Privacy statement for Cevia Solutions AS

This document explains how we process personal data according to the Personal Data Act 2018.

You will find our contact information at the very bottom, together with contact information about the tools we use to process the visitors’ data.

1. We contact visitors and potential corporate customers

We process contact information of the potential business customers for marketing, sales, administration, documentation and follow-up purposes.

The processing of personal data that is based on our legitimate interest regarding selling products and services. We store and disclose information when we have a legal
obligation to do so, for example under the Accounting Act and the Tax Administration Act.

We contact people that agree to give us contact information and we collect data whenever a user agrees to our cookies’ notification. We’re collecting
personal information from others, it will usually be about contact information, position,
function and employer. The source of information will often be the contact person’s employer.

We can store information about challenges, we can use them to become them, for example to document
conditions around sales.

2. Contact persons using potential and suppliers

We process personal information about contact persons by the potential and potential suppliers
for preparation, administration, documentation and follow-up.

The processing of personal data that is based on our legitimate interest that is needed
to buy goods and services. We also store and disclose information where we have a legal obligation
to that, for example under the Accounting Act and the Tax Administration Act.

It is easy for contact persons if they want to give us contact information, men sometimes
condition for entering into an agreement that we receive the information we need.

We can store information about challenges, we can use them to become them, for example to document
purchasing conditions.

3. Employees

We process personal information about the employees to manage our staff, to organize
our company, as well as to comply with legal requirements.

The processing of personal data is based on our legitimate interest as a segment of who we are
employer. We also process information because we have a legal obligation to do so, for example to
disclose and store information in accordance with the Accounting Act, the Tax Administration Act and the Unemployment Insurance Act.
We need to process a few pieces of information in order to fulfill the obligations we have in the agreement with the employees.

Employees are required to provide us with the information we need for the programs mentioned above.

Information is stored with us in electronic personnel files. Information is available only for
personnel department and next manager. Information on name and contact details are available for
other employees. We store information about the challenge the employment lasts.

We provide our accountant with the information necessary to manage the payment of salaries,
holiday pay, refusals and other benefits, as well as reporting to public authorities on work and
income ratio.

4. Former employees

We process personal information about former employees in order to document our compliance with
duties as an employer if necessary. Information on former employees will as well
appear from agreements, correspondence and other documentation we store and use as part of
our company.

The processing of personal data is based on our legitimate interest in documenting ours
case processing in the capacity of employer. We also process information because we have legal
obliged to do so, for example to hand over and store information in accordance with the Accounting Act,
the Tax Administration Act and the Unemployment Insurance Act.

We store information about personnel relationships for up to two years after the employment relationship ended.
Information about a person has worked with us and where the challenge, we have indefinite.

5. Job seekers

We process personal information about job seekers to assess whether it is suitable for the job they have
applied to.

The processing of personal data is based on our legitimate interest in hiring and I to
document the hiring process.

It is voluntary to provide us with information. The information you choose to give us will be important for the spring
assessment of the application.

We store information for up to one year after the hiring process is completed.

6. Rights of the registered

You can read about your rights that are registered on the Data Inspectorate’s website.

7. Processing managers and contact information

The person responsible for processing is Cevia Solutions AS (corp. No. 916 922 973 VAT). Our postal address is
Brøholtveien 51, 3430 Spikkestad, Norway. You can also contact us by e-mail
post@ceviasolutions.com or phone 40 17 55 33.