Privacy Policy

Last updated:

30. july 2026

Respect for privacy and the protection of personal data is an important part of Baneservice's corporate culture. Baneservice wants to ensure that customers, suppliers and other stakeholders can trust that we handle their personal data properly. We work continuously to ensure compliance with applicable data protection legislation, as well as our internal guidelines for privacy and the protection of personal data.

This privacy policy explains how, why and for how long Baneservice processes personal data about you.

The personal data we process

Baneservice collects personal data in order to operate efficiently and provide the necessary services. Among other things, we process the following customer and supplier data:

contact details of the individuals involved
information about user accounts
details of your authorisations on behalf of the organisation you represent (customers and suppliers)

We also process personal data within environmental and social responsibility. This includes, among other things, personal data about local stakeholders, for example occupation, health, contact details and other related information.

In addition, we process personal data about other partners and stakeholders, including politicians, press contacts, journalists and other relevant stakeholder groups.

Why we process personal data

Baneservice processes your personal data in order to provide or procure products or services to or from you or your organisation.

For example, we process your personal data for the following purposes:

communication with customers and suppliers
security of, and access to, our services
improvement of our services and communication channels
marketing
contract administration
communication and social media
audits, controls and reviews
emergency preparedness
due diligence
purchasing and procurement
recruitment

How we collect personal data

We collect personal data from various sources. You provide some of this information directly through a customer or supplier relationship. Other information is collected through your activity as a customer, supplier or other stakeholder. We also collect personal data from other sources. Below are some situations in which we collect your personal data:

Information you provide to us, for example when you:

enter into contracts or agreements with us
submit forms to us
visit our websites or use our social media platforms
set up a customer or supplier account with us
send us emails or contact us through other channels

Information collected from your activity as a customer, supplier or other stakeholder, for example when you:

use our websites
order products or services from us

Information collected from third parties, for example from:

public authorities
credit institutions
other publicly available information

Storage of personal data

Baneservice stores personal data for as long as it is necessary to fulfil the purpose for which it was collected. Your personal data is stored and deleted in accordance with applicable laws.

Who we share personal data with

We share your personal data with:

Other companies in the Baneservice Group
To the extent necessary to fulfil one or more of the purposes described above, your personal data is shared with other companies in the Baneservice Group.

Suppliers
We use a range of suppliers that provide services within IT, cloud storage and similar. We may allow such suppliers to access or receive your personal data to the extent relevant for providing the necessary services. We will ensure adequate data processing agreements with our suppliers to protect your privacy. When we use data processors outside the EU/EEA, we will ensure that there is a legal basis for the transfer of personal data.

Public authorities
We will also disclose your personal data where there is a legal requirement to do so, where it follows from a judgment, ruling or decision by a court or administrative authority, or as part of legal proceedings.

Securing personal data

Baneservice is committed to protecting your personal data:

We handle information so that it is accurate, accessible and managed according to its level of sensitivity.
We use a range of security technologies and information security procedures to protect your personal data from unauthorised access, use or disclosure.
We limit access to your personal data to the staff or third parties who need to process the data on Baneservice's behalf. These parties are subject to strict confidentiality requirements, and Baneservice may take disciplinary action or terminate the agreement if these requirements are not met.

Who is responsible for personal data

Baneservice AS is the data controller and is responsible for determining the purpose of the processing and the way in which your personal data is processed. The other companies in the Baneservice Group are responsible for selected processing activities within their own areas.

Legal basis for processing personal data

Baneservice processes personal data only if, and to the extent that, at least one of the following applies:

the person the data concerns has given their consent to the processing of their personal data for one or more specific purposes
the processing is necessary for the performance of a contract to which the person the data concerns is a party, or in order to take the necessary steps prior to entering into a contract at the request of the person the data concerns
the processing is necessary for compliance with a legal obligation to which the data controller (Baneservice) is subject
the processing is necessary to protect the life and health of the person the data concerns, or of other individuals
the processing is necessary for the performance of a task carried out in the public interest, or in the exercise of official authority vested in the data controller (Baneservice)
the processing is necessary for the purposes of a legitimate interest pursued by the data controller (Baneservice) or by a third party, except where such a legitimate interest is overridden by the interests or fundamental rights and freedoms of the person the data concerns, which require the protection of personal data

Your rights

You have the right, at any time, to ask us to:

give you an overview of how we use your personal data
give you a copy of the data you have provided to us
update or correct your personal data
delete personal data that we no longer have a legal basis to process
provide you with your personal data in a structured, commonly used and machine-readable format, or transfer the data to another data controller
stop a particular processing of personal data that is based on legitimate interest, unless our purpose for the processing outweighs the consideration of your privacy rights
restrict how we use your personal data during an investigation
complain via the contact details in this privacy policy or to the relevant legal authority

Contact us

If you have requests, questions or complaints regarding this privacy policy, or our use of personal data, you can contact us at kommunikasjon@baneservice.no.

About this privacy policy

This privacy policy is based on the transparency requirement in Regulation (EU) 2016/679 (the General Data Protection Regulation). We will update this privacy policy when necessary. Any changes will be published on this page.

The recruitment process at Baneservice

Have you applied, or are you considering applying, for a position with us? Here is some information about our recruitment process.

1. Application
To comply with GDPR, we will not accept applications sent directly to a Baneservice email address. All applicants must register with an open application, or apply directly for the position you are interested in, by following the link in the job advertisement. Upload your CV, cover letter, diplomas and other relevant documents. For applications to positions that require a trade certificate, we also ask you to upload this. Your application and documentation should be in the same language as the job advertisement. Once your application is registered in our recruitment system, you will receive an email confirming this.

2. Interviews and work-related tests
If you are a relevant candidate, you will be invited to a first interview. In most recruitment processes at Baneservice, there will be several interview rounds before a selection is made. You may also be asked to complete an aptitude test, a personality test and/or solve a case or work-related task during the recruitment process. Please note that the recruitment process at Baneservice may vary depending on the position you apply for.

3. Reference check
Baneservice carries out a reference check before any appointment.

4. Offer
The selected candidate will receive an offer from us, and we will agree on a start date. The remaining candidates will be informed that the position has been filled. Even if it did not lead to an offer this time, we still encourage motivated candidates to keep an eye on our careers pages and to apply again if something of interest comes up.

‍