1. Who is responsible
GetOnNet AS, organisation number 998 580 706, Ringsevja 2, 3830 Ulefoss, is the data controller for the personal data collected through siite.no. Siite is a service from GetOnNet AS. You can reach us at hei@siite.no or +47 35 90 15 00.
2. What we collect
We only collect what you provide yourself, and what is needed for the website to work:
- When you ask for a draft or get in touch: name, email address, phone number, company name if any, which package you are interested in, and the message you write.
- When you submit a support request: name, email address, company or web address, what the request concerns, the description you write, and whether you have marked the request as critical.
- Marketing data: if you came here from an ad or a link, we store which campaign and which page you came from, together with your enquiry. This is stored in your browser for 30 days.
- Technical: your IP address is used to limit how many forms can be submitted per hour, so that we stop spam. It is not stored together with the enquiry.
We never ask for sensitive personal data, and the forms must not be used to send such data.
3. What we use it for, and why we are allowed to
- Replying to your enquiry and making the draft. The basis is that you have asked for it yourself, and that we have a legitimate interest in following up enquiries from businesses that are considering the service.
- Delivering the service and providing support to customers. The basis is the agreement we have with your business.
- Invoicing and accounting. The basis is a legal obligation under the Norwegian Bookkeeping Act.
- Measuring and improving our marketing. The basis is your consent to cookies, see section 4.
4. Cookies and storage in your browser
The first time you visit the site, we ask for your consent to cookies. Your choice is stored by CookieScript in the cookie CookieScriptConsent, and you can change it at any time by opening the consent window again.
Once you have consented, we use these tools:
- Google Analytics (the cookies _ga and _ga_NTN4V5QGSD) gives us anonymous statistics on how many people visit the site and what they look at.
- Google Ads measures whether an ad led to an enquiry, and may show you ads from us later.
- Google Tag Manager is the tool that controls which of these are loaded.
- Hotjar (cookies beginning with _hj) shows us how the site is used, such as heatmaps of clicks and anonymised recordings of how visitors move around the site. Text you type in forms is masked.
In addition, the website stores the following locally in your browser, regardless of consent, because it is necessary for the service to work:
- siite_sporing remembers which campaign or link you came from, for 30 days, so that we know where the enquiry came from. It contains no names or contact details.
- siite_admin is a login cookie that is only set for those of us who run the site. It is never set for ordinary visitors.
We also use Google Fonts to load the fonts on the site. You can delete cookies and local storage at any time in your browser settings.
5. Who we share the data with
We never sell personal data. We use some suppliers who process data on our behalf, and we have a data processing agreement with them:
- Make receives enquiries from the forms and passes them on within our systems. The processing takes place on servers in the EU.
- Resend sends us an email notification when a new enquiry or support request comes in.
- Google provides Tag Manager, Analytics, Ads and Fonts.
- CookieScript handles consent to cookies.
- Hotjar (Contentsquare) provides heatmaps and recordings of usage. The processing takes place on servers in the EU.
- Hosting. To be filled in: who runs the server and where it is located.
Data may be disclosed to public authorities when we are required to do so by law.
6. How long we store data
Enquiries that do not lead to a customer relationship are deleted when they are no longer relevant. Data about customers is stored for as long as the agreement runs, and thereafter for as long as we are required to under the Bookkeeping Act. To be filled in: how long you actually keep enquiries that did not become customers, for example 12 months.
7. Security
The website runs over an encrypted connection (HTTPS). Enquiries are stored in a database that only we have access to, and the administration pages are password-protected. Passwords are never stored in plain text. Access is only given to those who need it to do their job.
8. Your rights
You have the right to request access to the data we hold about you, to have incorrect data rectified, to have data erased, to request that processing be restricted, to receive your data in a machine-readable format, and to object to processing based on legitimate interest. If you have given consent, you can withdraw it at any time.
Send an email to hei@siite.no, and we will reply as quickly as we can and within one month at the latest.
If you believe that we are processing data in breach of the regulations, you can lodge a complaint with the Norwegian Data Protection Authority (Datatilsynet). You can find contact information at datatilsynet.no.
9. Changes
We may update this statement. The current version is always available at siite.no/personvern, with the date of the last update at the top.
Contact
GetOnNet AS · Ringsevja 2, 3830 Ulefoss · +47 35 90 15 00 · hei@siite.no