Privacy Policy

Introduction

Compact Food Solutions AS respects your privacy and will handle all personal data in accordance with the EU's General Data Protection Regulation (GDPR). This privacy policy aims to help you understand what data we collect, why we collect it, and what we do with it, as well as your choices regarding the use, access, and correction of personal data.

Scope

This policy applies to external individuals who are not engaged or employed by Compact Food Solutions AS, such as when an external person provides us with personal data or when we collect data about such individuals in the course of our regular business operations, from third-party service providers, contractors, public sources, previous employers or organizations, trade shows, or communication channels such as email, or through our websites.

Compact Food Solutions AS has a separate privacy policy for the processing of personal data for individuals employed or engaged with Compact Food Solutions AS, available on Compact Food Solutions AS's intranet.

Data Controller

Compact Food Solutions AS is a privately owned company with subsidiaries in India and South Africa. Each of these legal entities carries out activities that involve the processing of personal data. This privacy policy applies to the general data processing activities of Compact Food Solutions AS and any legal entity in Norway that is directly or indirectly owned by more than 50% of Compact Food Solutions AS or that uses the Compact Food Solutions AS brand (hereinafter referred to as Compact Food Solutions). Each legal entity is the data controller for their respective processing of personal data.

Collection and Use of Personal Data

We collect or receive personal data for several purposes related to our business operations. The type of personal data we collect, the purpose, and the legal basis for such processing depend on our relationship with you and your contact with us. Below is an overview of our processing in different situations.

Website Visitors

When you visit Compact Food Solutions AS's website, we collect data through cookies. The data we collect through cookies consists of information related to your device, IP address, and your use of the websites. The purpose is to improve the website's content by tracking usage patterns and recording preferences. Our basis for collecting this data is your consent. For more information about cookies, see our cookie policy.

Contacting Us

When you contact us, for example, through our websites or otherwise, we will process personal data about you. The personal data we collect will typically be contact information such as name, email address, phone number, and other information you share with us, which is necessary to collect to respond to your inquiry. The basis for this processing is our legitimate interest in being able to respond to your inquiry.

Business Operations

If you are employed by one of our suppliers, customers, or business partners, it may be necessary for us to process personal data about you. The personal data we process in this context will most often be contact information such as name, email address, and phone number, as well as information about your employer and your position. Additionally, we will process other information that you provide to us or that arises from our contact with you, to the extent necessary for the specific task. The basis for this processing is our legitimate interest in being able to perform tasks related to our business activities, including, for example, enabling collaboration with your employer.

Legal Obligations

We are legally required to process personal data in certain cases, for example, to document compliance with obligations within tax, accounting, or legal processes. In this context, it may be necessary to process personal data about you. This may be necessary if your name appears on an invoice or contract subject to retention obligations. The legal basis for such processing is the legal obligation we are subject to. The data will be deleted when the purpose of the processing is fulfilled, such as when the reporting obligation is fulfilled, or we are no longer required to retain the data.

Due Diligence

In connection with our business and investment activities, we may conduct a due diligence process of other companies, such as potential investment targets or business partners. In connection with the due diligence assessment process, we may process personal data such as name, gender, position, competence, experience, and publicly available information that we consider necessary to conduct the due diligence assessment process. The legal basis for our processing of personal data in a due diligence process is our legitimate interest in verifying and securing our investments and/or maintaining necessary quality and security levels in our processes and services. If the processing of personal data is of such a nature that it cannot be guaranteed by our legitimate interest, we will obtain your consent.

Subscriptions and Newsletters

When you register to receive notifications and/or newsletters from us, we register your email address so that we can send you the information you wish to subscribe to. The purpose of this processing is to be able to send you notifications and/or newsletters or other information you have requested/subscribed to. The basis for this processing is the consent you give when registering to receive the notifications and/or newsletters. You can withdraw your consent at any time. When you withdraw your consent, we will remove you from the recipient list.

Recruitment

When you apply for a job with us or send us an unsolicited application, we register your personal data. For information on how we process personal data in connection with job applications, please read our separate recruitment privacy policy.

Reporting

If you use our reporting portal to make a report, we will process the personal data you provide in the report. For more information on how we process personal data in connection with reporting, please read our privacy policy in the application we use for reporting.

Event Participation

If you register for any of our events, we may register personal data such as name, contact information, and, if you wish, preferences related to food and drink. The basis for processing this information is your consent. The data will be deleted after the event has concluded unless we have another legal basis for retaining the data longer.

Social Media Pages

To provide you with relevant information and communicate with you, we have established publicly accessible profiles and pages on Facebook, LinkedIn, and Instagram. As administrators of our pages on the social media platforms, we are joint data controllers with the relevant social media provider for the processing of data generated through such pages. Please note that Facebook, LinkedIn, and Instagram additionally process your personal data for their own purposes. Compact Food Solutions AS is not responsible for Facebook, LinkedIn, and Instagram’s processing of personal data for their own purposes. For more information, we refer to the privacy policies of the relevant social media provider.

Data Sharing

Third-Party Service Providers

We share personal data with vendors who process personal data on our behalf. When we do so, we enter into data processing agreements that limit the vendors' use of personal data to the purpose described in the agreement. Some of our vendors, or their subcontractors, are located in countries outside the EU/EEA. This means that personal data may be transferred to a country with regulations that do not provide the same level of protection of personal data as in Norway. To protect your privacy, such transfers will be carried out in accordance with applicable data protection legislation.

Other Third Parties

We do not disclose your personal data to others unless there is a legal basis for such transfer. Examples of such a basis will typically be your consent or a legal basis that allows or obliges us to disclose the data.

If our website or organization is taken over, sold, or involved in a merger or acquisition, your data may be disclosed to our advisors and potential buyers and will be passed on to the new owners. The disclosure of personal data may involve your personal data being transferred to third parties located in countries outside the EU/EEA. To protect your privacy, such transfers will be carried out following applicable data protection legislation.

Other Compact Food Solutions Companies

We collaborate with other Compact Food Solutions companies, and it may be necessary to share personal data with these companies from time to time. This may be necessary to respond to your inquiry, because we share IT solutions, or because we collaborate on delivering a service.

In cases where another Compact Food Solutions company acts as our data processor, we will process your personal data as described above under the section "Third-Party Service Providers." In cases where another Compact Food Solutions company acts as a data controller, the section "Other Third Parties" above will apply.

Data Security

We are committed to ensuring and protecting your personal data through technical and organizational security measures.

Your Rights as a Data Subject

When we process personal data about you, you have, with certain reservations, the following rights:

  • You have the right to know why your personal data is necessary, what will happen to them, and how long they will be stored.

  • Right of Access: You have the right to access your personal data and information about the processing of personal data.

  • Right to Rectification: You have the right to supplement, correct, and have your personal data deleted or blocked at any time, as long as we are not legally required to retain the information.

  • If you give us your consent to process your data, you have the right to withdraw that consent and have your personal data deleted.

  • Right to Data Portability: You have the right to request all your personal data from the data controller and transfer them in their entirety to another data controller.

  • Right to Object: You can object to the processing of your data. We will comply, unless there are justified grounds for processing.

  • Right to Complain: If you believe our processing of personal data is unlawful, you have the right to complain to the Data Protection Authority. See www.datatilsynet.no for more information. Before submitting a complaint, we hope you will contact us to address your concerns.

Contact Us

If you have questions or want to know what personal data we process about you, you can contact us at privacy@compactfoods.com. Your inquiry will be handled by Compact Food Solutions AS, who is the data controller in the specific case.

Changes to the Privacy Policy

We may update this privacy policy from time to time. It is recommended that you read this privacy policy regularly to stay informed of any changes. Additionally, we will actively inform you where possible.

This privacy policy was last updated on March 27, 2025. Effective date: March 2025 / Last updated: March 2025.