Privacy Policy
Last updated: 13.09.2026
Data controller: INSOTECH AS, Org.nr: 937 087 829, Kniveveien 31, 3036 Drammen, post@insotech.no
1. What personal data do we collect?
When you submit the contact form on this website, we collect: full name, email address, company name (optional), phone number (optional), and your message. This data is stored in our contact management system (Supabase) and forwarded to our email inbox.
2. Purpose and legal basis
We process your data solely to respond to your enquiry. The legal basis is legitimate interest (GDPR Article 6(1)(f)) — specifically, our interest in responding to business enquiries sent to us.
3. Retention period
Contact form submissions are retained for 12 months, after which they are deleted from our system. Email correspondence is managed according to our internal retention policy. The record of your consent choice, meaning the time, the choice and the version of this policy it applies to, is kept for three years. That is the same retention period we apply to agreement documentation elsewhere. The record contains no IP address, no browser details and nothing else that identifies you.
4. Sharing of data
Contact form data is processed by Supabase Inc. (USA) as a data processor under Standard Contractual Clauses (SCCs) in accordance with GDPR Chapter V. If you accept analytics, usage data is also processed by Google LLC (Google Analytics 4) and Microsoft Corporation (Microsoft Clarity) under their respective data processing agreements, and what Microsoft receives includes a recording of how you use the pages. Without your consent neither tool is loaded and no data is sent to them. We do not sell or share your data with any other third parties.
5. Your rights
Under GDPR you have the right to: access your data, have it corrected or deleted, restrict processing, data portability, and object to processing. To exercise any of these rights, contact us at post@insotech.no.
6. Right to complain
If you believe we have processed your data unlawfully, you have the right to lodge a complaint with the Norwegian Data Protection Authority: datatilsynet.no, tel. 22 39 69 00.
7. Cookies
No analytics tools load before you press Accept. Only then are Google Analytics 4 (Google LLC) and Microsoft Clarity (Microsoft Corporation) fetched, and Clarity then records how you move around the pages you visit. If you press Decline, neither of them loads and the site runs on only the cookies it needs in order to work. Your choice is recorded on our side together with the time and the version of this policy it applies to, so that we can demonstrate consent as required by GDPR Article 7(1). You can withdraw your consent at any time via “Manage cookies” at the bottom of the page. We then delete the analytics cookies set on insotech.no (_ga, _ga_T2B5JKGGK2, _clck and _clsk), and the tools are not loaded again. Cookies that Google and Microsoft have set on their own domains are not ours to delete. Those you have to clear in your browser. If we change what the consent covers, we ask again.
8. Which cookies are set?
cookie_consent (insotech.no, lasts one year) remembers the choice you made in the banner, and is the only cookie we set ourselves. The hosting platform that runs the site also sets one technically necessary cookie so that your requests are handled correctly. If you accept analytics, these are set on insotech.no: _ga and _ga_T2B5JKGGK2 (Google Analytics 4, last two years) tell visitors and sessions apart, and _clck (lasts one year) and _clsk (lasts for the session) tie the Microsoft Clarity recordings to the same visit. Microsoft also sets a CLID cookie on its own domain, clarity.ms. If you decline, none of them are set.
9. Changes to this policy
This policy may be updated from time to time. The date at the top of this page shows when it was last revised.