Privacy Policy

Seaonics AS is committed to protecting your privacy and handling your personal data in accordance with the General Data Protection Regulation (GDPR) and Norwegian data protection legislation.

1. Introduction

Seaonics AS (Org.no: 997 012 461) is the data controller responsible for the processing of personal data described in this policy. Our registered address is Hundsværgata 8, 6008 Ålesund, Norway.

This Privacy Policy explains what personal data we collect, how we use it, the legal bases for processing, and your rights as a data subject under the GDPR (Regulation (EU) 2016/679) and the Norwegian Personal Data Act (Personopplysningsloven).

If you have questions about this policy or our data practices, you can reach us at mail@seaonics.com or by phone at +47 71 39 16 003.

2. What Data We Collect

We may collect and process the following categories of personal data:

Contact Information

  • Name, email address, phone number, and company name provided through our contact forms or direct communication

Technical Data

  • IP address, browser type and version, operating system, device type, and screen resolution
  • Referring website, pages visited, time spent on pages, and navigation paths

Usage Data

  • Information about how you interact with our website, including clicks, scrolls, and form interactions

Cookie Data

  • Data collected through cookies and similar tracking technologies (see Section 6 for details)

Form Submissions

  • Any information you voluntarily submit through forms on our website, including HubSpot-powered contact forms

Communications

  • Records of correspondence if you contact us via email, phone, or other channels

3. How We Collect Data

We collect personal data through the following methods:

Direct Interactions

  • When you fill out contact forms or request information
  • When you subscribe to newsletters or marketing communications
  • When you correspond with us via email, phone, or other channels

Automated Technologies

  • Cookies and similar tracking technologies placed on your device when you visit our website
  • Server logs that automatically record technical data about your visit
  • Analytics tools that track website usage patterns (see Section 4)

Third Parties

  • We may receive data from business partners, service providers, or publicly available sources in connection with legitimate business activities

4. Third-Party Services

We use the following third-party services that may process your personal data:

Google Analytics (GA4)

We use Google Analytics 4 to understand how visitors use our website. GA4 collects data such as pages visited, session duration, and interaction events. Google Analytics uses cookies including _ga (expires after 2 years) and _ga_* (expires after 2 years) to distinguish users.

Google processes this data on servers that may be located outside the EEA. Transfers to the United States are safeguarded by Standard Contractual Clauses (SCCs) pursuant to GDPR Article 46(2)(c). You can opt out of Google Analytics by installing the Google Analytics Opt-out Browser Add-on.

Google Tag Manager

We use Google Tag Manager to manage tracking scripts on our website. Google Tag Manager itself does not collect personal data or set cookies. It facilitates the deployment of other tags and scripts that may collect data as described in this policy.

HubSpot

We use HubSpot for customer relationship management (CRM), contact form handling, and marketing analytics. HubSpot may set cookies including __hssc, __hssrc, __hstc, and hubspotutk to track visitor sessions and identify returning visitors.

Our HubSpot account is hosted in the European Union (EU data centre, portal 26821460). HubSpot processes data in accordance with their Data Processing Agreement and GDPR requirements. Where data is transferred outside the EEA, HubSpot relies on Standard Contractual Clauses.

5. Purpose and Legal Basis

We process personal data only when we have a lawful basis under GDPR Article 6. The following table describes our processing purposes and their legal bases:

Consent (Art. 6(1)(a))

  • Setting non-essential cookies (analytics, marketing)
  • Sending marketing communications and newsletters

You may withdraw your consent at any time without affecting the lawfulness of processing carried out before withdrawal.

Performance of a Contract (Art. 6(1)(b))

  • Processing enquiries and requests submitted through our contact forms
  • Providing requested information about our products and services

Legitimate Interests (Art. 6(1)(f))

  • Analysing website usage to improve our content and user experience
  • Ensuring the security and proper functioning of our website
  • Administering and protecting our business operations

Where we rely on legitimate interests, we have conducted a balancing test to ensure our interests do not override your fundamental rights and freedoms.

Legal Obligation (Art. 6(1)(c))

  • Retaining records as required by Norwegian tax and accounting legislation
  • Responding to lawful requests from public authorities

6. Cookies and Tracking

Our website uses cookies and similar technologies. Cookies are small text files stored on your device that help us provide and improve our services.

Necessary Cookies

These cookies are essential for the website to function properly. They enable core features such as page navigation and access to secure areas. These cookies do not require consent under GDPR.

Analytics Cookies

Analytics cookies help us understand how visitors interact with our website by collecting and reporting information anonymously. These include Google Analytics cookies (_ga, _ga_*) and HubSpot analytics cookies (__hssc, __hssrc, __hstc). These cookies are only set with your consent.

Marketing Cookies

Marketing cookies are used to track visitors across websites and display relevant advertisements. These include the HubSpot hubspotutk cookie used for visitor identification. These cookies are only set with your consent.

Managing Your Cookie Preferences

When you first visit our website, you will be presented with a cookie consent banner where you can accept or decline non-essential cookies. You can change your preferences at any time by clearing your browser cookies and revisiting the site.

You can also control cookies through your browser settings:

  • Most browsers allow you to view, manage, and delete cookies in the settings or preferences menu
  • You can set your browser to block all cookies, though this may affect website functionality

To opt out of Google Analytics specifically, install the Google Analytics Opt-out Browser Add-on.

7. Data Sharing and International Transfers

We do not sell, rent, or trade your personal data to third parties for their marketing purposes.

Recipients of Personal Data

We may share your personal data with the following categories of recipients, only to the extent necessary for the purposes described in this policy:

  • Service providers who assist us in operating our website and business (e.g., hosting, analytics, CRM)
  • Professional advisers including lawyers, auditors, and accountants where necessary
  • Public authorities and regulatory bodies when required by law

International Transfers

Some of our service providers (such as Google) may process data outside the European Economic Area (EEA). When personal data is transferred outside the EEA, we ensure appropriate safeguards are in place:

  • Standard Contractual Clauses (SCCs): We rely on SCCs approved by the European Commission pursuant to GDPR Article 46(2)(c) for transfers to countries without an adequacy decision.
  • Adequacy Decisions: Where applicable, we transfer data to countries that the European Commission has determined provide an adequate level of data protection under GDPR Article 45.

8. Data Retention

We retain personal data only for as long as necessary to fulfil the purposes for which it was collected, or as required by law. The following retention periods apply:

  • Analytics data: Google Analytics data is retained for 14 months from your last visit, after which it is automatically deleted.
  • CRM data: Contact information in HubSpot is retained for the duration of our business relationship and for a reasonable period afterwards to handle any follow-up enquiries.
  • Tax and accounting records: Financial records are retained for 5 years as required by the Norwegian Bookkeeping Act (Bokføringsloven).
  • Cookie data: Cookie data expires according to the cookie-specific expiry periods (see Section 6). Session cookies are deleted when you close your browser.
  • Communication records: Email correspondence and form submissions are retained for up to 3 years, unless a longer retention period is required for legal or business purposes.

When personal data is no longer needed, it is securely deleted or anonymised.

9. Your Rights Under GDPR

Under the GDPR, you have the following rights in relation to your personal data:

  • Right of Access (Art. 15): You have the right to request a copy of the personal data we hold about you.
  • Right to Rectification (Art. 16): You have the right to request correction of inaccurate or incomplete personal data.
  • Right to Erasure (Art. 17): You have the right to request deletion of your personal data where there is no compelling reason for its continued processing.
  • Right to Restrict Processing (Art. 18): You have the right to request that we limit the processing of your personal data in certain circumstances.
  • Right to Data Portability (Art. 20): You have the right to receive your personal data in a structured, commonly used, machine-readable format.
  • Right to Object (Art. 21): You have the right to object to processing based on legitimate interests, including profiling.
  • Right to Withdraw Consent (Art. 7(3)): Where processing is based on consent, you have the right to withdraw consent at any time.

How to Exercise Your Rights

To exercise any of these rights, please contact us at mail@seaonics.com. We will respond to your request within one month as required by GDPR Article 12(3). In complex cases, this period may be extended by two additional months.

Right to Lodge a Complaint

If you believe that our processing of your personal data infringes the GDPR, you have the right to lodge a complaint with the Norwegian Data Protection Authority (Datatilsynet) at www.datatilsynet.no.

10. Data Security

We take the security of your personal data seriously and implement appropriate technical and organisational measures to protect it against unauthorised access, alteration, disclosure, or destruction.

Technical Measures

  • HTTPS encryption (TLS) for all data transmitted between your browser and our website
  • Encrypted storage of sensitive data at rest
  • Regular security updates and patching of our systems
  • Access controls and authentication mechanisms to limit data access to authorised personnel

Organisational Measures

  • Data protection awareness training for employees who handle personal data
  • Internal policies and procedures for data handling and incident response
  • Regular review and assessment of our security measures

Breach Notification

In the event of a personal data breach that is likely to result in a risk to your rights and freedoms, we will notify the Norwegian Data Protection Authority (Datatilsynet) within 72 hours of becoming aware of the breach, as required by GDPR Article 33. Where the breach is likely to result in a high risk to your rights and freedoms, we will also notify you directly in accordance with GDPR Article 34.

11. Changes to This Policy

We may update this Privacy Policy from time to time to reflect changes in our data practices, legal requirements, or business operations. When we make significant changes, we will update the "Last updated" date at the bottom of this page.

We encourage you to review this policy periodically to stay informed about how we protect your personal data.

Last updated: March 2026.

12. Contact Information

If you have any questions about this Privacy Policy or wish to exercise your data protection rights, please contact us:

Seaonics AS

Org.no: 997 012 461

Hundsværgata 8, 6008 Ålesund, Norway

Phone: +47 71 39 16 003

Email: mail@seaonics.com