Last updated: January 2026
Version: 1.2
Regelgrunnlag: GDPR · The Personal Data Act 2018
Data Controller: AlinDigital AS
1. Data Controller
AlinDigital AS (hereinafter “AlinDigital”, “we” or “us”) is the data controller for the personal data collected via our website and in connection with our services.
Contact information:
AlinDigital AS
REG NO.: 937 929 331 VAT
Address: Lægdesvingen, 5096,Bergen, Norway
E-mail: support@ailndigital.com
Cf. the Personal Data Act (pol.) § 2 and GDPR art. 4 no. 7
2. What personal data do we collect?
We process the following categories of personal data:
- Contact information: Name, email address, phone number, company name
- Technical data: IP address, browser type, operating system (via cookies)
- Communication data: The content of emails and messages sent to us
- Contract and invoice information: Necessary to fulfill the agreements
- Payment data: Handled by our payment provider – we do not store card data
Cf. GDPR Article 4 no. 1 and pol. § 2
3. Basis for processing
We process personal data on the following grounds:
- Agreement (GDPR Art. 6 no. 1 b): To fulfil contracts with customers
- Legal obligation (Art. 6 (1) c): Bookkeeping and tax requirements (Bookkeeping Act, Tax Administration Act)
- Legitimate interest (Art. 6(1)(f)): Marketing to existing customers, security
- Consent (Art. 6 (1 a)): Newsletters and marketing to new contacts – can be withdrawn at any time
4. Purpose of the processing
- Provide and manage services
- Customer communication and support
- Invoicing and accounting
- Marketing (with consent or legitimate interest)
- Compliance with Norwegian legislation
- Improve website and services
5. Storage and deletion
We do not store personal data for longer than necessary. Specific storage times:
- Customer data (active customers): Entire agreement period + 3 years
- Accounting and invoice information: 5 years, cf. Section 13 of the Bookkeeping Act
- E-mail and inquiries: 2 years from last contact
- Site Stats (anonymized): 26 months (Google Analytics 4)
- Consent-based marketing: Until consent is withdrawn
6. Sharing with Third Parties
We only share personal data with third parties where necessary and on a lawful basis:
- Accountant: Under data processing agreement
- Payment providers (Vipps/Stripe): Separate privacy policies apply
- Cloud services (primarily EEA-based): Under data processing agreements
- Public authorities: Only by statutory order (tax authorities, police)
We never sell personal data to third parties. Never.
7. Your rights
In accordance with the GDPR and the Personal Data Act, you have the right to:
- Access (Art. 15): Find out what information we hold about you
- Correction (Art. 16): Correcting incorrect information
- Deletion (Art. 17): “The right to be forgotten” – where there is legal access
- Limitation (Art. 18): Restrict processing in certain situations
- Data portability (Art. 20): Receive your data in machine-readable format
- Objection (Art. 21): Object to processing based on legitimate interest
- Revocation of consent (Art. 7 para. 3): Withdraw consent at any time
Send a request to: personvern@alindigital.com. We respond within 30 days, cf. GDPR art. 12.
8. Cookies
We use cookies to improve the user experience. You can manage consent via our cookie banner (IAB TCF compliant). Necessary cookies cannot be refused. Analytical and marketing cookies require your consent, cf. the Electronic Communications Act § 2-7b.
9. Right of appeal
You have the right to complain to the Norwegian Data Protection Authority if you believe we are processing your personal data in violation of the regulations.
The Norwegian Data Protection Authority · P.O. Box 458 Sentrum, 0105 Oslo · postkasse@datatilsynet.no · www.datatilsynet.no
10. Changes
We reserve the right to update this Statement. Significant changes will be notified by email to registered customers. The current version is always published on the website.