Privacy statement for KONGSBERG

Kongsberg Gruppen ASA, Kirkegårdsveien 45, 3601 Kongsberg is the controller of the personal data processed when you use the kongsberg.com website and may be contacted if you have any questions relating to this Privacy Statement.

KONGSBERG consists of the three business areas Kongsberg Maritime, Kongsberg Digital and Kongsberg Defence & Aerospace. Websites and services within these business areas may have additional or more specific privacy statements.

KONGSBERG has adopted binding corporate rules ("the KONGSBERG BCR"). The KONGSBERG BCR provide KONGSBERG with a legal basis for transferring personal data from group companies established within the EEA to group companies established outside the EEA. The KONGSBERG BCR have been approved by the Norwegian and other relevant data protection authorities and is an important mean to demonstrate compliance with the EU General Data Protection Regulation 2016/679 ("GDPR"). For more information about the KONGBSERG's BCR and group companies bound by the BCR, please see the public version of the KONGSBERG BCR.

How and why we use personal data

1. When you visit the kongsberg.com website

Kongsberg.com is the general website for KONGSBERG. When you visit the website, we collect data through cookies as described in section 4 below. The data we collect through cookies consists of data relating to your device, IP-address and your use of the website. We use the data collected through cookies for the purposes of offering you the best user experience and for improving the website content by tracking usage patterns and recording preferences. See further information in section 4 below on how to accept and reject cookies by adjusting the settings in your browser.

2. When you subscribe to our newsletter

When you subscribe to receive a newsletter, we collect your e-mail address in order to be able to send you the requested newsletter. The purpose of the newsletter is to provide you with news, press releases and other relevant information from KONGSBERG. In order to subscribe, you must provide your consent prior to receiving the newsletter. Your consent is the legal basis for processing your e-mail address. You can withdraw your consent to stop receiving newsletters from us at any time by following the unsubscribe instructions at the bottom of the newsletter that you receive.

3. When you contact us

When you contact us, for example for media, investor or finance relations, or for website feedback, we can collect personal data about you. The personal data can concern your name, e-mail address and other information you wish to provide us with to respond to your comment or enquiry. If you register to one of our events, we can collect information about your name, contact information and, if applicable, dietary preferences or similar information.

The legal basis for this processing is that the processing is necessary for fulfilling a contract with you or for taking steps prior to entering into contract, or that it is in our legitimate interest to meet your request and to improve our business and services and these interests are not overridden by your rights to data protection.

4. For recruitment

When you apply for a job through the website, we use a job application portal operated by an external service provider on our behalf, for processing and handling your job application. When you apply for a job, we collect your name, contact information, CV, education level, competencies and skills, career and work experiences. If relevant, you may also provide us with social security number, job certificates, references and other relevant background information.

We use this information in order to determine your eligibility for the job that you apply for by assessing whether you are the ideal candidate for the position in question.

With your consent, we may also retain your data for the purposes of identifying you as a potential candidate for future suitable vacancies and/or to inform you of future suitable vacancies. If there are no suitable jobs listed on our website, you can also upload your CV to our job application portal for future opportunities. Your candidate profile will be visible to our recruiters and we will contact you should a suitable vacancy arise.

The legal basis for processing and storing your job application, CV and related information is your consent and that the processing is necessary in order to take steps at your request prior to entering into a contract. You can withdraw your consent or update your information at any time through the job application portal or by contacting us at 

5. When you submit a report through our whistleblowing channel (raising concerns)

We provide a whistleblowing channel operated by an external service provider. If you submit a report through our whistleblowing channel. You can choose to provide KONGSBERG with your name, phone number and email. If you choose not to provide this information, KONGBERG will not be able to contact you directly.

When you file a report, you will be able to establish a secure mailbox. When you create this mailbox, you will be assigned a case number and be given the option to choose your own password for accessing and following your case. Once you have reported an issue, you have the option to continue communication regarding the case even if you have chosen to stay anonymous. Regardless of whether or not you wish to remain anonymous, we recommend that you open a mailbox, to ensure that communication regarding further investigation of the reported incident is safe and secure.

The legal basis for processing the personal data you submit through the whistleblowing channel is that the processing is necessary for KONGSBERG's legitimate interest of enabling all employees of KONGSBERG, business partners and stakeholders to report any serious concerns or offences in a confidential manner.

To the extent that the processing relates to sensitive personal data, the legal basis for such processing is that it is necessary for the purposes of carrying out the obligations and exercising the specific rights of KONGSBERG in the field of employment and social security and social protection law, or that the processing is necessary for the establishment, exercise or defence of legal claims.

6. Customer, supplier and partner management and support

KONGSBERG processes business-related data on customers, suppliers and partners, and their employees, to support and manage customer, supplier or partner relationships (internal/external), to provide products and services to third parties, for business operation and protection of business interests and security (e.g. information security, logging, conduction of audits and controls, surveys, analysis, reports and managing of daily operations and transactions/possible transactions involving KONGSBERG). The legal basis for this processing is KONGSBERG's legitimate business interests in ensuring good management of and support for customers, suppliers, partners and third parties, to comply with legal obligations and in some occasions consent.

7. Background checks, Integrity Due Diligence, security clearance data

KONGSBERG collects personal information concerning our business partners and their employees and visitors at our premises for the purposes of e.g. due diligence against anti-corruption and export control legislation.

Due Diligence of business partners (including self-assessment and background check) and processing of security clearance applications. We collect personal data concerning visitors to be able to process requests for visits on our premises. Such personal data can include name, gender, age, roles in companies and information available in public available sources. The legal basis for processing this information is KONGSBERG's legal obligations, including under the Security Act, and our legitimate interests in maintaining secure premises, facilities, services, equipment and processes.

8. Video surveillance and activity logs

KONGSBERG processes personal data in connection with video surveillance of KONGSBERG premises and recording of activity logs including Visitor registration. This includes personal data registered in CCTV recordings and access logs. The purpose of this processing is to support and manage safeguarding against illegal or unauthorised access to areas, buildings or rooms or to support the control of equipment and/or production processes, and the legal basis for the processing is KONGSBERG's legitimate interests in maintaining secure premises, facilities, services, equipment and processes.

9. Compliance with legal obligations and information relating to legal proceedings

KONGSBERG may process personal data necessary to comply with legal obligations, for example tax and accounting information and information relating to legal proceedings. The purpose and legal basis for this processing is KONGSBERG's legal obligations and KONGSBERG's legitimate interests in the establishment, exercise or defence of legal claims.