Privacy Policy

1. Introduction

Pontevo AS ("we", "us", "our") respects your privacy and is committed to protecting your personal data. This privacy policy informs you about how we handle your personal data when you visit our website or use our services, and tells you about your privacy rights under the GDPR and Norwegian privacy laws.

We are a processor of personal data as defined in the EU General Data Protection Regulation (GDPR) and the Norwegian Personal Data Act. Our registered office is at Dokkeskjærskaien 1, 5006 Bergen, Norway.

2. Data We Collect

2.1 Personal Data

We may collect and process the following data:

• Identity Data: name, title, company
• Contact Data: email address, telephone numbers, postal address
• Technical Data: IP address, browser type and version, time zone setting
• Usage Data: information about how you use our website and services

2.2 Collection Methods

We collect data through:

• Direct interactions (forms, correspondence)
• Automated technologies (cookies, server logs)
• Third parties (business partners, analytics providers)

3. How We Use Your Data

We use your data for the following purposes:

• Providing and improving our services
• Communicating with you about our services
• Managing our relationship with you
• Analysing and improving our website
• Complying with legal obligations

We process personal data only where we have a legal basis to do so under GDPR Article 6.

4. Data Security

We have implemented appropriate technical and organisational measures to protect your personal data, including:

• Encryption of data in transit and at rest
• Access controls and authentication systems
• Regular security assessments
• Staff training on data protection
• Incident response procedures

5. Your Rights

Under the GDPR, you have the following rights:

• Right to access your personal data
• Right to rectification of inaccurate data
• Right to erasure ("right to be forgotten")
• Right to restrict processing
• Right to data portability
• Right to object to processing

To exercise any of these rights, please contact us using the details provided in Section 7.

6. International Transfers

We primarily process data within the European Economic Area (EEA). When we transfer data outside the EEA, we ensure appropriate safeguards are in place through:

• EU Standard Contractual Clauses
• Adequacy decisions by the European Commission
• Binding Corporate Rules where applicable

7. Contact Us

For any privacy-related inquiries or to exercise your rights, contact our Data Protection Officer:

You have the right to lodge a complaint with the Norwegian Data Protection Authority (Datatilsynet) if you are unsatisfied with our handling of your personal data.

8. Updates to This Policy

We may update this privacy policy from time to time. Any changes will be posted on this page with an updated revision date. If we make significant changes, we will notify you through our website or by email.