Privacy Policy

Privacy Policy for Mestergruppenlogistikk.no and Associated Applications

1. Introduction

This Privacy Policy describes how personal data is processed when using mestergruppenlogistikk.no and associated applications (collectively referred to as the “Digital Services”). The Digital Services are used to facilitate the ordering, distribution and follow-up of goods and services, as well as communication between Mestergruppen Logistikk, customers, suppliers and business partners.

This Privacy Policy applies to consumers, employees/contact persons of subsidiaries and member companies, and business partners who use the Digital Services.

The data controller for the processing of personal data associated with the Digital Services is Malorama AS, Mestergruppen Logistikk division, company registration no. 988 950 475 (“Mestergruppen Logistikk”). See our contact information at the bottom of this Privacy Policy. Mestergruppen Logistikk takes privacy seriously and processes personal data in accordance with the EU General Data Protection Regulation (“GDPR”) and applicable data protection legislation.

2. Purposes, Categories of Personal Data and Legal Basis

Below is an overview of the purposes for which we process personal data, the categories of personal data we process, and the legal basis for such processing.

Registration and submission of forms

In order for you to submit an enquiry, you must provide, among other things, your name, telephone number and email address. The processing of this information is necessary for entering into and performing the agreement with you, cf. GDPR Article 6(1)(b).

Communication with users

We use your contact information to respond to enquiries from you.

In order to provide you with information that is important for your use of or access to the Digital Services, we use the email address and/or telephone number you have provided. This may, for example, concern updates to information on our website. The legal basis for processing is GDPR Article 6(1)(b) (performance of a contract).

Analysis, development and adaptation of the Digital Services

In order to provide you with relevant and high-quality services, we process personal data for the purposes of analysing, further developing and adapting the Digital Services. The processing is based on information you have provided to us through contact forms or in other ways, information about your use of the Digital Services (behavioural patterns), and information collected through the use of cookies. The legal basis for processing is GDPR Article 6(1)(f) and our legitimate interest in analysing, developing and adapting the Digital Services.

Invoicing and accounting

Contact and invoice information will be used for invoicing purposes. In connection with invoicing and accounting, personal data relating to what the invoice concerns, the payment method, and whether and when an invoice has been paid (including whether an invoice has been referred for debt collection) will also be processed. The legal basis for processing is GDPR Article 6(1)(b) (processing necessary for the performance of a contract).

Preventing, limiting and following up on misuse of the Digital Services

We process personal data stored in our IT systems in connection with maintenance, updates, troubleshooting, and the follow-up of security measures and security incidents. The legal basis for processing is our legal obligation to ensure satisfactory information security and our legitimate interest in maintaining security in the solution and preventing misuse, cf. GDPR Article 6(1)(f).

Compliance with statutory obligations

In order to comply with our statutory obligations, for example reporting requirements and the obligation to provide information requested by public authorities, we process personal data about you to the extent required by law. This may, for example, include payment/invoice information and contact information. The legal basis for processing is a legal obligation, cf. GDPR Article 6(1)(c).

3. Who We Share Personal Data With

We do not disclose your personal data to others unless there is a legal basis for such disclosure.

Mestergruppen Logistikk and associated personnel will have access to personal data as described in Section 2 of this Privacy Policy. If Mestergruppen Logistikk transfers personal data to a third party, such as other companies within the Mestergruppen Group, these parties will have independent responsibility for their subsequent processing of the data. The same applies to information you exchange with other external services and websites that are linked to from the Digital Services.

4. Storage of Personal Data

We store your personal data for as long as necessary for the purpose for which the personal data was collected. Personal data will not be retained for longer than is necessary to fulfil the purpose of the processing or any statutory obligations applicable to Mestergruppen Logistikk. The personal data will subsequently be deleted or anonymised.

Accounting legislation also requires us to retain certain accounting documents for a specified period of time. When a specific purpose requires data to be stored for a certain period, we ensure that the personal data is used exclusively for the relevant purpose during that period.

5. Your Rights

You have rights in relation to personal data concerning you. Which rights you have depends on the circumstances. You may ask questions and/or exercise your rights by using the contact information provided under Section 9.

Withdrawal of consent: If you have given consent to the processing of personal data, you may withdraw your consent at any time. With regard to newsletters, you can easily opt out of receiving such communications by using the unsubscribe link included in each communication.

Request access: You have the right to access the personal data we have registered about you. To ensure that personal data is disclosed to the correct person, we may require that a request for access be submitted in writing or that your identity be verified in another way.

Request correction or deletion: You may ask us to correct inaccurate information we hold about you or request that your personal data be deleted. We will, to the extent possible, accommodate a request to delete personal data, but we cannot do so where there are compelling reasons not to delete it, for example where we are required to retain the information for documentation purposes.

Data portability: In certain cases, you may have the right to receive personal data you have provided to us in order to have it transferred in a machine-readable format to another data controller (e.g. another service provider). Where technically possible, in certain cases the data may be transferred directly to another data controller.

Right to restriction or objection: In certain cases, you may have the right to restrict the processing of your personal data, and you may object to our processing of your personal data.

Right to lodge a complaint with a supervisory authority: If you believe that our processing of personal data does not comply with applicable data protection legislation, you may lodge a complaint with the Norwegian Data Protection Authority (Datatilsynet). However, we encourage you to contact us first. You can contact our Data Protection Officer at: personvern@mestergruppen.no.

6. Security

Mestergruppen Logistikk has established procedures for handling personal data securely. The measures are both technical and organisational in nature. We regularly assess the security of all central systems used to process personal data, and agreements have been entered into requiring suppliers of such systems to ensure satisfactory information security.

Access to personal data is restricted to personnel who need access in order to perform their duties. Everyone working at Mestergruppen Logistikk is subject to a duty of confidentiality.

We have adopted internal IT guidelines, and we regularly provide employees with training regarding security and the use of IT systems.

7. Cookies

The Digital Services use cookies to ensure that the services function properly, to tailor your experience, to analyse and improve the website, and to provide relevant marketing. Cookies are small text files stored on your computer, tablet or mobile device when you visit a website.

Cookies can be divided into cookies that are necessary for ordinary use of the website (“necessary cookies”) and cookies collected for technical, analytical or marketing purposes (“optional cookies”). Personal data collected may include, for example, which pages you visit, which links you click, what technology you use, how much time you spend using the Digital Services, information about whether or not a newsletter has been opened, IP address and similar information. Based on your IP address or other forms of location data, your geographical position may be recorded.

When you use the Digital Services, you must accept or reject the use of so-called optional cookies. You can also change your consent settings, including withdrawing your consent where applicable, using the cookie panel available on our websites. If you do not want to leave so-called necessary cookies, you can manage this yourself through your browser. Please note that blocking necessary cookies will reduce the usability of the website.

For a complete overview of the cookies collected and processed when using our websites, please refer to Mestergruppen's Cookie Policy. You can access this by clicking the cookie icon in the bottom-left corner of mestergruppen.no.

8. Changes

Mestergruppen will update this Privacy Policy as necessary, for example in the event of changes to legislation or Mestergruppen's processing procedures. Our websites will always contain the most recently updated version of the Privacy Policy.

9. Contact Us

Contact information for the data controller:

Malorama AS, Mestergruppen Logistikk division
Company registration no. 988 950 475

Postal address:
P.O. Box 6197 Etterstad, 0602 Oslo, Norway

If you have any questions regarding Mestergruppen Logistikk's processing of your personal data, or if you require assistance in exercising your rights under data protection legislation, you can contact our Data Protection Officer at:

personvern@mestergruppen.no