Privacy Policy

Privacy and data protection laws protect the integrity and confidentiality of a person’s private information. Equinor is committed to protecting the privacy rights of our employees and everyone with whom we do business or cooperate with. We will only use personal data for appropriate purposes, and personal data will be processed in accordance with applicable data protection regulation and Equinor’s Binding Corporate Rules.

Within the Equinor Group, the data controller will be Equinor ASA and/or the Equinor company(ies) you have your relationship with. You will find alist of Equinor legal entities processing personal data here. Equinor ASA operates equinor.com and is the controller for the processing of personal data generated from using the site, as well as a number of the processes described in clause 2 below. The local Equinor entities are the controller of personal data processed to provide local processes and local websites.

2.1. General

Equinor processes personal data about employees and external consultants working from Equinor premises or in Equinor systems. Equinor also processes personal data about data subjects who are not employed or engaged by Equinor, to whom this privacy policy is primarily aimed. The main categories of personal data processed is described in section 3 below.

Equinor will always process personal data fairly and lawfully, and only for a specified, explicit and legitimate purpose or as required by law. Equinor will therefore only process personal data when such processing is necessary for us to manage our operations, provide services or other legitimate business interests, comply with legal or contractual obligations or after receiving consent (the latter which can be withdrawn at any time). Withdrawing consent will not affect the lawfulness of the processing based on the consent prior to withdrawing it. Further information on specific legal basis is provided below.

Equinor will ensure appropriate information security related to confidentiality, integrity and availability. Personal data will be retained only for the period that is required to serve the legitimate purpose or as required by law. If you want more detailed information on specific retention time, please contact Equinor’s DPO on the address provided in section 5.

Third party service providers may process personal data on behalf of Equinor within various areas. Equinor has implemented adequate safeguards in accordance with applicable law to protect your personal data processed by third party service providers.

Equinor processes personal data about data subjects that are not employed or engaged by Equinor for these various purposes:

2.2. The Norwegian Transparency Act

To ensure compliance with Equinor’s duty of disclosure pursuant to the Transparency Act, Equinor will process personal data relating to those requesting information. The personal data processed will primarily be contact information, as well as other information necessary to carry out Equinor’s processing of the information disclosure. The legal basis is our obligation under the Transparency Act, as well as to safeguard our legitimate interests and establish, enforce or defend legal claims.

3. How to exercise your rights as a data subject