Shutterstock 505766152

Privacy & Data Processing Policy

This Policy explains how we Process Personal Data. This Policy may be amended or updated from time to time, so please check it regularly for updates.

As a provider of Executive Search, Leadership and Board Services, Amrop’s business has always been based on trust, confidentiality and respect for privacy. More than just compliance, we go beyond the requirements of the law, running our business in accordance with the Values and Principles contained in our Code of Professional Practice.

At Amrop, we take your privacy seriously. We recognize that our role in protecting personal data is critical – on behalf of our clients, our candidates and all members of the Amrop Partnership. We are committed to ensuring that all personal data shared and processed within Amrop is protected, private and secure, thus also providing a framework for compliance with General Data Protection Regulation (EU) 2016/679 (GDPR) and other data protection legislation.

This Policy is issued by Amrop Partnership SC and each of the Controllers listed in the Section entitled “Details of Controllers” below (together, “Amrop”, “we”, “us” and “our”). This Policy is addressed to individuals outside our organisation with whom we interact, including candidates, participants in leadership consulting exercises, clients, visitors to our Sites, users of our Apps, other users of our services, personnel of our clients and our vendors, applicants for employment, and visitors to our premises (together, “you”). Defined terms used in this Policy are explained in the Section entitled “Definitions” below.

This Policy may be amended or updated from time to time to reflect changes in our practices with respect to the Processing of Personal Data, or changes in applicable law. We encourage you to read this Policy carefully, and to regularly check this page to review any changes we might make in accordance with the terms of this Policy.

This Policy was last updated on August 1, 2024.

To read our full global Privacy Policy, click here.

Collection of Personal Data

We collect or obtain Personal Data: when those data are provided to us (e.g., where you contact us); in the course of our relationship with you (e.g., if you provide a CV or are involved in a leadership assessment); when you make Personal Data public (e.g., any information you share publicly on professional networking sites); when you download, install, or use any of our Apps; when you visit our Sites; when you register to use any of our Sites, Apps, or services; or when you interact with any third party content or advertising on a Site or in an App. We may also receive Personal Data about you from third parties (e.g., law enforcement authorities).

Collection of Personal Data: We collect or obtain Personal Data about you from the following sources:

  • Data provided to us: We obtain Personal Data when those data are provided to us (e.g., when you ask to be added to our database of candidates, when you contact us via email or telephone, or by any other means, or when you provide us with your business card, or when you submit a job application).
  • Data we obtain in person: We obtain Personal Data during meetings, at conferences, during visits from sales representatives, or at events we attend.
  • Collaborations: We obtain Personal Data when you collaborate with us in research or in an advisory/consultancy capacity.
  • Relationship data: We collect or obtain Personal Data in the ordinary course of our relationship with you (e.g., we provide a service to you, or to your employer).
  • Data you make public: We collect or obtain Personal Data that you manifestly choose to make public, including via social media (e.g., we may collect information from your social media profile(s)).
  • App data: We collect or obtain Personal Data when you download or use any of our Apps.
  • Site data: We collect or obtain Personal Data when you visit any of our Sites or use any features or resources available on or through a Site.
  • Registration details: We collect or obtain Personal Data when you use, or register to use, any of our Sites, Apps, or services.
  • Content and advertising information: If you interact with any third-party content or advertising on a Site or in an App (including third party plugins and cookies) we receive Personal Data from the relevant third party provider of that content or advertising.
  • Third party information: We collect or obtain Personal Data from third parties who provide it to us (e.g., credit reference agencies; law enforcement authorities; etc.).

Creation of Personal Data

We create Personal Data about you (e.g. records of your interactions with us).

We also create Personal Data about you in certain circumstances, such as details of your past interactions with us. We may also combine Personal Data from any of our Sites, Apps, or services, including where those data are collected from different devices or sources.

Categories of Personal Data we Process

We Process: your personal details (e.g., your name); demographic data (e.g., your age); your contact details (e.g., your address); records of your consents; purchase details; payment details (e.g., your billing address); information about our Sites and Apps (e.g., the type of device you are using); details of your employer (where relevant); information about your interactions with our content or advertising; and any views or opinions you provide to us.

We Process the following categories of Personal Data about you:

  • Personal details: given name(s); preferred name; and photograph.
  • Demographic information: gender; date of birth / age; nationality; salutation; title; and language preferences.
  • Contact details: correspondence address; telephone number; email address; details of Personal Assistants, where applicable; messenger app details; online messaging details; and social media details.
  • Correspondence: records and copies of your correspondence if you contact us.
  • Professional details: your CV; records of your expertise; professional history; practising details and qualification details; information about your experience; participation in meetings, seminars, advisory boards and conferences; information about your professional relationship with other individuals or institutions; language abilities; and other professional skills.
  • Visitor logs: records of visits to our premises.
  • Consent records: records of any consents you have given, together with the date and time, means of consent, and any related information (e.g., the subject matter of the consent).
  • Purchase details: records of service purchases and prices.
  • Payment details: invoice records; payment records; billing address; payment method; bank account number or credit card number; cardholder or accountholder name; card or account security details; card ‘valid from’ date; card expiry date; BACS details; SWIFT details; IBAN details; payment amount; payment date; and records of cheques.
  • Data relating to our Sites and Apps: device type; operating system; browser type; browser settings; IP address; language settings; dates and times of connecting to a Site and usage statistics; location data; and other technical communications information (some of which may constitute Personal Data); and aggregate statistical information.
  • Employer details: where you interact with us in your capacity as an employee of a third party; and the name, address, telephone number and email address of your employer, to the extent relevant.
  • Content and advertising data: records of your interactions with our online advertising and content, records of advertising and content displayed on pages or App screens displayed to you, and any interaction you may have had with such content or advertising (e.g., mouse hover, mouse clicks, any forms you complete in whole or in part) and any touchscreen interactions.
  • Cookie data: we collect information via cookies and similar technologies. Please see our Cookie Policy for further details.
  • Security information: your password(s); login attempt details; security settings; and other security-related information.
  • Views and opinions: responses to surveys, responses to testing, any views and opinions that you choose to send to us, or publicly post about us on social media platforms.

Sensitive Personal Data

We do not seek to collect or otherwise Process Sensitive Personal Data. Where we need to Process Sensitive Personal Data for a legitimate purpose, we do so in accordance with applicable law.

We do not seek to collect or otherwise Process Sensitive Personal Data in the ordinary course of our business. Where it becomes necessary to Process your Sensitive Personal Data for any reason, we rely on one of the following legal bases:

  • Background checks: We, or a third party service provider acting on our behalf, or on behalf of one of our clients, may Process your Sensitive Personal Data where the Processing is required for the purposes of background checks in the context of executive search services;
  • Compliance with applicable law: We may Process your Sensitive Personal Data where the Processing is required or permitted by applicable law (e.g., to comply with our diversity reporting obligations);
  • Detection and prevention of crime: We may Process your Sensitive Personal Data where the Processing is necessary for the detection or prevention of crime (e.g., the prevention of fraud);
  • Establishment, exercise or defence of legal claims: We may Process your Sensitive Personal Data where the Processing is necessary for the establishment, exercise or defence of legal claims; or
  • Consent: We may Process your Sensitive Personal Data where we have, in accordance with applicable law, obtained your express consent prior to Processing your Sensitive Personal Data (this legal basis is only used in relation to Processing that is entirely voluntary – it is not used for Processing that is necessary or obligatory in any way).

If you provide Sensitive Personal Data to us, you must ensure that it is lawful for you to disclose such data to us, and you must ensure a valid legal basis applies to the Processing of those Sensitive Personal Data.

Purposes of Processing and Legal Bases for Processing

We Process Personal Data for the following purposes: providing our Sites, Apps, and services to you; recruitment and job applications; operating our business; communicating with you; managing our IT systems; health and safety; financial management; conducting surveys; ensuring the security of our premises and systems; conducting investigations where necessary; compliance with applicable law; improving our Sites, Apps, and services; and establishment, exercise and defence of legal claims.

The purposes for which we Process the categories of Personal Data identified in the Section entitled “Categories of Personal Data we Process” above, subject to applicable law, and the legal bases on which we perform such Processing, are as follows:

Contact Us

Contact details
We are available for any questions you may have – please use the contact details below.

Contact: Office Manager
Phone number: (+47) 23 33 27 70
E-mail address: kontakt@amrop.no
Address: Fridtjof Nansensvei 17, NO-0369 Oslo

Send an e-mail