Privacy
Privacy policy
How Nuvinno processes personal data when you use our website or contact us.
Last updated: 3 August 2026
1. Controller
Nuvinno Group AS is the controller for personal data collected through this website and in connection with enquiries to us.
Head office: Nuvinno Group AS, Tærudgata 1, 2004 Lillestrøm, Norway (org. no. 936 226 248). Email: info@nuvinno.com.
We also have offices in Gothenburg and Örebro in Sweden. The controller for the website and enquiries via nuvinno.com is Nuvinno Group AS.
We have not appointed a data protection officer. Privacy questions should be sent to info@nuvinno.com.
2. What data we process
We only process data that is necessary for the purpose. This may include:
- Contact details you send us via your email client from the contact page (name, organisation, email, phone number and message). These details are not stored on the website; they are sent directly to us as email.
- Approximate country code (e.g. NO/SE) from CDN/proxy headers, used to suggest a language on first visit – not precise location or GPS.
- Language preference stored in the first-party cookie nv_lang.
- Technical data such as IP address, browser type, device and pages visited – where enabled via cookies or similar technology after consent.
- Cookie consent records (via Cookie Information).
3. Purposes and legal bases
We use personal data for the following purposes:
- Responding to enquiries and following up service requests – legal basis: legitimate interests or steps prior to a contract (GDPR Art. 6(1)(f) or (b))
- Remembering and showing the website in your chosen language (including a first-visit language suggestion based on country code) – legal basis: legitimate interests / necessary to provide the multilingual service you request (Art. 6(1)(f))
- Operating, securing and troubleshooting the website – legal basis: legitimate interests (Art. 6(1)(f))
- Statistics and website improvement where you have consented – legal basis: consent (Art. 6(1)(a))
We do not send newsletters or other marketing from this website. If we later offer marketing, it will only happen with consent or where the law allows, and this policy will be updated.
Where we rely on legitimate interests, you may object by contacting info@nuvinno.com. For the language cookie you can also delete nv_lang in your browser or choose a language manually.
4. Cookies
We use Cookie Information to collect and document consent. Necessary cookies are used for the site to function. Analytics and marketing cookies are only loaded after consent.
You can change or withdraw consent at any time using the button below, or via “Cookie settings” in the site footer. An updated overview of cookies loaded after consent is also available in the Cookie Information declaration.
Key first-party and consent-related cookies:
| Name | Provider | Purpose | Duration | Category |
|---|---|---|---|---|
| nv_lang | Nuvinno (first party) | Remembers selected language (no/en/sv) | 1 year | Necessary |
| Cookie Information cookies | Cookie Information | Stores and documents cookie consent | Per vendor declaration | Necessary |
| Analytics/marketing cookies (e.g. via Google Tag Manager / Google Analytics) | Google / others, when enabled | Statistics and any marketing | Varies | Only after consent |
WordPress may set its own cookies for logged-in users (administration). These do not apply to ordinary visitors on the public website.
5. Sharing with others
We do not sell personal data. Data may be shared with suppliers that process data on our behalf, for example:
- Website hosting and operations providers (server operations and delivery of the pages)
- Cookie Information ApS (consent platform and consent documentation)
- Google Ireland Limited / Google LLC – only if you consent to analytics or marketing (e.g. Google Tag Manager / Google Analytics)
- Email and collaboration tools when we follow up enquiries you send us
Such suppliers process data under agreement and only on our instructions. Where data is transferred outside the EU/EEA, we ensure a lawful basis, such as the EU Commission’s standard contractual clauses (SCCs) or an equivalent approved mechanism.
6. Retention
We keep personal data only for as long as necessary for the purpose:
- Email enquiries: normally up to 24 months after the last dialogue, unless longer retention is required for a contract or legal claims
- nv_lang: up to 1 year, or until you delete the cookie / change language
- Cookie consent documentation: in line with Cookie Information retention and applicable requirements
- Technical logs: normally up to 90 days for security and operations, unless longer retention is needed to handle an incident
7. Your rights
You have the right to access, rectification, erasure, restriction, data portability and – in certain cases – to object to processing. Where processing is based on consent, you may withdraw consent at any time without affecting the lawfulness of processing before withdrawal.
To exercise your rights, contact info@nuvinno.com. You may also lodge a complaint with the Norwegian Data Protection Authority (datatilsynet.no) or the supervisory authority where you live or work.
8. Security
We implement technical and organisational measures to protect personal data against unauthorised access, loss and misuse. Access is limited to people who need the data for their work. More about how we work with security is available on the Information security page.
9. Changes
We may update this policy when practices, services or regulations change. The updated version is published on this page with a new “last updated” date.