Data protection

Privacy notice for Heidelberg Materials Aggregates Norway website

1.    Introduction

The purpose of this privacy notice is to provide information on how Heidelberg Materials Aggregates Norway, (“HM Aggregates” or “we”) process and use the personal data collected from you in connection with your visit on this website and your use of the website’s functions.

Heidelberg Materials Aggregates Norway, which is a company within the Heidelberg Materials Group, respects your privacy and the protection of your personal data. All processing of personal data is carried out in accordance with the European Union’s General Data Protection Regulation (the “GDPR”). This privacy notice also contains information on how you can contact us with questions about our processing of your personal data.

2.    Purpose and legal basis for the processing of your personal data

Below is a description of what personal data we process about you, for which purposes we process your personal data and which legal bases we base our processing of your personal data on.

•    To answer your requests

(i)    What personal data being processed and why?

To answer requests from you, we process your name, e-mail address and telephone number as well as other personal data that you may leave in connection with your request.

(ii)    What is the legal basis for the processing?

The processing of your personal data for this purpose is based on our legitimate interest to provide you with good service and to be able to answer your request. When you contact us with a request, it is also in your interest that we process your personal data in order to provide you with the information and service that you have requested. Furthermore, the personal data we process in connection with your request is of non-sensitive character and is necessary for us to be able to satisfy and answer your request. Personal data is only shared with third parties if it is required to answer your request.

•    To contact you for marketing purposes and as part of our follow-up of customer relations

(i)    What personal data is being processed and why?

To contact you for marketing purposes and as part of our follow-up of customer relations, we process your name and e-mail address.

(i)    What is the legal basis for the processing?

The processing of your personal data for this purpose is based on our legitimate interest of marketing our business and maintaining a good relation with you as a customer or representative of a corporate customer. Marketing is a fundamental part of our business and we always strive to provide marketing that is relevant to you. It is also in our interest to maintain, manage and grow the relationship we have with you (or the company you represent) as a customer.

•    To manage and improve this website, for our internal information gathering and for statistical analysis

(i)    What personal data is being processed and why?

We process personal data collected using cookies. For further information about which cookies we use and what information they collect, see our Cookie policy.

(ii)    What is the legal basis for the processing?

The processing of personal data through the use of so-called necessary cookies is necessary for us to fulfil the agreement with you regarding the use of our website, i.e. without the processing of such cookies we cannot provide you with a functioning website. Processing of personal data collected using other types of cookies is based on your explicit consent. For more information, see our Cookie policy.

3.    Who has access to your personal data?

We have taken appropriate technical and organisational security measures to protect your personal data against loss, unintentional and unauthorized access and unauthorized disclosure. The number of persons that have access to your personal data is limited. Only persons at Norstone that needs to process your personal data in accordance with the purposes stated above have access to the personal data.

We may share your personal data with other companies within the Heidelberg Materials Group if required to fulfil the purposes mentioned above. Such companies may be located within or outside the EU/EEA.

We may also share your personal data with third parties under the following scenarios:

  • When required by law;
  • to HM Aggregates' service providers which perform services on our behalf in connection with this website and its functions (for example, our IT services provider that provides, develops and supports the website). Your personal data will only be shared with such service providers to the extent necessary to provide this website; and
  • to a buyer or a potential buyer of our business.

Norstone will take measures to protect all personal data transferred to such third party.

Your personal data may be transferred to countries that might have a lower level of protection of personal data than that offered within the EU/EEA. When your personal data is transferred to countries outside the EU/EEA, we use standard contractual clauses that have been approved by the European Commission to ensure an adequate level of protection for your personal data. The standard contractual clauses are available via the following link: Standard Contractual Clauses (SCC) (europa.eu)

4.    For how long do we store your personal data?

We store your personal data for as long as is necessary to fulfil the purpose for which it was collected. This means that we store your personal data in accordance with the table below. Statistics that have been anonymised and no longer can be attributed to you may be stored for a longer period of time.

Type of processing Time period or criterion for determining the storage period
Personal data collected to answer requests from you. During the time we process your request.
Personal data being processed to contact you for marketing purposes and as part of our follow-up of customer relations. Until you object to the marketing.
Personal data collected using cookies to manage and improve this website, for our internal information collection and for statistical analysis. Stored for the duration of each cookie, for more information see our Cookie policy.


5.    What are your rights?

Heidelberg Materials Aggregates Norway with organisation number 918 414 304 is the data controller of the processing of your personal data described in this privacy notice. This means that we are responsible for ensuring that your personal data is processed correctly and in accordance with applicable laws. Read more about your rights below.

  • The right of access: You have the right to know which personal data we process about you, for what purposes the personal data is processed and who we share personal data with, etc. You also have the right to access the personal data and request a copy of the personal data being processed.
  • The right to rectification: If you notice that we have incorrect or incomplete personal data about you, you can always request that we correct or supplement this personal data.
  • The right to erasure and restriction: In some cases, you may request that we delete your personal data or that we limit our processing for a certain period of time. Please note that limiting or deleting your personal data may result in e.g. us not being able to provide you with the products you have purchased.
  • The right to object: You have the right to object to the processing we perform based on our legitimate interest.
  • The right to data portability: In cases where we base our processing on your consent or on the fulfilment of an agreement, you also have the right to receive your personal data in a structured, commonly-used and machine-readable format and have the personal data transferred to another controller.
  • Withdrawal of consent: If you have given your consent to processing of your personal data, you always have the opportunity to withdraw your consent by contacting us using the contact information below.

If you have any questions about our processing of your personal data, you can contact us by e-mail at info@norstone.no or by sending a letter to Røynebergveien 24, 4052 Røyneberg, in an envelope marked ”Att: Data Protection Line Manager”. If you have any objections or complaints regarding how we process your personal data, you also have the right to contact or file a complaint with the Norwegian Data Protection Authority.

6.    Cookies

When you visit our website, we may collect and/or store information about your visit to manage and improve this website, for our internal information gathering and for statistical analysis by placing cookies. Cookies are small text files that a website or its service provider transfer to your computer’s hard drive through your browser. Cookies enable us to recognize your browser and to access and store certain information. For further information on how we use cookies on our website, please read our Cookie policy .

7.    Changes

If any changes are made concerning the processing of your personal data, we will inform you of the changes by publishing an updated version of this privacy notice on our website: https://www.tilslag.heidelbergmaterials.no/en

Cookie policy