Privacy policy

Data controller

Northflow Technologies / northflow.no, acts as the data controller for personal data collected through this website and related institutional engagement activities.

Contact: hello@northflow.no

Scope of data collection

Personal data collection is limited to information submitted through contact forms and institutional inquiry mechanisms. This typically includes:

• Name and professional title
• Institutional affiliation
• Email address and contact details
• Inquiry content and related correspondence

Cookie usage

This website uses cookies to ensure proper functionality and, with your consent, to improve user experience. Cookies are categorized as follows:

• Necessary cookies: Essential for site operation, security, and form submission. These cannot be disabled.
• Functional cookies: Enable enhanced features and user preferences. Require explicit consent.
• Analytics cookies: Help us understand site usage through anonymized data. Require explicit consent.

You can manage your cookie preferences at any time through the cookie consent banner or by clearing your browser data. Withdrawing consent does not affect the lawfulness of processing based on consent before withdrawal.

Purpose and legal basis

Personal data is processed for the purpose of institutional dialogue, inquiry handling, and engagement coordination. Processing is based on:

• Legitimate interest in responding to institutional inquiries
• Consent provided through form submission
• Contractual necessity for engagement activities

Personal data is not used for marketing, profiling, or automated decision-making.

Data handling and storage

Personal data is handled in accordance with data minimisation principles. Storage and processing are designed to align with European data protection standards.

Data is retained only for the duration necessary to fulfil the stated purpose or as required by applicable legal obligations.

Data subject rights

Under the General Data Protection Regulation (GDPR), individuals have the following rights:

• Right of access to personal data
• Right to rectification of inaccurate data
• Right to erasure under applicable conditions
• Right to restriction of processing
• Right to data portability
• Right to object to processing
• Right to withdraw consent at any time
• Right to lodge a complaint with a supervisory authority

Requests may be submitted to hello@northflow.no. Responses will be provided within the timeframes established by applicable regulation.

Third-party disclosure

Personal data is not shared with third parties except where necessary for the provision of requested services or as required by legal obligation.

International data transfers

Data processing is conducted within the European Economic Area or in jurisdictions providing equivalent data protection standards. Transfers outside these regions, if necessary, are conducted in accordance with applicable safeguards.

Changes to this policy

This privacy policy may be updated to reflect changes in data processing practices or regulatory requirements. Material changes will be communicated through appropriate channels.

Supervisory authority

Individuals have the right to lodge a complaint with the relevant data protection supervisory authority in their jurisdiction.