Privacy Policy

1. Data Controller

Testify AS (Org. No. 927075881) is the data controller for the processing of personal data described in this statement.

  • Address: Kristian Augusts gate 23, 0164 Oslo

  • Email for privacy inquiries: post@testify.no

2. Purpose and Legal Basis for Processing

We process personal data only for specific and legitimate purposes:

Purpose of Processing Category of Personal Data Legal Basis for Processing
Handling Inquiries (contact, email) Name, email, phone number, content of the inquiry. Legitimate Interest (GDPR Art. 6(1)f) in responding to and following up on inquiries.
Customer and Supplier Relations Name, contact information, invoicing information, communication. Contract (GDPR Art. 6(1)b) for delivering our services.
Compliance with Legal Requirements Transaction data (according to the Accounting Act). Legal Obligation (GDPR Art. 6(1)c) to comply with Norwegian law.
Website Functionality IP address, session data (via necessary cookies). Legitimate Interest (GDPR Art. 6(1)f) to ensure technical functionality and website security.
Web Analytics and Statistics Anonymized IP address, visit patterns. Consent (GDPR Art. 6(1)a), obtained via cookie banner.

3. Data Processors and Transfer to Third Countries

We use external providers (data processors) to operate the website and deliver services. We enter into Data Processing Agreements with all providers to ensure secure handling of data.

  • Examples of data processors (website-related only):

    • Web Hosting/Operations Provider: For storage and operation of the website.

    • Google Analytics: For statistics and analysis of web traffic.

    • Monsido (or equivalent): For quality control of the website.

Transfers outside the EEA: If we use cloud services or other providers outside the EEA (e.g., the USA), we ensure that the transfer is carried out in accordance with GDPR requirements (e.g., by using Standard Contractual Clauses (SCCs) or approved certification mechanisms).

4. Cookies

We use cookies to ensure that the website functions optimally and to collect statistics.

  • Necessary Cookies: These are essential for the website to function and are set without consent (basis: legitimate interest).

  • Analytics/Statistics Cookies: These are used to measure traffic and are set only if you have given your active consent via the cookie banner.

You can manage and withdraw your consent to cookies at any time here:

5. Storage Period and Deletion

We store personal data only as long as necessary for the purpose for which it was collected:

  • Communication Data: Deleted once the inquiry has been answered and no further follow-up is necessary.

  • Accounting Data: Stored for a minimum of 5 years in accordance with the Accounting Act.

  • Cookie Data: Stored according to the duration defined for each individual cookie (typically 1 hour to 2 years).

6. Your Rights

You have the right to exercise the following rights by contacting us at the email address provided in section 1:

  1. Access: You have the right to know which personal data we process about you.

  2. Correction: You can request that incorrect information be corrected.

  3. Deletion (“right to be forgotten”): You can request that your data be deleted, provided there is no statutory retention period or other lawful basis for processing.

  4. Restriction: You can request that we restrict the processing of your personal data.

  5. Data Portability: You have the right to receive the data you have provided to us in a machine-readable format.

  6. Complaint: You have the right to lodge a complaint about our processing of personal data with the Norwegian Data Protection Authority (Datatilsynet).