Privacy policy

Updated 18.09.2025

About this Privacy Policy

This privacy policy applies to Netsecurity AS (also referred to as "we" or "us"). We act as the data controller for the processing of personal data described in this policy. For contact information regarding privacy-related questions or inquiries, see section 5.

1. Categories of Data Subjects

This privacy policy describes our processing of personal data related to the following categories of data subjects:

Contacts and employees of our corporate clients.
Contacts and other private individuals who have consented to receive direct marketing communications.
Other private individuals who use Netsecurity’s services.
Job applicants
Assignments and Deliveries
Digital Security Services

2. Purpose, Types of Personal Data, and Legal Basis

Below, we outline the purposes for our processing of personal data, the types of data processed, and the legal basis for such processing.

2.1 Direct Marketing

With the active consent of our customers and contacts, we collect personal data in connection with the distribution of our newsletters and other relevant marketing communications. Newsletters or other communications to customers and contacts will include information about our products, services, expert articles, seminars, webinars, events, and courses. In this context, we will process the following personal data:

Name/contact name
Email
Phone number
Employer
Title

Processing of personal data in connection with our marketing communications is based on contact consent and follows Article 6(1)(a) of the General Data Protection Regulation (GDPR).

2.2 Processing of Personal Data Related to Registration for Our Seminars, Webinars, Events, and Courses

To fulfill our contractual obligations related to your registration for our seminars, webinars, events, and courses, it is necessary for us to process some of your personal data. In this context, we will process the following data:

Name/contact name
Email
Phone number
Employer
Title

Processing of the above personal data is required for participation in the relevant seminar, webinar, event, or course. We process only the personal data provided by you in the registration form. The processing is necessary for us to fulfill our agreement with you as a customer, see GDPR Article 6(1)(b), and also serves a legitimate purpose, see GDPR Article 6(1)(f).

2.3 Processing of Personal Data When We Communicate Directly With You

We also process your personal data in connection with daily case management. This is necessary to provide a satisfactory customer experience regarding our products, services, seminars, webinars, events, and courses. In this context, we process the following personal data:

Name/contact name
Email
Phone number
Employer
Title

Processing of personal data in connection with your correspondence with us serves a legitimate purpose, see GDPR Article 6(1)(f).

2.4 Job Applicants

We process personal data about you in connection with job postings and your application. Job applicants receive direct information about which processes they will participate in, and where/how personal data is processed. For more information regarding storage and deletion, see section 4.

Name
Address
Email
Phone number
Application/CV
Certificates/transcripts
References’ statements
Background checks
Internal evaluations/interview notes
Personality and aptitude tests
Presentation videos

2.5 Assignments and Deliveries

Netsecurity has no inherent interest in collecting or processing personal data in connection with assignments and deliveries but may, in some cases, process personal data as part of an assignment or delivery. This includes the following areas:

Consultancy services
Advisory services
Product sales

Handling of personal data in connection with assignments and deliveries is regulated in the respective assignment contracts.

2.6 Digital Security Services

Netsecurity Digital Security Services provide services designed to actively reduce and manage risks related to digitalization. These services include:

Security Monitoring (MDR)
Netsecurity Incident Response Team (IRT)

Netsecurity may, in connection with the delivery of Digital Security Services, collect and process information related to devices, users, or services to the extent necessary to deliver the services in accordance with the relevant service agreement. The handling of personal data is regulated in the legal terms and the related data processing agreement for the individual service agreement, with Netsecurity acting as the data processor.

2.7 Cookies

We use cookies to gain insight into user interactions on our websites. A cookie is a text file stored on the user’s computer when visiting a website. Cookies are used, among other things, to recognize the sites a user visits, improve the website, and tailor product and service offerings.

3. Partners We Share Personal Data With

We do not sell, trade, or otherwise transfer your personal data to third parties, except for trusted third parties who assist us in operating our websites and business activities, delivering ordered goods, or providing services. Access to personal data is limited to personnel who need access to perform their tasks. Data processing agreements require our partners, such as IT service providers, to work in a structured, risk-based manner, with continuous improvement and an adequate level of privacy and information security.

4. Storage of Personal Data

Personal data for which Netsecurity is the data controller will not be stored in our CRM and ERP systems longer than necessary to fulfill the purpose of processing or any legal obligations imposed on Netsecurity.

5. Your Rights

As a data subject, you have the right to request access to the personal data we have registered about you for which Netsecurity is the data controller. You may also request correction, deletion, and restrictions on the processing of personal data by contacting personvern@netsecurity.no.

You may withdraw your consent to marketing or change your preferences at any time by using the unsubscribe/administration link included in all our emails. If you are still dissatisfied, you have the right to file a complaint with the Norwegian Data Protection Authority. Processing of personal data in connection with the exercise of data subjects’ rights follows GDPR Articles 15-22 and 77.

6. Information Security

Netsecurity’s management system is certified according to ISO 9001 and ISO 27001 quality and security standards. Netsecurity has implemented organizational and technical measures to ensure your personal data is processed securely and in accordance with requirements for integrity, confidentiality, and availability in the applicable privacy legislation. Information security in our IT systems is regularly assessed through risk management, internal and external audits. Assessments regarding the level of data protection are conducted if personal data may be transferred to countries outside the EU/EEA. Where our processing involves transferring personal data out of the EU/EEA, we ensure measures are in place to protect the information.

7. Changes to the Privacy Policy

We may make changes to this privacy policy. Significant changes will be published as news. The latest version is available on our website.

8. Contact Us

At Netsecurity, we prioritize privacy and information security every day. If you have questions about privacy or how we process your personal data, please contact Netsecurity’s privacy contact via email at personvern@netsecurity.no or by mail: Netsecurity AS, Drammensveien 288, 0283 OSLO.

We will respond to your inquiry as quickly as possible.