Skip to main content

1. Introduction

Inspera AS and its subsidiaries (collectively referred to as “Inspera”, “We”, “Us”) are committed to protecting and respecting your right to privacy. 

This Privacy Notice explains how Inspera processes personal data as a controller in connection with data collected through our website at https://inspera.com (“Website”), in accordance with applicable data protection and privacy laws.

Our Website is an important communication tool through which we share information about our work, products, and services. We also maintain official pages on social media platforms to engage with our community and provide updates about our activities.

This Privacy Notice applies to any individual whose personal data we collect and process as a controller in connection with their use of our Website or interaction with our social media profiles.

2. Inspera as Controller

This Privacy Notice applies only to Inspera’s processing of personal data where we act as a controller, meaning we determine the purposes and means of the processing.

The purposes for which we act as Controller are as described below. Please note that for much of our business, Inspera acts as a processor on behalf of customers. This Notice does not cover that processing.

3. Personal Data We Collect, Why We Use and How Long We Keep It

“Personal data” means any information relating to an identified or identifiable individual. 

We collect and process personal data only to the extent necessary to operate, improve, and communicate about our Website, products, and services. 

We retain personal data only for as long as necessary to fulfil the purposes for which it was collected, or to comply with legal, regulatory, or contractual obligations. Retention periods vary depending on the type of data and the context of its collection. At the end of the applicable retention period, personal data will be securely deleted or anonymised so that it can no longer be linked to an identifiable individual.

The table below outlines the main purposes, the related categories of personal data processed when you interact with our Website or social media pages, the lawful basis for processing and the retention periods:

Purpose Categories of Personal Data Lawful Basis for Processing Retention Period
Leads Generation and Prospect Management Name, Email, Location, Professional Data (Job Title), and other information voluntarily submitted in the lead capture form. Your Consent (Article 6(1)(a) GDPR) 2 years following the last meaningful interaction
Contact of Prospects Name, Email address. Your Consent (Article 6(1)(a) GDPR) 2 years following the last meaningful interaction. For successful sales, significant pre-contractual communications are retained for 10 years as part of the customer file.
Email Campaigns for Customers and Prospects Name, Email address. Your consent (Article 6(1)(a) GDPR) or Legitimate Interest (Article 6(1)(f) GDPR). 2 years from the date the campaign was sent, subject to your subscription status or withdrawal of consent.
Website Cookies and Tracking Technologies — to understand how our Website is used and enhance user experience. Online Identifiers (IP address, device ID), Behavioural Data (page views, clicks), Marketing preferences, and Consent Records. Your Consent (Article 6(1)(a) GDPR) for non-essential cookies. Legitimate Interest (Article 6(1)(f) GDPR) for strictly necessary cookies. Varies per cookie type (session to 1 year). Consent records retained for 2 years.
Website operation and maintenance — to ensure proper functionality, performance, and security of the Website.
Technical logs and related data are retained for troubleshooting and security monitoring.		 Technical Data such as IP address, Browser Information, Cookie IDs, and Usage Data. Legitimate interests in operating a secure and reliable Website (Article 6(1)(f) GDPR) Up to 2 years for general usage data; technical logs retained up to 12 months.
Social media administration — to manage official accounts and engage with users.
We do not store exported personal data beyond what is necessary.		 Account insights, messages, comments, likes, and profile information shared by you. Joint controllership with platforms based on legitimate interests (Article 6(1)(f) GDPR) As long as the content remains available or until you delete it.

We do not sell or rent your personal data to anyone. Your personal data will only be processed for the purposes listed above or for compatible purposes such as reporting, audits, and analytics, always in line with applicable data protection laws.

4. How We Share Your Personal Data

We may share your personal data with the following categories of recipients:

  • Inspera group companies (our subsidiaries and affiliates).
  • Authorised resellers or business partners – for marketing, sales, or support purposes.
  • Advertisers and advertising networks – to deliver relevant ads in aggregated, non-identifiable form.
  • Public authorities or other third parties – if required by law, regulation, or court order.

We only share personal data under appropriate contractual safeguards, including data processing agreements where required by applicable data protection law.

5. International Data Transfers

Our Services are global, and your personal data may be processed in any country where we have operations or where we engage service providers. Our Services are located in Norway, Denmark, Sweden, Portugal, United Kingdom, Australia, India, Kosovo, India and the United States of America. Consequently, your personal data may be transferred to a destination outside the country where you are located, which may have data protection rules that are different from those of your country. By submitting your personal data, you acknowledge such transfer, storing or processing of personal data outside your jurisdiction.

We take all steps reasonably necessary to ensure that your data is processed securely and in accordance with this Privacy Notice and applicable laws. This means that Your personal data will only be transferred to a country that provides an adequate level of protection or where We have a valid transfer mechanism in place with the recipient in accordance with applicable law, including through adequacy decisions by the European Commission, or approved transfer mechanisms such as Standard Contractual Clauses or equivalent safeguards.

If you would like to receive more information or a copy of the applicable safeguards, please contact us at privacy@inspera.no.

6. Cookies

We use cookies and similar technologies to make our Website work efficiently and to improve user experience.

“Essential” cookies are necessary for the operation of the Website, while “non-essential” cookies (e.g. for analytics or advertising) are used only with your consent.

For more details about the specific cookies used and how to manage them, please refer to our Cookie Policy.

7. Third Parties & Social Media

We maintain official Inspera pages on social media platforms such as LinkedIn and Twitter (X).

When you interact with us through these platforms, we may receive anonymised insights (e.g. engagement statistics) or any information you choose to share with us (e.g. comments, messages, likes).

For these activities, Inspera may act as a joint controller with the social media platform. You can contact either us or the relevant platform to exercise your privacy rights. However, some requests may need to be handled directly by the platform due to its control over the data.

Our Website may also include links to third-party sites (e.g. partners, advertisers, affiliates). Please note that Inspera is not responsible for the content or privacy practices of those sites. We recommend that you read their respective privacy notices before providing any personal data.

8. Your Privacy Rights

You have several rights as regards the processing of your personal data. Such rights include: 

  • Access to your personal data: as a data subject, you have the right to access to the personal data Inspera keeps about you. e personal data Inspera keeps about you. 

Kindly have in mind that this right might be restricted due to protection of other persons’ privacy, as well as consideration for our know-how and business secrets;

    • Correction of your data: if deemed incorrect or incomplete, you have the right to request the rectification of your information;
    • Erasure: in certain cases, you have the right to request the deletion of your data. These cases are the following:
      • Processing your personal data is no longer necessary for fulfilling the initial purpose for which it was collected and further processed, and no new lawful purpose exists;
      • You have withdrawn your consent and we don’t have another lawful ground to process your personal data;
      • You have objected to the processing activity based on Inspera’s legitimate interests and we do not have any legitimate ground to keep processing it; 
      • The personal data has been processed unlawfully.
    • Restriction to processing: you have the right to limit our processing activities in cases in which: 
      • You have disputed the accuracy of your own data and we’ve taken time to investigate and confirm the accuracy;
      • Data has been processed unlawfully, but you prefer the suspension of the processing activity over the erasure of personal data; 
      • We no longer need your personal data for the purposes of processing, but you want to keep it due to any legal claim;
      • We object to the processing activity while we are checking if we have any overriding grounds in relation to an erasure request. 
    • Object to the processing activity: you have the right to request us to stop processing your personal data, namely to any direct marketing initiatives;
    • Data Portability: You have the right to ask for your personal data to be sent to you or to another controller in a structured and common machine-readable format. 
  • Right to withdraw your consent: as our processing activities described above are based on consent, you have the right to withdraw it at any given time, via the contact provided in point 12.  
  • You also have the right to not be subject to automated decisions (made solely by machines) that affect you, as defined in data protection legislation. 

To exercise your rights, please contact us using the details provided below. We will respond as soon as possible, and no later than one month after receiving your request.

You may also have additional rights under your local data protection laws, which we will respect where applicable.

9. Complaints

If You have any complaints about our use of your personal data, please contact us as set out at the end of this Privacy Notice. 

You also have the right to lodge a complaint with your local data protection authority.

10. Data Subjects Under the Age of 18

We do not knowingly collect or process personal data relating to children as Controller, for the purposes of processing mentioned above. However, should any parent or guardian be concerned that their child’s personal data has been collected by us, please contact us as set out at the end of this Privacy Notice.

For the avoidance of doubt, please note that customers of Inspera may use the Inspera Solutions to collect information relating to children. Where a customer collects such data about children, the customer, not Inspera, is the Controller for such personal data, and is responsible for having proper procedures and parental consent in place. This Privacy Notice does not apply to the processing of such data collected by customers, as it is limited to the use of Inspera’s Website.

11. Changes to this Privacy Notice

We may change this Privacy Notice at any given time, whenever deemed necessary. Any changes we make will be made available on this page. 

We reserve the right to make changes to our practices and this Data Privacy Notice at any time, so please check back frequently to see any updates or changes to our Privacy Notice.

12. Contact Us

Please feel free to contact us if you have any complaints, questions, or comments concerning our privacy practices, or if you would like to exercise your privacy rights. 

Please contact Us to the following email address: privacy@inspera.no.

The same details can be used to contact our Data Protection Officer (DPO).