Privacy policy

The Helly Hansen Group is committed to your right to privacy. This Privacy Notice explains how we process information about you ("personal data") collected though our websites, microsites, or mobile sites that expressly adopt, display or link to this Privacy Notice (collectively, the “Website”) or that Helly Hansen collects from you when you purchase Helly Hansen products (both online and physical purchases in retail stores). It also applies to data processed via our “Social Media Pages” which are the official social media pages we operate on Facebook, Instagram, LinkedIn, Youtube.

Please note that this Privacy Notice does not apply to our recruitment activities. If you apply for a job using the ’Careers’ section available on our Website, the Candidate Privacy Notice will be applicable.

Data Controller

For data processed on the Website, Helly Hansen AS is the controller of your personal data. We are based at Munkedamsveien 35, 0250 Oslo, Norway.

For data processed in connection with your purchases, the controller is the local Helly Hansen entity with which the order/purchase is made, as specified in our Terms and Conditions.

PERSONAL DATA WE COLLECT ABOUT YOU

We may collect the information described below directly from you, from third parties we partner with, or through cookies or other automated means.

The data is collected directly from you whenever you: visit our website; contact us with questions or comments; engage our services; upload content to our website or Social Media Pages; or fill out any forms on our website or Social Media Pages.

Information that may be provided directly by you includes:

Contact Data such as name, gender, shipping address, email address, and phone number.
Data Regarding an Order such as purchasing history.
Payment Data such as bank details, credit card number, and billing address.
Marketing Data such as marketing and shopping preferences, date of birth, preferred sport activities or hobbies, and survey responses.
Request and Claim Data such as details about returns or exchanges.
Emails or Contact Forms such as electronic communications that you have sent us.
Product Reviews such as the personal data you may share while providing a product review.
Proof of Eligibility for PRO Accounts such as certifications, work IDs, relevant contracts.

Other sources from which we collect data about you are as follows:

Your device or browser: Certain information is automatically collected from your device or browser and analysed when you visit our Website, interact with our Social Media Pages or online advertising, or open our emails.
Third Parties: We work with third parties who provide services to us such as analytics or advertising companies. Your information may be collected and processed independently in accordance with the third party’s own privacy notices. These third parties share information they have collected with us. We may combine this information with any information we collect.
Social Media Platforms: Social media platforms share information, which is typically aggregated and doesn’t include personal information, with us. You can learn more about how social media platforms collect and use your information by reviewing their privacy policies and settings.
Cookies: We use cookies (small data files stored on your device or browser) and other similar technologies to automatically collect information when you visit our website or interact with our emails. Through the use of cookies, we may link information about your interactions with our website or emails over time. Any information collected by us or by third parties through the use of cookies or similar technologies may be linked with other information we collect about you. For more information, please find our cookie policy here.

Information that may be collected about you from the above sources include:

Technical Data such as device type, web browser, IP address, accessibility options.
Usage Data such as account log ins, site navigation, clicks and browsing time.
Location Data when using the website.
Preference Data such as products and activities you have indicated an interest in, preferred language.
Social Media/Third Party Data such as your social media handle and activity on Social Media Pages.

how we process your personal data

To manage and fulfil your orders both online and offline and including the physical purchase of goods in Helly Hansen retail stores

To provide access to Helly Hansen products, services, and special offers

To provide access to the website and enhance user experience

To process and prize draws or competitions you may enter

To provide customer care, share your product reviews and manage potential claims

To provide you with a chatbot which assists us with customer care and customer support

To manage your account should you create one, including PRO accounts

For bookkeeping purposes

For analytics (market customer and product analysis)

For marketing purposes

On a case-by-case basis, we may also use your personal data for subsequent purposes that are compatible with the purpose that the data originally was collected for such as knowledge management, handling of potential claims and proceedings and handling of requests from supervisory authorities.

If you fail to provide personal data when required:

to offer you some of the services available on the Website, you will not be able to access all the available services;
to enter into a contract, we will not be able to conclude the respective contract with you;
by a statutory or contractual requirement, you will be liable as provided in the statute/contract.

How We Share or Disclose Your Personal Data

Helly Hansen is a global company, and we may disclose your data to different legal entities both within our Group and to third parties.

Our Affiliated Companies: We may share your personal data with other companies in the Helly Hansen Group within the scope of this Privacy Notice.
Our Parent Company: We may share your personal data with our owners the Canadian Tire Corporation, Limited (CTC) within the scope of this Privacy Notice.
Service Providers: We partner with third parties to assist with many aspects of our business, including fulfilling orders, advertising, analyzing your interests and activity on our Website, and helping us communicate with customers. These third parties may provide services related to any of the purposes described in How We Process Your Personal Data, and we may share with them any types of information described in Personal Data We Collect About You. We may also receive information collected by these third parties and combine it with the information we have collected. Your information may also be collected and processed by third parties, such as the payment providers you select, who will process your information independently in accordance with their own privacy notices.
Marketing Providers: We partner with third parties to assist with the advertising and marketing of our business. We may share with them the types of information described in Personal Data We Collect About You. We may also receive information collected by these third parties and combine it with the information we have collected.
Parties to a Business Transaction: If we are ever merged with or acquired by another company or are involved in a corporate reorganization or other change in corporate control, your information could be shared with that business entity.
Disclosures Required by Law: We may also share personal data where required by law. This may include disclosing personal data to public authorities, such as tax authorities, or disclosing personal data in connection with legal proceedings.

As the recipients mentioned above may be established anywhere in the world, the personal data may be transferred globally. Where we transfer your personal data across national boundaries, we will protect your information by ensuring that those transfers are made in compliance with applicable data protection laws. If data originating from the EEA is transferred to countries outside the EEA, we will adopt appropriate safeguards to protect the privacy by means of agreements (Standard Contractual Clauses), supplementary measures for international transfers or by transferring it to a country that offers an adequate level of protection. You may receive a copy of the relevant parts of the agreements by contacting us.

Categories of Personal Data Disclosed for a Business Purpose

We share Personal Data about you with service providers and third parties for business purposes, such as operational purposes and other purposes related to providing you with the services you seek from us. For more information about the business purposes for which we disclose Personal Data, see the How We Process Your Personal Data Section and the Personal Data We Collect About You Section for what types of information may be shared.

Third Party Links

Our website may contain links to third-party online websites/apps. Such third parties have their own policies and notices that govern their collection, use, and disclosure of information. We suggest that you read their privacy notices to learn about their practices.

Social media provides tools and links that we may include on our website. If you chose to use such tools or links, that social media platform may collect information from your visit on our website. We also have Social Media Pages, where we provide information about our products and interact with the users. On such Social Media Pages, we may receive anonymised insight, such as statistics about age, gender, and location of our users. We will also receive information that you decide to share with us, such as chat, comments and likes.

Your experience on the social media sites will be governed by the privacy and other policies and notices of those sites. The privacy settings you have chosen on those websites will determine the degree to which your information is made public. We encourage you to choose your privacy settings on those websites accordingly. As we are joint controllers with social media platforms for data processed from your use of our Social Media Pages or links on our site, and for aggregated insight that we get from your use of our Social Media Pages, you may also contact us if you would like more information, or if you want to exercise your privacy rights. However, please note that we may not be able to respond to all requests, and that we may have to refer you to the relevant social media platform for further information.

HOW LONG WE STORE YOUR PERSONAL DATA

We will retain your personal data for as long as necessary for the purposes for which we collect it. The precise period will depend on the purpose for which we hold your information, and these are the criteria that we use to determine when we will delete your data:

We retain data to the extent required by law (such as tax/bookkeeping laws);
We retain data such as Contact Data, Order Data, Payment Data, Request and Claim Data, and Communication Data to the extent relevant for limitation periods for potential claims (typically two to five years after date of a purchase);
We retain data such as Contact Data, Order Data, Marketing Data, Location Data and Preference Data as long as you have consented to receive marketing communication from us;
We retain the Proof of Eligibility for PRO Accounts for one year;
We retain Product Review Data as long as a product is available on our website or if you request to delete your review before that;
We retain data collected through cookies as mentioned in our cookie policy;
We endeavour to delete other data two years after your last interaction with us (such as last purchase or last communication) or directly after you have deleted your profile on our website, however we keep the invoices data as per statutory requirements.

Your Privacy Choices

You can control the information we collect and use in the following ways:

Location Information: You can disable location-based services on your mobile device or web browser by adjusting the settings on your device or browser. This will prevent our Website from accessing your location information. Note that some services may not be available if you disable location-based services.
Marketing Emails: You may opt-out of our marketing emails by following the instructions listed in any email communications that you receive or by contacting us using the contact details provided under the Contact Information Section, below.
Online Advertising: For information about opting out of third party advertising, visit: NAI Opt-Out or DAA. You will leave this Website for a separately managed online site where you can specify your preferences. We may use more than one third party company for placing this advertising, which would require you to opt out of each company.

If you are a resident of the EEA, UK, California, Virginia, Colorado, Connecticut, or Utah, you can learn more about your privacy rights below.

YOUR PRIVACY RIGHTS

EEA and UK privacy rights

For purposes of this section, the term “Personal Data” has the meaning given under applicable law. Within the conditions/limitations set out in applicable law, you have the following privacy rights:

Right to information. You have the right to obtain further information on our use of your Personal Data.
Right of access. You have the right to receive a copy of your Personal Data.
Right to rectification. You have the right to ask us to correct your Personal Data if it is incorrect or incomplete, such as by changing your details on your account.
Right to be forgotten (deletion). You have the right to request the erasure of your Personal Data if we no longer need it.
Right to restrict processing of Personal Data. You have the right to request that we suspend our processing of your Personal Data.
Right to data portability. You have the right to obtain Personal Data that you have provided to us in a format that enables you to transfer that Personal Data to another organization. You may also have the right to have your Personal Data transferred directly from us to such organization.
Right to object to processing of Personal Data. You have the right to ask us to stop particular processing of your Personal Data.
Right to prevent automated decision making. You have the right not to be subject to automated decision making (such as automated credit scoring).
Right to withdraw consent. If you have given your consent to our processing of Personal Data, you are free to withdraw the consent at any time.
File a complaint with relevant data protection authority.
Other rights. You may also be entitled to additional rights and remedies provided by your local applicable law.

U.S. State Privacy Rights

Residents of California, Virginia, Connecticut, Colorado, and Utah have certain rights concerning the processing and use of their Personal Data. The rights described herein are subject to exemptions under applicable law. For purposes of this section, the term “Personal Data” includes both “Personal Information” and “Personal Data” as defined by applicable law.

If your Personal Data is subject to a privacy law in your state, you may have certain privacy rights with regard to that information. You may have the right to:

Know, access, and confirm your Personal Data.
Delete the Personal Data we have about you, subject to exceptions under applicable law.
Correct inaccuracies in your Personal Data.
Obtain your Personal Data in a portable and readily usable format.
Opt-out of the use or processing of your Personal Data for profiling or targeted advertising.
Opt-out of the sale of your Personal Data.

Under certain state laws, you may also have the right not to receive discriminatory treatment for the exercise of any of these privacy rights. We will not discriminate against you because you have exercised any of your rights.

Certain state laws may also provide you the right to appeal our decisions regarding your rights requests if we do not respond to your requests or do not take action regarding your requests. Additionally, if you are a resident of the state of California, you may have a right to pursue legal action for improper handling of your Personal Data.

“Do Not Sell” Rights; Sharing for Cross-Context Behavioral Advertising, Profiling, or Targeted Advertising

We may disclose your Personal Data for the following purposes, which are not a sale: (i) for reasons mentioned above; (ii) if you direct us to share Personal Data; (iii) to comply with your requests under applicable law; and (iv) as otherwise required or permitted by applicable law.

We do not sell Personal Data or share Personal Data about you for purposes of cross-context behavioral advertising, profiling, or targeted advertising.

Deletion Rights

You may request that we delete your Personal Data that we have collected directly from you. Under applicable law, we may decline to delete your Personal Data under certain circumstances, for example, if we need the Personal Data to complete transactions or provide services you have requested or that are reasonably anticipated, for security purposes, for internal business purposes (including maintaining business records), to comply with law, or to exercise or defend legal claims. Note also that we are not required to delete your Personal Data that we did not collect directly from you. We require a reasonable or high degree of certainty that the requester is the consumer for which a deletion request is applicable, depending on the sensitivity of the Personal Data.

California Consumer Privacy Rights Requests from January 1, 2022 – December 31, 2022:

Type of Request	Total Requests Received	Requests Denied	Requests Complied With	Average Days to Respond
Request to Access Data	0	N/A	N/A	N/A
Request to Delete Data	0	N/A	N/A	N/A
Request to Opt-Out of “Sale”	0	N/A	N/A	N/A

Additional California Privacy Rights

We do not share Personal Data as defined by California Civil Code Section 1798.83 (“Shine the Light Law”) with third parties for their direct marketing purposes absent your consent. If you are a California resident, you may request information about our compliance with the Shine the Light Law by emailing us at [email protected] with “Shine the Light Request” in the subject line. Any such request must include “California Privacy Rights Request” in the first line of the description and include your name, street address, city, state, and ZIP code. Please note that we are only required to respond to one request per individual each year, and we are not required to respond to requests made by means other than through this mail address.

Sensitive Data of Virginia, Colorado, or Connecticut Residents

If you are a resident of Virginia, Colorado, or Connecticut, we will not process your Sensitive Data (as that term is defined under the Virginia Consumer Data Protection Act; the Colorado Privacy Act; and Connecticut’s Act Concerning Personal Data Privacy and Online Monitoring) without your prior consent.

How to Submit a Request or Exercise rights

If you wish to exercise the rights listed above, and are a resident of a state that provides such privacy rights, you may submit a request by:

emailing: [email protected],

If you choose to submit your request via email, you must include “Privacy Rights Request” in the subject line about you and in any case you submit your request you may need to undergo identity verification process. During this process we may request additional information from you to verify your identity or understand the scope of your request, although you will not be required to create an account with us to submit a request or have it fulfilled. We will require you to provide, at a minimum, your email address, full name, billing address (with zip code) and phone number, and for access requests may require (if you have made a purchase with us) that you identify some items ordered.

Security

We employ physical, technical, and administrative procedures to safeguard the personal data we collect online. While we use these security measures on our website, you should be aware that 100% security is not always possible.

CHILDREN

The services provided by Helly Hansen Group are not intended for the use of individuals under the age of 16, and we do not knowingly collect information online from individuals under the age of 16. If we learn that we have collected the personal data of a child under 16, we will make reasonable efforts to delete that information from our records. To request deletion of personal data relating to a child under 16, please email us at [email protected].

CONTACT INFORMATION

You can contact us for any queries about processing of your personal data in our capacity as the controller:

by email at: [email protected];
by post addressed to our Norwegian office.

CHANGES TO THIS PRIVACY NOTICE

If we make any changes to this Privacy Notice that will affect your privacy, we will notify you by appropriate means, such as by email or by publishing updates on our Website. You will always find the latest version of this Privacy Notice on our Website.

Version 3.0

Last updated on 14 November 2024.