Privacy statement

We are responsible for processing the personal data described in this statement:

• Visiting address: Innovation Norway, Grev Wedels Plass 9, 0151 Oslo, Norway
• Postal address: Innovation Norway, PO Box 448 Sentrum, 0104 Oslo, Norway
• Telephone number: + 47 22 00 25 00
• Organisation number: 986 399 445

Contact us

We process personal data in many different work processes. Each work process has its own purpose for processing personal data. We divide these work processes into the following three categories:

• Core processes
• Management processes
• Support processes

Below, we briefly describe the main purposes for processing personal data in each of the three categories.

View our overview of the individual work processes.

Core processes

Our core processes involve delivering services to Norwegian businesses. Through these processes, we fulfil our public mandate. Section 10, first paragraph, of the Innovation Norway Act sets out our service categories:

• Funding, including grants, loans, financial guarantees and equity schemes
• Advisory and competence-building initiatives
• Networks and infrastructure
• Promotion of Norwegian businesses abroad

Although our customers are primarily legal entities, we still process personal data about individuals who hold roles within these organisations, such as contact persons, general managers, chairs of the board and employees. In funding cases, we may also process personal data about individual guarantors. Our handling of applications and enquiries, as well as our follow-up of agreements, also involves processing personal data about our own employees.

Management processes

Management processes are designed to set our strategy and ensure that our core and support processes achieve their objectives. Our management processes include:

• Strategy development and implementation
• High-level dialogue with government authorities and commissioning bodies
• Strategic initiative proposals
• Operating and administrative budget

As part of our management processes, we process personal data relating to our employees and board members, as well as contact persons at our owners and commissioning bodies.

Support processes

Support processes are designed to support our core and management processes. Like other organisations in the public and private sectors, we have a wide range of support processes, including:

• Procurement
• Handling requests for access to information
• Handling disclosure orders
• Disclosure of data for research
• Customer surveys and evaluations of our customer-facing services
• Recruitment
• Employee development reviews
• Employee survey
• Payroll processing
• Security clearance for employees
• Handling whistleblowing cases
• Access control
• Conducting integrity due diligence (IDD)

In our support processes, we process personal data about both our employees and external parties who contact us for various reasons.

For each work process, we specify which personal data we process and the legal basis for doing so.

See the overview of our individual work processes here.

We will not disclose your personal data unless we have a legal basis for doing so. Below, we describe the main situations in which we may disclose personal data.

Disclosure under the Freedom of Information Act

The Freedom of Information Act applies to us. This means that, subject to the limitations set out in law, we are required to provide access to documents relating to our activities.

The Freedom of Information Act does not mean that all documents we hold are available to the public. The Act contains important practical exemptions from the right of access (for example, confidential information is not disclosed). The Freedom of Information Regulations also stipulate that large parts of our activities fall outside the scope of the Freedom of Information Act.

Disclosure of data for research

Section 27, fourth paragraph, of the Innovation Norway Act states that where 'it is deemed reasonable and does not cause disproportionate harm to other interests, it may be decided that information in an individual case may or must be disclosed for research purposes, notwithstanding the duty of confidentiality'. We process applications for access to confidential information, including personal data, in accordance with established procedures.

Disclosure of data to commissioning bodies and public authorities

Section 27, third paragraph, no. 3 of the Innovation Norway Act states that the duty of confidentiality does not prevent 'information from being disclosed to our public-sector clients and other public authorities when this is necessary to enable these bodies to fulfil their duty under an act, regulation or instruction to monitor our public funds'. This type of monitoring may also involve the disclosure of personal data.

Disclosure of data in accordance with a disclosure order

We are required to comply with orders to disclose documentation and personal data as stipulated in specific legislation, including section 10-2 of the Tax Administration Act, section 21-4 a of the National Insurance Act, section 22-3 of the Dispute Act (cf. sections 24-1, 24-3, 26-5, 26-6 and 26-7) and section 118 of the Criminal Procedure Act (cf. sections 108 and 210).

Disclosure of data pursuant to section 39 of the Marriage Act

Section 39 of the Marriage Act states that a spouse may ‘require the other spouse and the tax authorities to provide information about, or a copy of, their joint tax return or the other spouse’s tax return and assessment of wealth and income tax’. A spouse may also ‘require information from companies, enterprises or other institutions engaged in financing or insurance activities, and from others that manage funds’.

Handling requests for information under the Transparency Act

Section 6 of the Norwegian Transparency Act states that 'any person has the right, upon written request, to information from an enterprise about how it addresses actual and potential adverse impacts pursuant to Section 4'. This includes both general information and information relating to a specific product or service we offer. As with requests for access under the Norwegian Freedom of Information Act, requests for information under the Transparency Act may result in the disclosure of personal data.

Disclosure of information to public authorities to fulfil reporting obligations, etc.

We are required to report information to the Norwegian authorities on matters including employment and taxation, pursuant to the Act relating to employers' reporting of employment and income circumstances, etc., sections 7-2 and 8-6 of the Tax Administration Act, sections 5-11 and 14-5, second paragraph, of the Tax Payment Act, and sections 25-1, second paragraph, and 25-10 of the National Insurance Act, cf. section 21-4.

Disclosure to fulfil an agreement

Sometimes, we need to disclose personal data to fulfil a contract. The specific contractual relationship will determine which data we share.

Disclosure to protect your vital interests

When responding to serious incidents (accidents, natural disasters, etc.), we may need to disclose personal data as part of our crisis management and emergency preparedness work.

We process personal data for as long as necessary to fulfil the purposes for which it was collected. When we no longer need the data, we will delete or anonymise it. In some areas, we are required to retain personal data for a longer period to comply with legal obligations. These retention requirements arise from legislation including the Archives Act and the Bookkeeping Act.

You have the right to:

• receive information about how we process your personal data
• request access to the personal data we hold about you, information about how we process it and the purpose of the processing
• request that we correct your personal data if it is inaccurate or incomplete
• request the deletion of some of your personal data
• request that we restrict our processing of your personal data
• transfer the personal data you have provided to us in a structured, machine-readable format
• withdraw your consent
• lodge a complaint with the Norwegian Data Protection Authority
• in certain cases, object to our processing of your personal data

We hope you will let us know if you believe we are not complying with the rules set out in the Personal Data Act.

You can also complain about how we process your personal data. Read more about complaining to the Norwegian Data Protection Authority.

Web analytics

We use the analytics tools Siteimprove and PostHog on our main website, www.innovasjonnorge.no. When you start using the website, you can explicitly choose whether to accept or reject tracking.

Cookies

Cookies are files containing small amounts of data that are stored on your computer, mobile phone or other device. Cookies allow websites to remember your actions or preferences over time, for example.

We use cookies and other identifiers together with personal data to improve your experience of our services, verify your identity and give you easy access to useful information. If you have consented to tracking as described here, we share information about how you use our website with analytics partners. Read more about how we use cookies.

Social media

Our website contains links to our profiles on Facebook, Instagram and LinkedIn. We do not share your personal data with social media platforms through links on our website.