Privacy and Security Policy

Privacy Notice

Introduction

This Notice describes AmCham’s privacy practices for information collected on this website. This Notice also applies to AmCham’s affiliates’ websites that link to this Notice. For simplicity both AmCham and any affiliate websites are simply referred to as “the website” in this Notice.

AmCham supports the right to privacy, including the rights of individuals to control the dissemination and use of personal data that describes them. AmCham is committed to protecting personal data of the users of our website, and utilizes technical and organization measures to protect your data. AmCham supports and complies with domestic and international laws and regulations that seek to protect the privacy rights of such individuals.

This website, is owned and operated by American Chamber of Commerce in Norway, Arbins Gate 2, 0253 Oslo, Norway. Other websites subject to this Notice may be owned and operated by an affiliate company which is under the control of American Chamber of Commerce in Norway. From a data privacy perspective this means that AmCham is data controller and data collector. AmCham’s Data Protection Officer can be reached at amcham@amcham.no or by mail at:

AmCham
Data Privacy Officer
c/o Legal Department
Arbins Gate 2
0253 Oslo
Norway

Data Collection

When visiting our website, you are not required to provide any personal data. AmCham relies on consent or other lawful principles established for data collection under applicable laws. Therefore, you have the option to abstain from providing personal data when visiting publicly available portions of the website. However, when registering for an event, subscribing to receive AmCham’s marketing materials or when purchasing or using AmCham’s products or services or in other circumstances, you may be required to provide some or all of the personal data listed below. If you have provided AmCham with your personal data, you have the rights described below in the Data Subject Rights section below.

AmCham collects additional non-personal data as described in the subsequent section of this Notice (Additional Data Collection Activities).

Any data collected may be used in AmCham’s business to provide you the products we offer and to aid in AmCham’s sales and marketing efforts, and may result in you being contacted by AmCham. In some cases, contact information may be required for AmCham to create an account, enable delivery of materials requested on the website or to otherwise communicate with you. This may include: providing product or other requested information, making responses to inquiries, registration for AmCham events, and distributions for marketing purposes. You may also be able to register for AmCham services through the website.

For the purposes mentioned above, AmCham may collect the following personal data about you:

Full name
Company name
Company location
Position in company
Department
Billing information
Telephone number
Email address
To facilitate its sales and marketing efforts, AmCham may combine the personal data you provide with information that is not collected directly from you. Data not provided directly by you may be supplied by AmCham’s vendors that support its sales and marketing efforts. AmCham uses automated processing within its internal systems to optimize its sales and marketing activities. You may lodge a complaint with AmCham regarding automated processing by submitting it to AmCham using the contact information provided in the introduction to this policy.

We will retain your personal information as needed to fulfill the purposes for which it was collected. Personal data collected under this Notice is retained as long as you continue to interact with AmCham’s Sales and Marketing Teams or we have a legitimate business interest to retain your data.

Additional Data Collection Activities (Automatic Information)
AmCham automatically receives and records information about the use of the website either directly or through third party tracking utility providers. This may include cookies, IP addresses, your browser type, operating system version, language settings, which locally installed AmCham applications you use (if any) and how you use them, the web page you were visiting immediately prior to visiting our website, pages of our website that you visited, the time spent on those pages, information you searched for on our website, access times and dates, and other statistics. This data is not combined with your personal data collected directly from you.

AmCham utilizes cookies on its website. Click here for Information About Cookies on this AmCham Website.

AmCham uses IP addresses to help diagnose problems and to administer the AmCham website. When you visit our Website, we recognize only your domain name and not your e-mail address. We will see your e-mail address only if you provide it or send us an e-mail message.

AmCham does not ask you for, access or track any location based information from your device. If AmCham wishes to do so in the future to enhance our website, AmCham will specifically ask your permission.

As stated above, the collection of personal data is not required for accessing this website. However, AmCham collects the additional data for the maintenance and optimization of its website.

Data Processing

AmCham utilizes vendors to support the operation of AmCham’s business and for sales and marketing that may receive the data collected under this notice, and these vendors are data processors. However, any such processing is limited to facilitating AmCham’s own activities. AmCham does not share, sell or rent your personal information to any third parties for their promotional purposes.

Additionally, data processors utilized by AmCham are subjected to AmCham’s due diligence process and required to make contractual assurances that they will take adequate precautions to protect your data. AmCham will require such service providers to adopt adequate technical and organizational security measures to ensure the processing of personal data only as instructed by AmCham and for no other purposes.

Additional Transfers

AmCham may share personal information with its affiliates and with vendors working on our behalf as necessary to complete your requests and to provide you AmCham products and services. We may also share data when required by law or to respond to legal process. AmCham, its affiliates, and/or the vendors may be located in countries that are not considered to provide an adequate level of data protection as established by the European Data Protection Directive (95/46/EG) or the General Data Protection Regulation ((EU) 2016/679) (GDPR), including the United States. Where required under applicable law, AmCham will implement appropriate measures to secure the data transfers in accordance with applicable data protection laws. Such measure may include use of the Model Clauses or the Privacy Shield Framework.

AmCham has responsibility for the processing of personal information it receives under the Privacy Shield and subsequently transfers to a third party acting as an agent on its behalf. AmCham remains liable under the Privacy Shield Principles if an agent processes personal data covered by this Notice in a manner inconsistent with the principles, except where AmCham is not responsible for the event giving rise to the damage.

In certain situations, AmCham may be required to disclose personal data in response to lawful requests by public authorities, including to meet national security or law enforcement requirements.

Privacy Shield

AmCham complies with the EU-U.S. Privacy Shield Framework and Swiss-U.S. Privacy Shield Framework as set forth by the U.S. Department of Commerce regarding the collection, use, and retention of personal information transferred from the European Union or Switzerland to the United States. AmCham has certified to the U.S. Department of Commerce that it adheres to the Privacy Shield Principles. If there is any conflict between the terms in this Notice and the Privacy Shield Principles, the Privacy Shield Principles shall govern. To learn more about the Privacy Shield program, and to view our certification, please visit the U.S. Department of Commerce’s Privacy Shield site.

The U.S. Federal Trade Commission has jurisdiction over AmCham’s compliance with the Privacy Shield.

Rights you may have under Privacy Shield or applicable regulation, such as the General Data Protection Regulation (GDPR), are described below.

Data Subject Rights

Everyone

You may request from AmCham access to, correction of, blocking of and/or deletion of your personal data in line with applicable data protection law. You may also withdraw your consent for AmCham to process your personal data.

Privacy Shield

In compliance with the Privacy Shield Principles, AmCham commits to resolve complaints about our collection or use of your personal information. European Union residents with inquiries or complaints regarding our Privacy Shield policy should direct any such request and any other questions you may have with regard to the Privacy Shield Principles to AmCham’s Data Protection Officer, whose contact information is listed in the introduction to this Notice.

AmCham commits to cooperate with the panel established by the EU data protection authorities (DPAs) and the Swiss Federal Data Protection and Information Commissioner, as applicable, and comply with the advice given by the panel and Commissioner, as applicable, with regard to human resources data transferred from the EU or Switzerland, as applicable, in the context of the employment relationship.

AmCham has further committed to refer unresolved Privacy Shield complaints to JAMS, an alternative dispute resolution provider located in the United States, with a global presence. If you do not receive timely acknowledgment of your complaint from us, or if we have not resolved your complaint, please contact or visit JAMS for more information or to file a complaint. The services of JAMS are provided at no cost to you.

Under certain circumstances you may invoke binding arbitration for complaints regarding Privacy Shield compliance not resolved by any of the other Privacy Shield mechanisms. For more information please visit the U.S. Department of Commerce’s Privacy Shield Site.

Affiliates

The following AmCham U.S. affiliates also comply with the Privacy Shield Principles:

NACC

GDPR

Data Subjects covered by the GDPR are afforded additional rights including:

The Right to be Forgotten: you have the right to request the erasure of the personal data submitted to AmCham; this means you can request AmCham restrict your data from any further processing, and have your data deleted if possible.
Complaints may also be submitted to the applicable supervisory authority in the European Economic Area, which includes the data protection authority in your locality (for example, in the U.K., the supervisory authority would be the Information Commissioner’s Office).
Children’s Privacy

AmCham encourages parents and guardians to take an active role in their children’s online activities. Our Services are not aimed at people under 18 and AmCham does not knowingly collect personal information from children without appropriate parental or guardian consent. If you believe that we may have collected personal information from someone under the age of 13 (or the applicable age of consent) without proper consent, please let us know using the methods described in this Notice.

AmCham Customers

AmCham may also collect personal data from customers as required to provide support and delivery of AmCham products and services. If you have an agreement in place with AmCham for specific AmCham products or services, that agreement takes priority over this Notice; a customer’s use of AmCham or an affiliate’s products and services is governed by the terms of the contract between AmCham or an affiliate and the customer.

Updates to this Privacy Notice

AmCham may update this Privacy Notice from time to time. If we modify this Privacy Notice, we will post the revised version here. We may also provide notification of material changes by other means such as posting a notice on our website.

Privacy Notice
Introduction
This Notice describes AmCham’s privacy practices for information collected on this website. This Notice also applies to AmCham’s affiliates’ websites that link to this Notice. For simplicity both AmCham and any affiliate websites are simply referred to as “the website” in this Notice.

AmCham supports the right to privacy, including the rights of individuals to control the dissemination and use of personal data that describes them. AmCham is committed to protecting personal data of the users of our website, and utilizes technical and organization measures to protect your data. AmCham supports and complies with domestic and international laws and regulations that seek to protect the privacy rights of such individuals.

This website, is owned and operated by American Chamber of Commerce in Norway, Arbins Gate 2, 0253 Oslo, Norway. Other websites subject to this Notice may be owned and operated by an affiliate company which is under the control of American Chamber of Commerce in Norway. From a data privacy perspective this means that AmCham is data controller and data collector. AmCham’s Data Protection Officer can be reached at DPO@opentext.com or by mail at:

AmCham
Data Privacy Officer
c/o Legal Department
Arbins Gate 2
0253 Oslo
Norway

Data Collection

When visiting our website, you are not required to provide any personal data. AmCham relies on consent or other lawful principles established for data collection under applicable laws. Therefore, you have the option to abstain from providing personal data when visiting publicly available portions of the website. However, when registering for an event, subscribing to receive AmCham’s marketing materials or when purchasing or using AmCham’s products or services or in other circumstances, you may be required to provide some or all of the personal data listed below. If you have provided AmCham with your personal data, you have the rights described below in the Data Subject Rights section below.

AmCham collects additional non-personal data as described in the subsequent section of this Notice (Additional Data Collection Activities).

Any data collected may be used in AmCham’s business to provide you the products we offer and to aid in AmCham’s sales and marketing efforts, and may result in you being contacted by AmCham. In some cases, contact information may be required for AmCham to create an account, enable delivery of materials requested on the website or to otherwise communicate with you. This may include: providing product or other requested information, making responses to inquiries, registration for AmCham events, and distributions for marketing purposes. You may also be able to register for AmCham services through the website.

For the purposes mentioned above, AmCham may collect the following personal data about you:

Full name
Company name
Company location
Position in company
Department
Billing information
Telephone number
Email address
To facilitate its sales and marketing efforts, AmCham may combine the personal data you provide with information that is not collected directly from you. Data not provided directly by you may be supplied by AmCham’s vendors that support its sales and marketing efforts. AmCham uses automated processing within its internal systems to optimize its sales and marketing activities. You may lodge a complaint with AmCham regarding automated processing by submitting it to AmCham using the contact information provided in the introduction to this policy.

We will retain your personal information as needed to fulfill the purposes for which it was collected. Personal data collected under this Notice is retained as long as you continue to interact with AmCham’s Sales and Marketing Teams or we have a legitimate business interest to retain your data.

Additional Data Collection Activities (Automatic Information)

AmCham automatically receives and records information about the use of the website either directly or through third party tracking utility providers. This may include cookies, IP addresses, your browser type, operating system version, language settings, which locally installed AmCham applications you use (if any) and how you use them, the web page you were visiting immediately prior to visiting our website, pages of our website that you visited, the time spent on those pages, information you searched for on our website, access times and dates, and other statistics. This data is not combined with your personal data collected directly from you.

AmCham utilizes cookies on its website. Click here for Information About Cookies on this AmCham Website.

AmCham uses IP addresses to help diagnose problems and to administer the AmCham website. When you visit our Website, we recognize only your domain name and not your e-mail address. We will see your e-mail address only if you provide it or send us an e-mail message.

AmCham does not ask you for, access or track any location based information from your device. If AmCham wishes to do so in the future to enhance our website, AmCham will specifically ask your permission.

As stated above, the collection of personal data is not required for accessing this website. However, AmCham collects the additional data for the maintenance and optimization of its website.

Data Processing

AmCham utilizes vendors to support the operation of AmCham’s business and for sales and marketing that may receive the data collected under this notice, and these vendors are data processors. However, any such processing is limited to facilitating AmCham’s own activities. AmCham does not share, sell or rent your personal information to any third parties for their promotional purposes.

Additionally, data processors utilized by AmCham are subjected to AmCham’s due diligence process and required to make contractual assurances that they will take adequate precautions to protect your data. AmCham will require such service providers to adopt adequate technical and organizational security measures to ensure the processing of personal data only as instructed by AmCham and for no other purposes.

Additional Transfers

AmCham may share personal information with its affiliates and with vendors working on our behalf as necessary to complete your requests and to provide you AmCham products and services. We may also share data when required by law or to respond to legal process. AmCham, its affiliates, and/or the vendors may be located in countries that are not considered to provide an adequate level of data protection as established by the European Data Protection Directive (95/46/EG) or the General Data Protection Regulation ((EU) 2016/679) (GDPR), including the United States. Where required under applicable law, AmCham will implement appropriate measures to secure the data transfers in accordance with applicable data protection laws. Such measure may include use of the Model Clauses or the Privacy Shield Framework.

AmCham has responsibility for the processing of personal information it receives under the Privacy Shield and subsequently transfers to a third party acting as an agent on its behalf. AmCham remains liable under the Privacy Shield Principles if an agent processes personal data covered by this Notice in a manner inconsistent with the principles, except where AmCham is not responsible for the event giving rise to the damage.

In certain situations, AmCham may be required to disclose personal data in response to lawful requests by public authorities, including to meet national security or law enforcement requirements.

Privacy Shield

AmCham complies with the EU-U.S. Privacy Shield Framework and Swiss-U.S. Privacy Shield Framework as set forth by the U.S. Department of Commerce regarding the collection, use, and retention of personal information transferred from the European Union or Switzerland to the United States. AmCham has certified to the U.S. Department of Commerce that it adheres to the Privacy Shield Principles. If there is any conflict between the terms in this Notice and the Privacy Shield Principles, the Privacy Shield Principles shall govern. To learn more about the Privacy Shield program, and to view our certification, please visit the U.S. Department of Commerce’s Privacy Shield site.

The U.S. Federal Trade Commission has jurisdiction over AmCham’s compliance with the Privacy Shield.

Rights you may have under Privacy Shield or applicable regulation, such as the General Data Protection Regulation (GDPR), are described below.

Data Subject Rights
Everyone

You may request from AmCham access to, correction of, blocking of and/or deletion of your personal data in line with applicable data protection law. You may also withdraw your consent for AmCham to process your personal data.

Privacy Shield

In compliance with the Privacy Shield Principles, AmCham commits to resolve complaints about our collection or use of your personal information. European Union residents with inquiries or complaints regarding our Privacy Shield policy should direct any such request and any other questions you may have with regard to the Privacy Shield Principles to AmCham’s Data Protection Officer, whose contact information is listed in the introduction to this Notice.

AmCham commits to cooperate with the panel established by the EU data protection authorities (DPAs) and the Swiss Federal Data Protection and Information Commissioner, as applicable, and comply with the advice given by the panel and Commissioner, as applicable, with regard to human resources data transferred from the EU or Switzerland, as applicable, in the context of the employment relationship.

AmCham has further committed to refer unresolved Privacy Shield complaints to JAMS, an alternative dispute resolution provider located in the United States, with a global presence. If you do not receive timely acknowledgment of your complaint from us, or if we have not resolved your complaint, please contact or visit JAMS for more information or to file a complaint. The services of JAMS are provided at no cost to you.

Under certain circumstances you may invoke binding arbitration for complaints regarding Privacy Shield compliance not resolved by any of the other Privacy Shield mechanisms. For more information please visit the U.S. Department of Commerce’s Privacy Shield Site.

Affiliates

The following AmCham U.S. affiliates also comply with the Privacy Shield Principles:

NACC

GDPR

Data Subjects covered by the GDPR are afforded additional rights including:

The Right to be Forgotten: you have the right to request the erasure of the personal data submitted to AmCham; this means you can request AmCham restrict your data from any further processing, and have your data deleted if possible.
Complaints may also be submitted to the applicable supervisory authority in the European Economic Area, which includes the data protection authority in your locality (for example, in the U.K., the supervisory authority would be the Information Commissioner’s Office).
Children’s Privacy

AmCham encourages parents and guardians to take an active role in their children’s online activities. Our Services are not aimed at people under 18 and AmCham does not knowingly collect personal information from children without appropriate parental or guardian consent. If you believe that we may have collected personal information from someone under the age of 13 (or the applicable age of consent) without proper consent, please let us know using the methods described in this Notice.

AmCham Customers

AmCham may also collect personal data from customers as required to provide support and delivery of AmCham products and services. If you have an agreement in place with AmCham for specific AmCham products or services, that agreement takes priority over this Notice; a customer’s use of AmCham or an affiliate’s products and services is governed by the terms of the contract between AmCham or an affiliate and the customer.

Updates to this Privacy Notice

AmCham may update this Privacy Notice from time to time. If we modify this Privacy Notice, we will post the revised version here. We may also provide notification of material changes by other means such as posting a notice on our website.

Revised: 9 May 2018