Skip to main content

Inspera AS and its subsidiaries (collectively referred to as “Inspera”, “We”, “Us”) are committed to protecting and respecting Your right to privacy. This privacy notice (“Privacy Notice”) explains how Inspera processes personal data as Controller regarding the data collected in this Website, in accordance with applicable data protection and privacy laws. The Inspera Website is Our most important communication tool. Here, We communicate about Our work and Our products to the general public, and We also have social media pages, through which We share information about our Services and Products.

Please read this information carefully.

This Privacy Notice applies to anyone whose personal data We collect and process as Controller in the course of accessing Our Website and Our social media profiles.

1. Inspera as controller

This Privacy Notice applies to Inspera’s processing of personal data as Controller (processing activities in which we decide the purposes and means of the processing of Your personal data). The purposes for which we act as Controller are as described in the next section, along with the strictly necessary data to fulfil such purpose.

Please note that this Data Privacy Notice only applies to the processing activities concerning Our Website. For a substantial part of Our business, We act as a Processor.

2. What Personal Data We Collect

Personal data is any information regarding an identified or identifiable individual. We may collect, use, store and transfer different kinds of personal data regarding You, which we have grouped together as follows:

  • For Marketing purposes, including sending our Our newsletters, event invitations and push notifications: name, email address and phone number;
  • To manage user accounts: username and password;
  • To improve and develop Our Website: name, e-mail address, phone number and information collected in connection with your use of our Site or Services, including which of our online resources you have used and when;
  • To manage Our Website: Technical information (such as IP address, login information, browser type etc.), information about Your visit (such as the full URL clickstream, and from Our Website, products you viewed or searched for, length of visits to certain pages etc.), information from other online accounts to which You have given us permission to collect data from within Your settings or the privacy notices of these other online services (e.g. via social media features);
  • Security: User device IP address, host and session information, and which of Our online resources You have used;

  • To administer Our social media accounts: insights/statistics, communications (e.g. comments, likes, chats), profile information.

3. How We Process Personal Data

We will only process your information for the above mentioned specific reasons and only where we have a lawful basis to do so. Under not only the General Data Protection Regulation, but also considering the ePrivacy Directive, the lawful basis we rely on will be the consent You provide, which is based on the relationship We establish with You and how We interact with You, and Inspera’s legitimate interests. 

On a case-by-case basis, we may also use your personal data for certain purposes that are not incompatible with the purpose for which the data was originally collected or received, such as audits, analytics, reporting, innovation, dispute resolution and mergers and acquisitions.

We will not sell or rent your personal data to anyone.

4. How Long We Keep Your Personal Data

We keep your personal data for as long as necessary for the purposes listed above. Some criteria that we use to determine when to delete your data are:

  • We store username and password for as long as you have an active user account.
  • We store data based on your consent in order for us to send out our newsletters and promotions, until you withdraw your consent/unsubscribe to our services.

It is important to emphasise that special situations may lead to longer or shorter retention periods than the ones described above. We will in any case retain data as long as required subject to legal requirements (e.g. due to social security or tax law requirements), and in case special needs arise (e.g. due to complaints or claims made against us or by us).

Your information is securely stored. We keep your personal information for a maximum period of 2 years. Following this timeframe, we delete the data to uphold our commitment to protecting your privacy.

5. How We Share Your Personal Data

We may disclose your personal data to the following categories of recipients, to the extent necessary for the purposes mentioned above:

  • Any member of the Inspera group, which means Our subsidiaries.
  • Authorised resellers of Inspera products for marketing, sales, and support purposes. 
  • Advertisers and advertising networks that required the data to select and provide relevant ads to You (this information is only provided at an aggregated level, without direct identifiers concerning Our users). 
  • To authorities or third parties if required by law or a binding court order.

Personal data is not transferred to third parties without proper data processing agreements in place, to the extent required under applicable data protection law.

6. Transfer of Personal Data Outside Your Jurisdiction

Our Services are global, and your personal data may be processed in any country where we have operations or where we engage service providers. Our Services are located in Norway, Denmark, Sweden, Portugal, United Kingdom, Australia, India, Kosovo, Dubai and the United States of America. Consequently, your personal data may be transferred to a destination outside the country where you are located, which may have data protection rules that are different from those of your country. By submitting your personal data, you acknowledge such transfer, storing or processing of personal data outside your jurisdiction.

We will take all steps reasonably necessary to ensure that your data is processed securely and in accordance with this Privacy Notice and applicable laws. This means that Your personal data will only be transferred to a country that provides an adequate level of protection or where We have a valid transfer mechanism in place with the recipient in accordance with applicable law.

We will provide You with further details about such international data transfers upon request. 

If you want to obtain a copy of the safeguards, please use the contact details below.

7. Cookies

Cookies are short text files stored in Your device (be it a computer, phone, or tablet) by a website. These small data files are used by Us in order to make Our website work more efficiently, as well as to provide Us with reporting information. 

If the cookies are required for technical functioning of Our website, to allow it to operate properly, they will be considered “essential” or “strictly necessary” cookies. On the other hand, third-party cookies enable Us to track and target the interests of Our users to enhance the experience on Our Online Properties. Third parties serve cookies through Our website for advertising, analytics, and other purposes.

Please refer to our “Cookie Policy” for further information on the cookies used by Inspera.

8. Third Parties & Social Media

We have pages on social media, including LinkedIn and Twitter, where we provide information about our Services and interact with the users. On such social media pages, we may receive anonymised insight, such as statistics about location of our users. We may also receive information that you decide to share with Us, such as chat, comments and likes. Your experience on the social media sites will be governed by the privacy notices of those sites. As We are Joint Controllers with the social media for data processed from Your use of social media tools or links on Our site, and for aggregated insight that We get from Your use of Our pages on social media, You may also contact Us if You wish to have more information, or if You want to exercise Your privacy rights as set below. However, please note that We may not be able to respond to all subject rights requests, and that We may have to refer You to the social media company for further information.

Our Website and Services may also contain links to and from websites of Our partner networks, advertisers, and affiliates. If You follow such a link, please note that these websites have their own data privacy notices in place and that We do not assume any responsibility or liability for these notices. 

Please check the data privacy notices in the relevant networks before You submit any personal data to such websites.

9. Your Privacy Rights

You have several rights as regards the processing of your personal data. Such rights include: 

  • Request access to your personal data: as a data subject, you have the right to access to the personal data Inspera keeps about you. e personal data Inspera keeps about you. 

Kindly have in mind that this right might be restricted due to protection of other persons’ privacy, as well as consideration for Our know-how and business secrets;

    • Request the correction of your data: if deemed incorrect or incomplete, you have the right to request the rectification of your information;
    • Request erasure: in certain cases, you have the right to request the deletion of your data. These cases are the following:
      • Processing your personal data is no longer necessary for fulfilling the initial purpose for which it was collected and further processed, and no new lawful purpose exists;
      • You have withdrawn your consent and We don’t have another lawful ground to process your personal data;
      • You have objected to the processing activity based on Inspera’s legitimate interests and We do not have any legitimate ground to keep processing it; 
      • The personal data has been processed unlawfully.
    • Request restriction to processing: you have the right to limit Our processing activities in cases in which: 
      • You have disputed the accuracy of Your own data and We’ve taken time to investigate and confirm the accuracy;
      • Data has been processed unlawfully, but You prefer the suspension of the processing activity over the erasure of personal data; 
      • We no longer need Your personal data for the purposes of processing, but You want to keep it due to any legal claim;
      • We object to the processing activity while We are checking if We have any overriding grounds in relation to an erasure request. 
    • Object to the processing activity: you have the right to request Us to stop processing Your personal data, namely to any direct marketing initiatives;
    • Data Portability: You have the right to ask for Your personal data to be sent to You or to another Controller in a structured and common machine-readable format. 
  • Right to withdraw your consent: as our processing activities described above are based on consent, you have the right to withdraw it at any given time, via the contact provided in number 10.  
  • You also have the right to not be subject to automated decisions (made solely by machines) that affect you, as defined in data protection legislation. 

To the extent that local data protection and privacy laws apply to the processing of your personal data, We will respect any additional rights You may have pursuant to such laws. 

Please note that these rights are subject to conditions and limitations by law. Please contact Us as set out at the end of this Privacy Notice if You want to exercise any of Your rights or if You would like more information about the conditions/limitations that apply. We will respond to Your inquiry as soon as possible and within one month at the latest.

10. Complaints

If You have any complaints about Our use of Your personal data, please contact Us as set out at the end of this Privacy Notice. You may also file a complaint to Your local data protection supervisory authority.

11. Data Subjects Under the Age of 18

We do not knowingly collect or process personal data relating to children as Controller, for the purposes of processing mentioned above. However, should any parent or guardian be concerned that their child’s personal data has been collected by Us, please contact Us as set out at the end of this Privacy Notice.

For the avoidance of doubt, please note that customers of Inspera may use the Inspera Assessment SaaS solution to collect information relating to children. Where a customer collects such data about children, the customer, not Inspera, is the Controller for such personal data, and is responsible for having proper procedures and parental consent in place. This Privacy Notice does not apply to the processing of such data collected by customers, as it is limited to the use of Inspera’s Website, Community and Roadmap.

12. Changes to this Privacy Notice

We may change this Privacy Notice at any given time, whenever deemed necessary. Any changes We make will be made available on this page. 

We reserve the right to make changes to Our practices and this Data Privacy Notice at any time, so please check back frequently to see any updates or changes to Our Privacy Notice.

13. Contact Us

Please feel free to contact Us if You have any complaints, questions, or comments concerning Our privacy practices, or if You would like to exercise Your privacy rights. 

Please contact Us to the following email address: privacy@inspera.no.

The same details can be used to contact Our Data Protection Officer (DPO).

Contact Us