While conducting its day-to-day business, the Odfjell Drilling group (hereinafter referred to as "Odfjell Drilling" or "we") processes Personal Data related to visitors and users of our webpage, representatives of our customers, suppliers and business partners, and other persons who we are in contact with. Personal Data means any information relating to an identified or identifiable natural person (hereinafter referred to as "Data Subject").
The main purposes of our collection and processing of Personal Data are to be able to comply with legal obligations, reporting to authorities, safety, security and emergency preparedness, prepare and deliver tenders and services to our customers, receive services from our suppliers, collaborate with our business partners, respond to questions and requests from customers and others, integrity due diligence/background checks on business partners, carry out audits and reviews and to provide the general public with user-friendly and relevant webpages.
The legal basis for our collection and processing of Personal Data is the EU Regulation 2016/679 ("GDPR"). More specifically, we base our processing on Article 6 (1) letter a (consent), b (necessary for the performance of a contract), c (necessary for compliance with a legal obligation) and f (necessary for the legitimate interests pursued by Odfjell Drilling, which are not overridden by the interests of the Data Subject). The legitimate interests pursued by Odfjell Drilling in this respect are the interest in providing its services.
Subject to applicable data protection legislation and depending on the purpose of the processing, we may collect the following types of Personal Data: Name, contact details, title/position, curriculum vitae, certifications, nationality, passport and visa details, IP address and other Personal Data submitted to us or collected for legitimate business purposes.
We collect Personal Data in various ways:
To ensure that the processing of your Personal Data is carried out in a safe and lawful manner, the access to Personal Data within Odfjell Drilling is restricted. Only designated persons within Odfjell Drilling have access to Personal Data and the access is secured by use of control mechanisms whenever necessary or required by law.
Odfjell Drilling will not disclose, sell, distribute or otherwise share your Personal Data with other companies or organisations for commercial purposes. We will only disclose Personal Data to third parties to the extent we are required to do so pursuant to applicable law or regulation, or to the extent disclosure is necessary to deliver our services or otherwise required for legitimate business purposes. In any case we will implement the measures required to ensure an adequate protection of the Personal Data.
Within certain areas we have engaged data processors to process Personal Data on our behalf. This does not mean your Personal Data is disclosed to a third party, since such data processors only process Personal Data in accordance with our instructions. We have entered into data processing agreements with all such data processors to ensure that the data is processed only on documented instructions from us and that the data processor implements appropriate technical and organisational measures to ensure an adequate level of data protection.
The Personal Data may be transferred to companies established in countries outside the EEA area ("Third Countries"), such as other companies in Odfjell Drilling than the company collecting the Personal Data. To the extent Personal Data are transferred to such Third Countries, Odfjell Drilling will implement appropriate measures pursuant to applicable data protection law in order to ensure that the Personal Data are handled in a secure manner with an adequate level of protection – Similar to the level of protection provided within the EEA area.
Personal Data are never retained for a longer period than what is necessary for the purposes for which they were collected. If the data is processed for two different purposes, we will retain the data until the purpose with the longest retention period is no longer relevant, but we will cease the processing for the purpose with shorter retention period when this shorter retention period has expired.
We will either permanently anonymise or in a secure manner delete those of your Personal Data that we no longer need or are under an obligation to retain.
Where our processing is based on your consent, you may at any time withdraw your consent. However, this may prevent us from delivering our services to you or receiving services from you.
As a Data Subject you have, with certain reservations, the right to:
Attn.: Legal department