Dear Madam/Sir,
In connection with the entry into force of Regulation (EU) 2016/679 of the European Parliament and of the Council of 27 April 2016 on the protection of natural persons with regard to the processing of personal data and on the free movement of such data, and repealing Directive 95/46/EC (general regulation on data protection) of April 27, 2016 (Journal of Laws UE. L No. 119, p. 1), hereinafter “GDPR”, complying with the conditions contained therein, we inform you that:
1. The administrator of the processed data is Pro Diver Norge AS with its registered office at Kaiavegen 37, 5357 Fjell, Norway.
2. Purpose and period of personal data processing at Pro Diver Norge AS
At Pro Diver Norge AS, personal data is processed only for specific, explicit and legitimate purposes and is not further processed in a manner inconsistent with these purposes. The period of personal data processing results directly from the provisions of law, is adequate to the purposes.
3. Recipients of personal data
In the meaning of the GDPR, recipients of personal data are not public authorities that may receive personal data as part of specific proceedings in accordance with EU law or the law of a Member State. Personal data is not made available to entities other than those authorized under the law.
4. Persons whose data is processed in accordance with the GDPR are entitled to:
the right to access your own personal data;
the right to request the administrator to rectify, supplement, delete or limit the processing of their own personal data, as well as to object to such processing - in situations provided for by law;
the right to withdraw consent to the processing of one's own personal data at any time without affecting the lawfulness of the processing which was made on the basis of consent before its withdrawal;
the right to lodge a complaint with the supervisory body, which is the President of the Office for Personal Data Protection, if it is found that the processing of personal data violates the provisions of the GDPR.
5. When processing personal data under the GDPR, there is no automated decision-making on the processing of personal data, including profiling.