Last updated: 22 October 2026

This policy explains what personal data we process when you visit alliansen.no, contact us, apply for work or use the platform app.alliansen.no, and what rights you have. In case of discrepancy, the Norwegian version prevails.

1. Who is responsible

The controller is Alliansen Bemanning og Rekruttering AS, company reg. no. 935 679 249 («Alliansen», «we»).

• Address: Gressrudveien 16, 2010 Strømmen, Norway
• Email: post@alliansen.no
• Phone: +47 453 98 639

We have not appointed a Data Protection Officer. Send privacy questions to post@alliansen.no, marked «Privacy».

2. Who this policy covers

Visitors to alliansen.no; people who contact us, including contact persons at clients; job seekers and candidates; healthcare professionals who take assignments or are employed by us, insofar as processing takes place in the platform; and next of kin/emergency contacts given to us by a candidate or employee.

3. What we process, why, and on what legal basis

a) Website visits. IP address, browser type, time (server logs) and language choice. Purpose: to deliver and secure the website. Basis: legitimate interest (GDPR Art. 6(1)(f)).

b) Contact forms and enquiries. Name, email, phone, organisation (if any) and your message. Purpose: to answer and follow up, including staffing requests from organisations. Basis: legitimate interest (Art. 6(1)(f)), or necessity for a contract with you (Art. 6(1)(b)).

c) Job seeker registration and user account. First name, last name, email, phone, date of birth and gender. Passwords are stored hashed and cannot be read by us. Purpose: to create and run your account and consider you for assignments and positions. Basis: the user account agreement you enter into by accepting the Terms of Service, and steps taken at your request before a possible employment contract (Art. 6(1)(b)).

Why we ask for your date of birth: to tell you apart from others with the same name; to check age limits that apply to an assignment, including the Working Environment Act’s rules on work by persons under 18 (chapter 11) and any client requirements of legal age; and, if you are employed, as part of identification for payroll and reporting. Basis: Art. 6(1)(b) and (f), and (c) where the age limit is set by law. We do not use age to rank candidates.

Why we ask for your gender: For some assignments, especially intimate personal care, the patient, service user or client may have a legitimate need for a carer of a particular gender. We use this information only to find candidates for such assignments, and only where the need is specifically justified, as required by section 9 of the Norwegian Equality and Anti-Discrimination Act. Otherwise, gender plays no part in which assignments you are offered. Basis: our and the client’s legitimate interest in protecting the integrity and dignity of patients and service users (Art. 6(1)(f)).

d) Candidate profile in the platform. Address and county, education and type of education, years of experience, driving licence (yes/no), full-time/part-time preference, whether you are open to permanent recruitment by a client, status (job seeker/employee), the CV and application you upload, and our notes from interviews and assessments. Purpose: matching you with assignments and positions, assessing your qualifications and following you up. Basis: contract (Art. 6(1)(b)) and our legitimate interest in providing responsible staffing and recruitment to the health sector (Art. 6(1)(f)). Notes are limited to what is factual and relevant; you have a right of access to them.

e) Police certificate. Many health and care assignments require a police certificate, under rules in, among others, the Norwegian Health Personnel Act and the Health and Care Services Act. You order it yourself and show it to us. We record only the date of the certificate you showed us. We do not copy the certificate or store its contents. Basis: Art. 6(1)(c) and (b), read with Art. 10 GDPR, section 11 of the Norwegian Personal Data Act and chapter 7 of the Police Databases Act.

f) Health data. We do not collect health data through the website or the platform, and we ask you not to include such data in your CV, application or other fields. If you are employed by us, we process necessary sick-leave and sick-pay data in the payroll system. Basis: Art. 9(2)(b) GDPR (employment-law obligations), section 6 of the Personal Data Act and chapter 8 of the National Insurance Act, together with Art. 6(1)(c).

g) Next of kin / emergency contact. Name, relationship and phone number. Purpose: to notify someone if something happens to you on an assignment. Basis: legitimate interest (Art. 6(1)(f)). Please only give us details of a person who has agreed to this, and feel free to show them this policy. We use the data for nothing else.

h) Assignments, shifts, timesheets and payroll (when you work for us). Shifts, timesheets, pay and deductions, national identity number, bank account, tax card data and employment details. Purpose: to perform the employment contract, pay wages, report to authorities and invoice clients. Basis: Art. 6(1)(b) and (c) (including the Norwegian A-reporting Act, Tax Administration Act, Bookkeeping Act and Working Environment Act section 10-7). The national identity number is processed because it is necessary for secure identification (Personal Data Act section 12).

i) Messages from the platform. Shift and assignment offers, reminders and account notices are sent under the user account agreement (Art. 6(1)(b)). Newsletters or other marketing are sent only with your consent (Art. 6(1)(a); Norwegian Marketing Control Act section 15). You may withdraw consent at any time.

j) Security and logs. Login times, IP address and change logs, to protect the account and system and detect misuse. Basis: legitimate interest (Art. 6(1)(f)) and Art. 32.

No decisions about you are made solely by automated means. Whether you get an assignment or position is decided by a person at Alliansen.

4. Do you have to provide the data?

Name, email and phone are required to create an account. When you take assignments or are employed, the law requires certain data (e.g. national identity number and bank account), and clients usually require a police certificate. Other profile data are voluntary but help us find suitable work for you.

5. Who we share data with

Clients: When we propose you for an assignment or position, we share relevant data (e.g. name, qualifications, CV and confirmation that a police certificate has been provided) with the hiring organisation, such as hospitals, nursing homes, municipalities and private health and care providers. The client becomes responsible for the data it receives. We share only what the assignment requires.

Authorities: the Norwegian Tax Administration and NAV (A-reporting), and other authorities where required by law.

Auditor and accounting: to the extent necessary.

Processors acting on our behalf: They may only use the data on our instructions and are to be bound by a data processing agreement with us (GDPR Art. 28).

Provider	Role	Location
DigitalOcean	Hosting for the platform	See section 6
ProISP	Web hosting for alliansen.no	Norway
Microsoft (Microsoft 365)	Email and documents	See section 6
Email/SMS delivery provider	Email/SMS delivery from the platform	See section 6
Tripletex	Payroll and accounting	Norway

We never sell personal data.

6. Transfers outside the EU/EEA

As a rule, data are stored and processed in the EU/EEA. Where a provider is established in, or can access data from, a country outside the EEA (e.g. the USA), we ensure a valid transfer mechanism under GDPR Chapter V: either certification under the EU–US Data Privacy Framework (Art. 45) or the EU Standard Contractual Clauses (Art. 46(2)(c)) with supplementary measures where needed. Contact us for a copy.

7. Security

Access is role-based and limited to those who need it. Traffic is encrypted (HTTPS), and passwords are hashed.

8. Retention

We keep personal data only for as long as necessary for the purpose for which it was collected, or for as long as the law requires.

• Your candidate profile is kept while your account is active. Profiles that have not been used for a long time are deleted after prior notice to you.
• Enquiries by form, email or phone are kept for as long as needed to follow up the matter.
• The police certificate date is deleted with the profile, or when it is no longer needed after employment ends.
• Personnel records after employment are kept for as long as necessary to document claims, normally up to 3 years (Limitation Act).
• Payroll and accounting records are kept for as long as the Bookkeeping Act requires.

When you delete your account, the profile is deleted, except data we are legally required to keep longer, such as payroll data.

9. Your rights

You have the right to access (Art. 15), rectification (Art. 16), erasure (Art. 17), restriction (Art. 18), data portability (Art. 20), to object to processing based on legitimate interest (Art. 21), and to withdraw consent at any time (Art. 7(3)). Contact post@alliansen.no. We reply within one month (Art. 12(3)) and may ask you to verify your identity. Much can also be changed or deleted directly in the platform.

10. Complaints

Please contact us first. You also have the right to lodge a complaint with the Norwegian Data Protection Authority (Datatilsynet), P.O. Box 458 Sentrum, NO-0105 Oslo, www.datatilsynet.no, or with the supervisory authority in your EEA country of residence (Art. 77).

11. Cookies

alliansen.no uses only cookies that are strictly necessary for the website to work, including remembering your language choice. app.alliansen.no uses necessary cookies or similar storage to keep you logged in. Necessary cookies do not require consent (Norwegian Electronic Communications Act section 3-15). We use no analytics, tracking or advertising cookies; if we introduce them, we will ask for consent first.

The website loads fonts from Google. This sends your IP address to Google LLC (USA), which is certified under the EU–US Data Privacy Framework.

12. Changes

We update this policy as needed. Registered users are notified of material changes by email or in the platform. The date at the top shows the current version.