Privacy Policy

This Privacy Policy explains how Sfera AS (“Sfera”, “we”, “us”) processes personal data in accordance with the General Data Protection Regulation (GDPR) and Norwegian data protection legislation.

Company: Sfera AS
Organisation number: 923 166 920
Registered address: Fiskarstrand, Norway
Contact (privacy matters): info@sfera.no

Last updated: 1 January

1. Data controller

Sfera AS is the data controller for the processing of personal data carried out through this website.

This means that Sfera AS determines the purposes and means of processing your personal data in accordance with applicable data protection law.

2. What personal data we process

2.1 Personal data collected automatically

When you visit our website, we automatically process certain technical information, including:

• IP address

• browser type and version

• device type and operating system

• date and time of access

• pages visited and interaction patterns

• technical cookie identifiers

This information is necessary to ensure website security, functionality, and basic statistical insight.

2.2 Personal data you provide voluntarily

When you contact us via forms, email, or other communication channels, we may process:

• name

• company name

• email address

• telephone number

• content of your inquiry and any attachments

We do not require sensitive personal data and ask that such data is not submitted through the website.

3. Purpose of processing and legal basis

We process personal data only when there is a lawful basis under GDPR.

PurposeLegal basisOperating and securing the websiteGDPR Art. 6(1)(f) – legitimate interestResponding to inquiries and communicationGDPR Art. 6(1)(b) and (f)Statistical analysis and website improvementGDPR Art. 6(1)(f)Use of optional cookiesGDPR Art. 6(1)(a) – consentCompliance with legal obligationsGDPR Art. 6(1)(c)

Our legitimate interests consist of operating a secure, functional website and responding to business-related inquiries.

4. Cookies and similar technologies

We use cookies to ensure basic website functionality and to collect anonymous usage statistics.

Cookies are divided into:

• Necessary cookies – required for technical operation and security

• Optional cookies – such as analytics cookies, used only if you give consent

You may withdraw or adjust consent for optional cookies at any time through cookie settings.

Necessary cookies are used without consent, as permitted under Norwegian law and GDPR.

5. Storage and retention of personal data

Personal data is stored only for as long as necessary to fulfill the purpose for which it was collected.

• Inquiry-related data is retained for as long as necessary to handle communication and potential cooperation

• Technical logs are retained for limited periods for security and troubleshooting

• Data is deleted or anonymized when no longer required

We do not store personal data longer than necessary.

6. Sharing of personal data

We do not sell or disclose personal data to third parties for marketing purposes.

Personal data may be shared with:

• IT and hosting service providers acting as data processors

• public authorities where disclosure is required by law

All data processors act under written agreements and process data only on our instructions.

7. Transfer of data outside the EU/EEA

If personal data is transferred outside the EU/EEA, such transfers are carried out only where appropriate safeguards are in place, such as EU Standard Contractual Clauses, in accordance with GDPR Chapter V.

8. Your rights

Under GDPR, you have the right to:

• receive information about how your personal data is processed

• access your personal data

• request correction of inaccurate or incomplete data

• request deletion of personal data

• request restriction of processing

• object to processing based on legitimate interest

• request data portability

• withdraw consent at any time, where processing is based on consent

Requests can be sent to info@sfera.no.

You also have the right to lodge a complaint with Datatilsynet
(www.datatilsynet.no).

9. Information security

We implement appropriate technical and organisational measures to protect personal data against unauthorized access, loss, alteration, or misuse.

Despite these measures, no electronic transmission or storage solution can be guaranteed to be completely secure.

10. External websites

Our website may contain links to external websites.
Sfera AS is not responsible for the privacy practices or content of such websites.

We encourage users to review the privacy policies of external sites they visit.

11. Legal obligations and disclosure

Personal data may be disclosed where required by law, court order, or public authority, or where necessary to protect legitimate interests, rights, or safety.

12. Changes to this Privacy Policy

We may update this Privacy Policy when necessary.
The current version will always be available on this website, with the date of last update clearly stated.

13. Contact information

For questions regarding this Privacy Policy or our processing of personal data, please contact:

📧 info@sfera.no