Last updated: 1st January 2026
Introduction
zetanovaes AS ("we", "us", or "our") is committed to protecting your privacy and ensuring the security of your personal information. This Privacy Policy explains how we collect, use, and safeguard the data we collect from visitors to our website and users of our services.
As the data controller, zetanovaes is responsible for the processing of your personal data in accordance with the General Data Protection Regulation (GDPR) and Norwegian data protection laws.
Data Controller Information
The data controller responsible for your personal information is:
Data Collection
We collect personal data through various means when you interact with our website and services. The types of data we collect include:
Information You Provide Directly
- Contact information (name, email address, phone number, company name)
- Communication preferences and enquiry details
- Information provided through contact forms, email correspondence, or phone calls
- Professional information relevant to our business services
Information Collected Automatically
- Website usage data (pages visited, time spent, click patterns)
- Technical information (IP address, browser type, device information)
- Cookie data and tracking information (with your consent)
- Referral sources and website navigation patterns
How We Use Your Information
We use the personal data we collect for legitimate business purposes, including how we use your information to provide and improve our services:
Service Delivery
- Responding to your enquiries and providing requested information
- Delivering our strategic analytics consulting services
- Managing client relationships and project communications
- Providing technical support and customer service
Business Operations
- Processing and fulfilling service agreements
- Conducting market research and business development
- Improving our website functionality and user experience
- Complying with legal and regulatory requirements
Marketing and Communications
- Sending relevant business information and service updates (with consent)
- Providing industry insights and thought leadership content
- Inviting you to relevant business events or webinars
- Personalising your experience on our website
Cookies and Tracking Technologies
We may use cookies and tracking technologies for analytics, advertising, and remarketing purposes, including Google Ads. These technologies help us measure campaign effectiveness, deliver relevant advertisements, and improve our services. You can manage your cookie preferences at any time through our cookie consent banner.
For detailed information about the cookies we use, please refer to our Cookie Policy.
Legal Basis for Processing
Under GDPR, we process your personal data based on the following legal grounds:
- Consent: Where you have given explicit consent for specific processing activities
- Legitimate Interest: For business development, service improvement, and marketing activities
- Contractual Necessity: To fulfil our obligations under service agreements
- Legal Obligation: To comply with applicable laws and regulations
Data Sharing and Disclosure
We do not sell or rent your personal information to third parties. We may share your data in the following circumstances:
- With trusted service providers who assist in delivering our services (under strict confidentiality agreements)
- When required by law, regulation, or legal process
- To protect our rights, property, or safety, or that of our clients
- In connection with business transfers or mergers (with appropriate safeguards)
International Data Transfers
Your personal data may be transferred to and processed in countries outside the European Economic Area (EEA). When we transfer data internationally, we ensure appropriate safeguards are in place, including:
- Standard Contractual Clauses approved by the European Commission
- Adequacy decisions recognising equivalent data protection standards
- Binding Corporate Rules for intra-group transfers
Data Retention
We retain your personal data only for as long as necessary to fulfil the purposes for which it was collected and to comply with legal obligations. Our data retention periods are:
- Contact enquiries: 3 years from last contact
- Client data: 7 years after contract termination (for legal compliance)
- Marketing data: Until consent is withdrawn or 2 years of inactivity
- Website analytics: 26 months (Google Analytics default)
Your Rights
Under GDPR and Norwegian data protection law, you have the following rights regarding your personal data:
- Right of Access: Request information about the personal data we hold about you
- Right to Rectification: Request correction of inaccurate or incomplete data
- Right to Erasure: Request deletion of your personal data in certain circumstances
- Right to Restrict Processing: Request limitation of how we process your data
- Right to Data Portability: Request transfer of your data to another organisation
- Right to Object: Object to processing based on legitimate interests or for marketing purposes
- Right to Withdraw Consent: Withdraw consent for processing where consent is the legal basis
Data Security
We implement appropriate technical and organisational measures to protect your personal data against unauthorised access, alteration, disclosure, or destruction. Our security measures include:
- Encryption of data in transit and at rest
- Regular security assessments and penetration testing
- Access controls and staff training on data protection
- Secure backup and disaster recovery procedures
Children's Privacy
Our services are not directed to individuals under 16 years of age. We do not knowingly collect personal information from children under 16. If we become aware that we have collected personal data from a child under 16, we will take steps to delete such information promptly.
Changes to This Privacy Policy
We may update this Privacy Policy from time to time to reflect changes in our practices or legal requirements. We will notify you of any material changes by posting the updated policy on our website and updating the "Last updated" date. We encourage you to review this policy periodically.
Contact Us
If you have questions about this Privacy Policy, wish to exercise your rights, or need to contact us regarding data protection matters, please reach out to us:
Supervisory Authority
You have the right to lodge a complaint with the Norwegian Data Protection Authority (Datatilsynet) if you believe your personal data has been processed in violation of applicable data protection laws.
- Website: www.datatilsynet.no
- Email: postkasse@datatilsynet.no
- Phone: +47 22 39 69 00