we use marketing cookies to show you advertisements that may be relevant to you on other websites you visit. Such cookies are placed on our website by a third-party advertising network, such as Google, Meta (Facebook), Sleeknote and Youtube, on our behalf and with our permission. The cookies may share information about your visit to our websites with the advertising network. The ad networks can then link the activity to your user account when you are logged in to their platforms to offer you customized and relevant advertising.
Where we use cookies that are necessary for the functionality of the website, the legal basis for processing is GDPR Article 6 1 f). Where we use cookies for analysis and marketing purposes, the information is collected based on your consent, cf. GDPR Article 6 1 a)
You can easily disable cookies on our website (apart from necessary cookies).
You can also delete cookies that have been stored on your device. You do this via the menu in your browser. How this is done depends on your browser. You should be aware that if you disable or block the use of cookies, parts of the website will not function fully or in some cases may not be accessible.

Storage and storage (deletion) of personal data
We store personal data for as long as it is necessary for the purpose for which the personal data was collected and delete the data in accordance with regulatory requirements.
This means, for example, that personal data that we process based on your consent will be deleted if you withdraw your consent. Personal data we process to fulfil an agreement with you is deleted when the agreement is fulfilled and all obligations arising from the contractual relationship are fulfilled, such as legal obligations related to accounting, follow-up of the customer relationship related to complaints, etc. Personal data we process because of a legal obligation will be deleted as soon as we are not obliged to store the data.
Where personal data about your purchase is of an accounting obligation, this information is stored for five years, cf. accounting and bookkeeping legislation.

Disclosure of personal data to others
We do not pass on your personal data to others unless there is a legal basis for this. Examples of such a basis will typically be an agreement with you or legal obligation that requires us to disclose the information.
We use data processors to collect, store or otherwise process personal data on our behalf. In such cases, we have entered into agreements to safeguard information security at all stages of the processing.
Your data may in some cases be transferred to partners or other parties located outside the EU/EEA area. We then take the necessary precautions to ensure that the information is protected in accordance with applicable personal data regulations.

Your personal information is secure with us!
Construction Equipment Group AS has good routines and measures to ensure that unauthorized persons do not gain access to your personal information, and that the processing of data takes place in accordance with the requirements of applicable legislation. Examples of such measures are risk assessments, implementation of organizational and physical measures, access management and archiving routines, as well as routines for handling data and following up requests regarding the right of access, correction, and deletion

Your rights when we process personal data about you
Below are your rights for the processing of personal data.
To exercise your rights, you must contact Construction Equipment Group AS on post@cegroup.no or phone +47 37 11 91 00 (Monday to Friday: 08.00-16.00).
We will respond to your inquiry as soon as possible, and no later than one month. If it takes longer than one month, you will be notified.
We will ask you to confirm your identity or provide additional information before we allow you to exercise your rights to us. We do this to ensure that we only give access to your personal information to you - and not someone pretending to be you.
Information
You have the right to receive information about the personal data we process about you. Through this statement, we inform you about our processing of personal data. You can also contact us if you want more information.
Insight
You have the right to demand access to the personal data processed about you. Please contact us if you want access.
Change and deletion
You can also ask us to correct incorrect information we hold about you or ask us to delete personal information. We will as far as possible comply with a request to delete personal data, but we cannot do this if we still need the data.
The right to data portability
For information that you have provided to us and is necessary for the performance of an agreement with us, and which is processed automatically (i.e. not manually by us), you can request to have your personal data provided or transferred to another supplier in a structured, commonly used and machine-readable format (data portability).

Complaints
You have the right to complain to the Norwegian Data Protection Authority (https://www.datatilsynet.no/om-datatilsynet/kontakt-oss/klage-til-datatilsynet/) if you experience that your personal data is not processed in accordance with this statement.
If you find that our processing of personal data is not in accordance with what we have described here or that we in other ways violate privacy laws, you can complain to the Data Inspectorate.