Privacy Policy

1. Data Controller

In compliance with Regulation (EU) 2016/679 of the European Parliament and Council, dated April 27, 2016 (GDPR), and Norwegian data protection legislation, the following information is provided:

2. Data We Collect

Vekts Lab AS collects and processes the following personal data:

Contact Data:

• Full name
• Email address
• Phone number (if provided voluntarily)
• Company and job title (if provided voluntarily)

Navigation Data:

• IP address
• Browser type and version
• Operating system
• Pages visited
• Session duration
• Referrer information
• Cookie identifiers

Interaction Data:

• Form submission content
• Inquiries sent through the website
• Website behavior

3. Purpose and Legal Basis for Processing

Vekts Lab AS processes personal data for the following purposes:

Contract Performance (Art. 6.1.b GDPR):

• Provision of requested services
• Order and payment processing
• Contractual communications

Consent (Art. 6.1.a GDPR):

• Marketing and commercial communications
• Data analysis for service improvement
• Analytical and advertising cookies

Legitimate Interest (Art. 6.1.f GDPR):

• Fraud prevention and security
• Traffic and website usage analysis
• User experience improvement
• Legal obligation compliance

Legal Obligation (Art. 6.1.c GDPR):

• Compliance with accounting laws
• Record retention obligations

4. Data Retention Period

Vekts Lab AS retains personal data for the time necessary to fulfill the specified purposes, in accordance with the following criteria:

• Contact data: During the commercial relationship, plus 5 years after its conclusion for accounting and legal purposes.
• Navigation data: Maximum 13 months from collection, except where longer retention is legally required.
• Marketing data: Until consent is withdrawn or the right to object is exercised.
• Interaction data: Maximum 2 years from collection.

5. Recipients and International Transfers

Personal data may be shared with the following recipients:

• Technical service providers and cloud storage platforms
• Web analytics and marketing platforms
• Payment and financial service providers
• Public authorities when required by law
• Legal, accounting, and tax advisors

International Transfers:

Some of these recipients may be located outside the European Economic Area. In such cases, Vekts Lab AS ensures appropriate safeguards, such as:

• Adequacy decisions from the European Commission
• Standard Contractual Clauses approved by the European Commission
• Explicit consent from the data subject

6. Data Subject Rights under GDPR

Any person whose personal data is processed by Vekts Lab AS has the right to:

Right of Access (Art. 15 GDPR):

Obtain confirmation of whether their data is being processed and access to such data.

Right to Rectification (Art. 16 GDPR):

Request correction of inaccurate or incomplete personal data.

Right to Erasure (Art. 17 GDPR):

Request deletion of personal data when no longer necessary or when consent is withdrawn.

Right to Restrict Processing (Art. 18 GDPR):

Request restriction of processing of personal data in specific circumstances.

Right to Data Portability (Art. 20 GDPR):

Receive personal data in a structured, commonly used, and interoperable format and transmit them to another controller.

Right to Object (Art. 21 GDPR):

Object to processing of personal data for direct marketing purposes and other purposes based on legitimate interest.

Right Not to Be Subject to Automated Decisions (Art. 22 GDPR):

Not be subject to decisions based solely on automated processing.

7. Cookies

The website uses cookies and similar technologies to improve user experience. For more information about the cookies used, please consult our Cookie Policy.

8. Data Security

Vekts Lab AS implements appropriate technical and organizational measures to protect personal data against unauthorized access, alteration, disclosure, or destruction. These measures include:

• Encryption of data in transit and at rest
• Privilege-based access controls
• Regular security audits
• Staff training in data protection
• Procedures for responding to security incidents

However, no method of transmission over the Internet is 100% secure. Although we implement robust measures, we cannot guarantee absolute security.

9. Data Protection Officer Contact

For inquiries about data protection and exercise of rights under GDPR, you may contact:

10. Complaints to Supervisory Authority

You have the right to lodge a complaint with the competent data protection authority. In the European Union, this is the Spanish Data Protection Authority (AEPD). In Norway, it is the Norwegian Data Protection Authority (Datatilsynet).

The contact address for AEPD is: Jorge Juan Street 6, 28001 Madrid, Spain, or www.aepd.es.

The contact for Datatilsynet is: Drammensveien 6, 0271 Oslo, Norway, or www.datatilsynet.no.

Changes to this Policy

Vekts Lab AS reserves the right to update this Privacy Policy at any time. Changes will be communicated by publishing the updated version on the website, with the date of last update clearly indicated. We recommend reviewing this policy periodically.