Privacy policy
Concerning
the privacy policy
This privacy policy provides information about how the fire service receives and uses personal information, and the rights you have when we process personal information about you. The fire and rescue service in Oslo is the responsible for the data on the website Branntips.no. The fire service that receives the fire safety concern is responsible for the data after the report has been received.
1. What do we consider personal information?
Personal information is information that can tell us something about an individual, such as name and contact information, behaviour patterns, interests, assessments, conversation referrals, photographs of individuals, the registration number of a car, IP address, health information and much more. The decisive factor is whether the information can be linked to or identify an individual or a group of less than five people.
2. What is the meaning of “processing of personal data?”
Processing is a term, which is used about everything that can be done with personal data, be it anything from receiving, collecting, storing, analyzing, compiling, changing or deleting a personal data, and so on. One process will normally include several such operations.
3. Who is responsible for the processing of personal data in the fire and rescue service
The fire service that receives the fire safety concern has the overall responsibility for all processing of personal data that takes place within the company. The individual fire service can be contacted for questions about the processing of personal data. If you have questions about the website, please contact the fire and rescue service in Oslo.
4. In which cases does the fire service process personal data?
For supervisory tasks and other public authority duties.
The fire service carries out public authority in accordance with the fire and explosion protection act and according to the regulations on fire prevention. In this context, the fire service processes personal data for purposes related to supervision and case processing, citizen inquiries and reports of concern, coordination, and compilation of statistics. Processing of personal data is a prerequisite for the fire service to be able to carry out its social mission.
The basis for the processing is authorized in the Privacy Regulation, Article 6 (1) (e), which allows the processing of personal data when this is necessary for the exercise of public authority. If the information contains special categories of personal data, such as health information, the processing is authorized in the Privacy Ordinance, Article 9 (2) (g).
5. Which categories of personal data are processed?
The personal data that is processed depends on the purpose of the processing. This will therefore vary. Commonly used personal information is information about identity, such as name and contact information, a telephone number, email address and residential address.
Other personal information that is processed can be letters, emails and other communications, information about offenses, certification, working conditions and health. This personal information is special categories of personal information. The fire service only processes this type of information when it is strictly necessary. Read more about special categories of personal information here.
You can request access to your own personal information at any time, see more about this below.
7. Where is the information obtained from and with whom is it shared?
Normally, personal information is sent directly from private individuals, but can also come from other public authorities or publicly available registers.
Sometimes the personal information is shared with others, most often with other public authorities, but not limited only to this. The recipients must have their own legal basis for processing the personal data.
8. How long do you store the personal data?
Personal information shall not normally be stored beyond what is necessary to achieve one or more specific purposes. Personal information that is no longer needed will therefore be deleted, unless otherwise provided by other regulations.
As a public authority, the fire service is subject to extensive archiving obligations. Case documents and other information that are subject to archiving will therefore be stored in accordance with the Archives Act with regulations, and can therefore not be deleted in the usual way. In the event of an error in the sending of messages from Branntips, the server will try to send the message for up to five days, before the message is deleted from the server for good.
9. Your rights
You have the right to know what personal information the fire service processes about you, and to receive a copy of the personal information. You can also request information about why we process the personal data, the names of any recipients, and information about how long the data is expected to be processed and where the personal data comes from.
Correction of personal information
If your personal information is incorrect or incomplete, you can request that the information should be corrected or supplemented with additional information.
Deletion of personal information
In some cases, you may require the fire service to delete personal information about you. However, as a result of the archiving obligation under the Archives Act with regulations, this right will be somewhat limited in the public sector.
Right to withdraw consent
In cases where the treatment takes place on the basis of your consent, you have at any time the opportunity to withdraw the consent. The treatment will then normally have to be stopped. However, this does not affect the legality of the treatment that has already taken place.
It should be as easy to withdraw as to give consent.
Limitation of processing
In some cases, you can demand that processing be limited. This applies where you have disputed the accuracy of the personal data, where the processing is illegal or no longer necessary, or where you have protested against the processing in question.
Protest against processing
In some cases, you can protest against a processing. This is limited to apply in cases where the fire service processes your personal data as part of the exercise of public authority, cf. the Privacy Ordinance Article 6 No. 1 e), or when the processing takes place on the basis of a balancing of interests under the Privacy Ordinance Article 6. No. 1 f).
The protest must be justified in your particular situation. Further on, it will be up to the fire service to decide whether the processing can continue.
Data portability
If the fire service processes your personal data on the basis of your consent or an agreement with you, you can request that the information be transferred to another data controller, if there is a real choice between several service providers / data controllers.
Right to complain
If the fire service processes personal data about you, you have the right to complain about the processing. The complaint is addressed to the Norwegian Data Protection Authority.
If you believe that the fire service does not comply with the privacy rules, we want you to contact the fire service to which you have sent the fire safety concern.
Do you want more information about your rights?
On the Data Inspectorate's website, you can read more about your rights: https://www.datatilsynet.no/rettigheter-og-plikter/den-registrertes-rettigheter/