Privacy Policy

FjordKonsult AS (“we”, “us”, “our”) values your privacy and is committed to protecting your personal data. This privacy policy explains how we collect, use, disclose, store, and protect personal data when you interact with us, use our services, visit our website, or otherwise communicate with us.

1. Introduction and Company Information

This privacy policy applies to the processing of personal data by FjordKonsult AS in connection with our business activities. We are a business consulting company and may process personal data relating to clients, prospective clients, business contacts, suppliers, website visitors, and other individuals who communicate with us.

Data controller: FjordKonsult AS

Address: Karl Johans gate 12, 0154 Oslo, Norway

Email: [email protected]

Phone: +47 22 45 78 31

2. Data Collection and Processing

We may collect and process the following categories of personal data, depending on your relationship with us and the services involved:

• Identification data: name, job title, employer, and contact details.
• Contact data: email address, telephone number, postal address, and other communication details.
• Business and contractual data: information relating to inquiries, proposals, contracts, projects, invoices, and service delivery.
• Communication data: correspondence, meeting notes, feedback, and support requests.
• Technical data: IP address, browser type, device information, log data, and usage data collected through our website or digital services.
• Financial and accounting data: payment information, billing records, and transaction details where relevant.
• Other data you provide: any information you voluntarily submit to us in forms, emails, calls, or meetings.

We generally collect personal data directly from you, from your employer or business partner, from publicly available sources, or from third parties such as service providers, where permitted by law.

3. Purpose of Data Processing

We process personal data for the following purposes:

• to provide consulting and related business services;
• to manage client and supplier relationships;
• to respond to inquiries and communicate with you;
• to prepare offers, enter into and perform contracts, and administer business arrangements;
• to issue invoices, process payments, and maintain accounting records;
• to improve our services, website, and customer experience;
• to ensure security, prevent misuse, and protect our legal rights;
• to comply with legal obligations, including tax, accounting, and record-keeping requirements;
• to send relevant business communications, where permitted;
• to manage disputes, claims, and legal proceedings.

4. Legal Basis for Processing

We process personal data only where we have a valid legal basis. Depending on the context, our processing may be based on one or more of the following:

• Performance of a contract: when processing is necessary to enter into or perform a contract with you or your organization.
• Legitimate interests: when processing is necessary for our legitimate business interests, such as managing client relationships, improving services, securing systems, and maintaining business operations, provided that your interests and rights do not override those interests.
• Consent: where you have given us clear consent for a specific purpose, such as certain marketing communications or optional cookies, where applicable.
• Legal obligation: when processing is necessary to comply with applicable legal and regulatory obligations.

5. Data Sharing and Third Parties

We may share personal data with third parties where necessary and lawful, including:

• IT and cloud service providers;
• accounting, auditing, legal, and professional advisers;
• payment processors and financial institutions;
• business partners and subcontractors involved in service delivery;
• public authorities, regulators, courts, or law enforcement where required by law;
• other third parties with your consent or at your direction.

Where third parties process personal data on our behalf, they do so under appropriate contractual obligations and only in accordance with our instructions and applicable law.

6. Data Transfer to Third Countries

In some cases, personal data may be transferred to or accessed from countries outside the European Economic Area (EEA). If such transfers occur, we will take appropriate safeguards to ensure an adequate level of protection, such as:

• using approved standard contractual clauses;
• relying on adequacy decisions where available;
• implementing additional technical and organizational safeguards where necessary.

We will only transfer personal data to third countries where permitted by applicable law and where appropriate protection measures are in place.

7. Storage Duration

We retain personal data only for as long as necessary for the purposes for which it was collected, or as required by law. Retention periods may vary depending on the type of data and the legal or business context.

• Contractual and client data: retained for the duration of the relationship and for a reasonable period thereafter.
• Accounting and tax records: retained for the period required by applicable law.
• Communication records: retained as needed to manage inquiries, disputes, and business continuity.
• Marketing-related data: retained until you withdraw consent or object, where applicable.

When personal data is no longer needed, we will delete, anonymize, or securely archive it in accordance with our retention procedures.

8. User Rights

Subject to applicable law, you may have the following rights regarding your personal data:

• Access: the right to request confirmation of whether we process your personal data and to receive a copy of that data.
• Rectification: the right to request correction of inaccurate or incomplete personal data.
• Erasure: the right to request deletion of your personal data in certain circumstances.
• Restriction: the right to request that we limit the processing of your personal data in certain cases.
• Data portability: the right to receive certain personal data in a structured, commonly used, machine-readable format and, where technically feasible, to have it transmitted to another controller.
• Objection: the right to object to processing based on legitimate interests and, where applicable, to direct marketing.

To exercise your rights, please contact us using the details provided below. We may ask for additional information to verify your identity before responding to your request.

9. Withdrawal of Consent

Where we rely on your consent to process personal data, you have the right to withdraw that consent at any time. Withdrawal of consent will not affect the lawfulness of processing carried out before the withdrawal.

If you withdraw consent, we may no longer be able to provide certain services or communications that depend on that consent.

10. Right to Complain

If you believe that our processing of your personal data does not comply with applicable law, you have the right to lodge a complaint with the relevant supervisory authority. In Norway, this is the Norwegian Data Protection Authority (Datatilsynet).

We encourage you to contact us first so that we can try to resolve your concerns directly and promptly.

11. Data Security

We implement appropriate technical and organizational measures to protect personal data against unauthorized access, loss, misuse, alteration, or disclosure. These measures may include access controls, encryption, secure storage, staff confidentiality obligations, and regular review of our security practices.

While we take reasonable steps to protect personal data, no method of transmission or storage is completely secure. We therefore cannot guarantee absolute security.

12. Contact Information

If you have questions about this privacy policy or our processing of personal data, or if you wish to exercise your rights, you may contact us at:

FjordKonsult AS
Karl Johans gate 12
0154 Oslo
Norway

Email: [email protected]
Phone: +47 22 45 78 31

13. Changes to Privacy Policy

We may update this privacy policy from time to time to reflect changes in our practices, legal requirements, or operational needs. Any updated version will be made available through our usual communication channels or on our website, where applicable.

We encourage you to review this privacy policy periodically to stay informed about how we process personal data.

Last updated: April 2026