Privacy Policy

Last updated: September 6, 2026

1. Who is responsible for the personal data?

KapitalKontroll AS is the data controller for personal data we collect when you visit kapitalkontroll .no, contact us, book a demonstration, register for an event or submit a form on the website.

Contact information:

KapitalKontroll AS
Organization number: 920 854 028
Hovfaret 10
0275 Oslo
E-mail: admin@ kapitalkontroll .no
Phone: 22 12 00 77

Questions about privacy, access, correction or deletion can be sent to kapitalkontroll .

When our customers use KapitalKontroll's systems to process information about their own customers, residents or debtors, the responsibility is regulated by the agreement and the data processing agreement between KapitalKontroll and the individual customer.

This privacy statement primarily applies to the processing of personal data that occurs through the public website.

2. What personal data do we process?

What information we process depends on how you use the website.

When you contact us or book a demonstration

We can treat:

• Name

• Employer or business

• Organization number

• Position or role

• Email address

• Telephone number

• Information you write yourself in the message or form

• Time and status of an agreed meeting

You should not send sensitive personal information, personal identification numbers, account numbers or information about specific debtors through the website's open forms.

When you visit the website

Depending on the choices you make in the consent solution, we may process:

• IP address and approximate geographic area

• Browser, operating system and device type

• What pages you visit

• Time and length of visit

• How to navigate the website

• What website or campaign you came from

• Information about which business your network may belong to

• Language selection and cookie settings

When you register for courses, events or information

We can treat:

• Name

• Contact information

• Business

• Position or role

• Registration information

• Other practical information necessary for the event

3. Why do we process the information?

Respond to inquiries

We use the information to respond to requests and follow up with people who contact us.

The basis for processing is necessary measures prior to a possible agreement, or our legitimate interest in following up on relevant inquiries.

Conduct demonstrations and meetings

We use the information to arrange, prepare and conduct meetings and product demonstrations.

The basis for processing is necessary measures before a possible agreement.

Manage customer and business relationships

We use contact and agreement information for customer administration, communication, invoicing and follow-up.

The basis for processing is fulfillment of the agreement, legal obligations and our legitimate interest in proper customer administration.

Manage courses and events

We use the information for registration, implementation and practical communication.

The basis for processing is fulfillment of an agreement or necessary measures prior to an agreement.

Sending newsletters and marketing

If you sign up for a newsletter or request other electronic information, we will use your contact information for this purpose.

The basis for processing is consent, unless otherwise expressly provided for by applicable marketing regulations.

Operation and safety

We may process technical information to ensure stable and secure operation, prevent misuse and correct errors.

The basis for processing is our legitimate interest in the secure and stable operation of the website.

Website analysis

If you consent, we use analytics tools to understand how the website is used and how it can be improved.

The basis for processing is consent.

Analysis of business visits

If you consent, we may use Leadfeeder to analyze which businesses visit the website.

The basis for processing the data is consent. Any subsequent follow-up must be based on a separate valid basis for processing, normally our documented legitimate interest.

When processing is based on legitimate interest, we assess KapitalKontroll's needs against the consequences for the individual's privacy. You can contact us if you would like more information about this assessment.

You may withdraw consent at any time. The withdrawal does not affect processing that has already been carried out on the basis of a valid consent.

4. Cookies and tracking technology

We use cookies and similar technologies to operate the website, remember settings and, if you consent, analyze the use of the website.

Necessary cookies

Necessary cookies are used, among other things, for:

• Security

• Basic functionality

• Language selection

• Saving consent settings

Such cookies may be used without consent when they are strictly necessary to provide a service you have expressly requested.

Analysis and business identification

If you consent, we may use:

• Google Analytics for statistics and traffic analysis

• Leadfeeder for business visit analysis

• Other analytics tools listed in the consent solution

Analytics and marketing tools will not be activated until you have given your consent. If you decline, only necessary cookies and technologies will be used.

You can change or withdraw your choice at any time through the "Change cookie settings" link in the footer.

An updated overview of cookies, suppliers, purposes and duration shall be available in the consent solution.

5. Forms and appointment booking

When you fill out a start-up form or book a demonstration, we use the information to:

• Process your request

• Contact you

• Prepare and conduct the meeting

• Register necessary follow-up

• Document the dialogue if a customer relationship is established

The start-up form is delivered through Google Forms. Meeting booking is delivered through Pipedrive.

The information becomes available to KapitalKontroll and the relevant suppliers to the extent necessary to provide the service.

6. Who receives the information?

We use suppliers who process personal data on our behalf or provide integrated services.

Squarespace

Squarespace is used for publishing, hosting, and technical operation of the website.

Google

Google is used for Google Forms, Google Analytics and some technical measurement tools.

Google Analytics should only be used if you have consented to analysis.

Pipedrive

Pipedrive is used for meeting scheduling and following up on customer inquiries.

Leadfeeder and Dealfront

Leadfeeder is used to analyze business visits if you have consented to this.

Weglot

Weglot is used to deliver the website's translated language versions.

IT and security providers

Other suppliers may be granted limited access when necessary for operations, security, maintenance or troubleshooting.

We may also share information when necessary to:

• Fulfilling legal obligations

• Protect the rights of KapitalKontroll or others

• Handle or defend legal claims

• Carrying out a business transfer

We do not sell personal information about website visitors.

7. Transfer of information outside the EEA

Certain suppliers or subcontractors may process personal data outside the EEA.

When personal data is transferred outside the EEA, the transfer must be based on a valid transfer basis. This may include:

• An adequacy decision by the European Commission

• EU standard privacy regulations

• EU–US Data Privacy Framework when the recipient is validly certified

• Other valid guarantees under data protection regulations

We assess the suppliers' agreements, subcontractors and security measures before using the services.

You can contact us for more information about the transfer basis for a specific provider.

8. How long do we store the information?

We do not store personal data longer than is necessary for the purpose.

Inquiries that do not lead to a customer relationship

The information is normally stored for up to 24 months after the last contact.

Meeting bookings

Appointment information is normally stored for up to 24 months after the last contact. If a customer relationship is established, relevant information may be transferred to the customer history.

Google Forms

Responses in Google Forms are normally deleted once the necessary information has been transferred to the correct system.

Customer and contract information

The information is stored for the duration of the customer relationship and thereafter for as long as necessary to meet documentation, accounting and statute of limitations requirements.

Newsletter

The information is stored until you withdraw your consent or unsubscribe.

We may keep a limited record of your reservation to ensure that you do not receive new mailings.

Technical security logs

Technical logs are normally stored for up to 90 days. Information may be stored longer if necessary to investigate a security incident.

Documentation of consent

Consent information is stored for as long as necessary to document the choice and meet legal requirements.

Information may be stored longer if this is necessary to handle a legal claim or fulfill a statutory obligation.

9. Your rights

Depending on the situation, you may have the right to:

• Get information about how we process your personal data

• Request access to information

• Request correction of incorrect or incomplete information

• Request deletion

• Request restriction of processing

• Object to processing based on legitimate interest

• Receive information you have provided to us in a structured and machine-readable format

• Withdrawing consent

• Complaint to the Norwegian Data Protection Authority

Rights may be limited by statutory exceptions.

We may request necessary information to verify your identity before processing a request for access, correction or deletion.

You can read more about your rights at datatilsynet.no.

10. Automated decisions

KapitalKontroll does not use information from the public website for fully automated decisions that have legal or similarly significant consequences for you.

11. Information security

We use technical and organizational measures to protect personal data against unauthorized access, alteration, loss and misuse.

The measures include, among other things:

• Access control

• Secured communication

• Backup

• Event handling

• Restriction of access based on business needs

• Agreements with suppliers who process information on our behalf

• Regular assessment of suppliers and security measures

No internet-connected service can be guaranteed to be completely risk-free. In the event of a security breach, we follow applicable rules regarding handling and possible notification.

12. Children

Our website and services are aimed at businesses and public organisations, not children.

We ask that information about children or other vulnerable individuals not be submitted through the website's open forms.

13. Changes to the Privacy Policy

We may update the privacy policy when the services, providers or regulations change.

The date at the top of the page indicates when the statement was last updated. In the event of significant changes, we will inform you on the website or through other appropriate channels.