Privacy Policy

As a Norway-based company, bluZenit takes data protection and compliance with the Norwegian Personal Data Act and the General Data Protection Regulation (EU) 2016/679 (GDPR) seriously. The data and photos displayed on the bluZenit website are for your information only. Further distribution or use of the contents by third parties is not permitted. We ask for your compliance. This applies particularly to all personal data mentioned there including photographs of any person (individual or group photos).

This data protection declaration serves to inform visitors to the bluZenit website in accordance with the provisions of Articles 13 and 14 of the GDPR (duty to provide information). This only concerns information regarding the data processing procedures associated with visiting the website.

 

1. Name and contact details of the person responsible for data processing and the company privacy contact

This data protection information applies to data processed by:

BluZenit AS (hereafter called “bluZenit”)

Luramyrveien 29, 4313 Sandnes, Norway

Phone: +47 952 07 347

VAT ID No.: 928 108 856

In this respect bluZenit is the responsible party.

The contact details of bluZenit’s privacy contact point are:

Runar Reve (Privacy Officer / contact person for privacy matters), runar@bluzenit.com, +47 977 96 702

This function has been established on a voluntary basis. bluZenit has not appointed a statutory Data Protection Officer under Article 37 GDPR, as bluZenit’s processing activities do not fall within the categories for which such appointment is mandatory (i.e. large-scale systematic monitoring or large-scale processing of special categories of data, or processing by a public authority). The title “Privacy Officer” is therefore used to avoid any implication that the role carries the independence guarantees and reporting protections reserved for a statutory DPO under Articles 38–39 GDPR.

This privacy contact acts on behalf of bluZenit AS.

 

2. Collection and storage of personal data as well as method and purpose of their use

a) Data processing when visiting the bluZenit website

When you visit the bluZenit website, the browser on your device automatically sends information to the server on our website. This information is temporarily stored in a so-called log file. The following information is recorded without your intervention:

  • IP address of the requesting computer
  • Date and time of access
  • Name and URL of the retrieved file
  • Website from which access is made (referrer URL)
  • The browser used and, if applicable, the operating system of your computer, as well as the name of your access provider

This log-file data is retained for a maximum of 90 days, after which it is automatically deleted, unless a longer retention period is required to investigate a specific security incident.

The aforesaid data will be processed by bluZenit for the following purposes:

  • Ensuring a smooth connection to the bluZenit website
  • Ensuring the bluZenit website is user-friendly
  • Evaluation of system security and stability (in particular, monitoring for and investigating unauthorised access attempts and ensuring server performance), as well as
  • For other administrative and statistical purposes

The legal basis for data processing is Article 6 para. 1 sentence 1 lit. f GDPR. bluZenit’s legitimate interest follows from the purposes listed above, in particular the security and reliable technical operation of the website. Under no circumstances does bluZenit use the data collected for the purpose of drawing conclusions about you personally.

In addition, bluZenit uses cookies and analysis services. You will find more detailed explanations under Sections 4 and 5 of this data protection declaration, including the correct legal basis applicable to each.

b) Data processing when using contact forms

On the bluZenit website there is a contact form that you can use to get in touch with us (see also Section 6(c) on the underlying Elementor Forms technology and Section 9 on the hosting environment in which this data is stored). The form includes mandatory fields which must be filled in, e.g. name, e-mail address and other relevant information. A valid e-mail address is required so that we know who sent the request and to enable us to respond to it. Additional information may be voluntarily entered by you as a visitor/inquirer in the contact form.

Data processing for the purpose of making contact, as described above, is carried out in accordance with Article 6 para. 1 sentence 1 lit. a GDPR and with your voluntary consent. This is preceded by the technical option of giving consent by crossing a so-called checkbox (opt-in). By crossing the box you as a visitor give your consent to bluZenit to process your data upon sending the contact form.

The personal data collected by bluZenit through the contact form will be processed and stored only until your enquiry has been fully handled, and will in any event be deleted no later than 12 months after your enquiry is closed, unless a longer retention period is required by law (e.g. to comply with statutory documentation obligations).

 

3. Forwarding of personal data to third parties

Your personal data will not be forwarded to third parties for purposes other than those listed below.

Your personal data will only be passed on to third parties if:

  • you have given your express consent pursuant to Article 6 para. 1 sentence 1 lit. a GDPR,
  • the disclosure is necessary pursuant to Article 6 para. 1 sentence 1 lit. f GDPR in order to assert, exercise or defend legal claims and there is no reason to assume that you have an overriding interest worthy of protection in not disclosing your data (legitimate interest),
  • there is a legal obligation for the disclosure pursuant to Article 6 para. 1 sentence 1 lit. c GDPR, or this is legally permissible and required under Article 6 para. 1 sentence 1 lit. b GDPR for the processing of contractual relationships with you.

 

4. Data processing with the use of cookies

bluZenit uses so-called cookies on its website. Cookies are small files which your browser automatically creates and which are stored on your device (laptop, tablet, smartphone, etc.) when you visit the bluZenit website. Cookies do no damage to your end device and do not contain viruses, Trojans or any other harmful software.

Information is stored in the cookie, which arises in connection with the specifically used end-device. However, this does not mean that bluZenit immediately becomes aware of your identity.

The use of cookies serves, on the one hand, to make the use of our website more pleasant for you. bluZenit uses so-called session cookies to recognise that you have already visited individual pages of the website. These are automatically deleted after leaving the bluZenit website.

In addition, bluZenit also uses temporary cookies that are stored on your terminal for a specified period of time to optimise user-friendliness. If you visit the bluZenit website again, it is automatically recognised that you have already visited the bluZenit website and what entries and settings you have made, so that you do not have to enter them again.

bluZenit also uses cookies to statistically record the use of the website and to evaluate it with the purpose of optimising the website for you (see Section 5). These cookies enable bluZenit to automatically recognise that you have already visited the website as a visitor the next time you visit. These cookies are automatically deleted after a defined period of time, in line with the cookie lifespans configured in Cookiebot (see below).

Necessary/strictly-necessary cookies required for the functioning of the website are placed on the basis of Article 6 para. 1 sentence 1 lit. f GDPR (bluZenit’s legitimate interest in a functioning website). Statistics cookies (including Google Analytics, see Section 5) and any marketing cookies are placed only after you have given your prior, informed and specific consent pursuant to Article 6 para. 1 sentence 1 lit. a GDPR via the Cookiebot consent banner described below.

Most browsers automatically accept cookies. However, you can configure your browser so that no cookies are stored on your computer or so that a message always appears before a new cookie is created. In this respect, a banner will be displayed indicating this option. Nonetheless, the complete deactivation of cookies may prevent you from using all the functions of the bluZenit website.

Cookie consent management (Cookiebot)

bluZenit uses the consent management platform Cookiebot, provided by Cybot A/S, Havnegade 39, 1058 Copenhagen, Denmark, to obtain, document, manage and renew your consent to the use of cookies and similar technologies on our website. When you first visit the bluZenit website, a cookie banner is displayed which allows you to accept or decline individual categories of cookies (e.g. necessary, preferences, statistics, and marketing cookies) before any non-essential cookie is set.

Cookiebot itself sets a cookie to store your consent choices, so that you are not asked again on subsequent visits and so that bluZenit can demonstrate compliance with its obligation to obtain consent. This consent-log cookie is stored for approximately 12 months. The legal basis for this processing is Article 6 para. 1 sentence 1 lit. f GDPR (bluZenit’s legitimate interest in verifiable, GDPR-compliant cookie management).

You can change or withdraw your consent at any time via the cookie settings link/icon on the bluZenit website. Further information on Cookiebot’s own data processing is available in Cookiebot’s privacy policy at https://www.cookiebot.com/en/privacy-policy/.

 

 

5. Data processing with analysis tools

Google Analytics

bluZenit uses Google Analytics (GA4) for the purpose of demand-oriented design and ongoing optimisation of the bluZenit website. Because Google Analytics uses cookies that are not strictly necessary for the operation of the website, it is only activated once you have given your prior, specific, informed and unambiguous consent to “statistics” cookies via the Cookiebot banner described in Section 4. The legal basis for this processing is therefore Article 6 para. 1 sentence 1 lit. a GDPR (your consent), and not Article 6 para. 1 sentence 1 lit. f GDPR. If you do not consent, Google Analytics is not activated and no related cookies are placed.

Google Analytics is provided by Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland, which acts as the contracting entity for EEA-based customers such as bluZenit; data may be processed onward by its parent company, Google LLC, 1600 Amphitheatre Parkway, Mountain View, CA 94043, USA (together “Google”). Google Analytics 4 does not store raw IP addresses by default; the following categories of data may nonetheless be processed:

  • browser type/version,
  • operating system used,
  • referrer URL (the previously visited page),
  • an approximate location derived from a truncated/anonymised IP address,
  • time of the server request.

The information is used to evaluate the use of the bluZenit website, to compile reports on website activities, and to provide further services associated with the use of the website and the internet for the purpose of market research and demand-oriented design of those internet pages. The information may also be transferred to third parties if required by law or if third parties process this data on behalf of Google.

Data is retained within Google Analytics for 14 months from the date of collection, after which it is automatically deleted, in accordance with the retention setting configured for bluZenit’s Google Analytics property.

International data transfer. Data collected via Google Analytics is transferred from Google Ireland Limited onward to Google LLC in the United States. This onward transfer takes place on the basis of the EU-U.S. Data Privacy Framework, to the extent Google LLC is a certified participant at the relevant time, and/or the European Commission’s Standard Contractual Clauses as an appropriate safeguard under Chapter V GDPR. You may request further information about the specific safeguards in place by contacting bluZenit using the details in Section 1.

You may withdraw your consent to Google Analytics at any time via the Cookiebot settings link/icon. You can also prevent the collection of data generated by cookies and related to your use of the website, and the processing of this data by Google, by downloading and installing a browser add-on (Google Analytics Opt-out Browser Add-on).

For further information on data protection in connection with Google Analytics, please refer to the Google Analytics Help Centre.

 

6. Data processing with plug-ins and links

bluZenit uses plug-ins and links on the bluZenit website on the basis of Article 6 para. 1 sentence 1 lit. f GDPR, in order to increase awareness of bluZenit AS. The underlying purpose — brand awareness and recruitment — is regarded as a legitimate interest within the meaning of the GDPR. Responsibility for data-protection-compliant operation of third-party platforms lies with the provider in question. Where applicable, these plug-ins and links are integrated by bluZenit by means of the so-called two-click method, in order to protect visitors to bluZenit’s website in the best way possible.

bluZenit has active profiles on LinkedIn and Facebook.

bluZenit uses social media to keep you updated about us and our activities, and for recruitment purposes. If you choose to follow or like our social profiles, your personal data (such as your name and the fact that you are interested in bluZenit) can be visible to people browsing your personal social profiles. If you interact with our social profiles or content posted by us, we may receive personal data about you, such as your (user) name, profile photo, hometown, email address, phone number, and gender (depending on your own privacy settings). Examples of interactions with our profiles include commenting on our posts, creating visitor posts, or sending us a personal message.

Joint controllership for LinkedIn and Facebook company pages. 

By operating and maintaining company pages on LinkedIn and Facebook, bluZenit obtains audience and “insights” statistics about visitors to those pages from the respective platform. In line with the Court of Justice of the European Union’s judgment in Wirtschaftsakademie Schleswig-Holstein (C-210/16), bluZenit is, for this specific processing (the generation and use of page-visit statistics/insights data), a joint controller together with Meta Platforms, Inc./Meta Platforms Ireland Limited (for the Facebook page) and LinkedIn Corporation/LinkedIn Ireland Unlimited Company (for the LinkedIn page), within the meaning of Article 26 GDPR.

The essential terms of the respective arrangements between bluZenit and each platform regarding this joint processing are set out in Meta’s Page Insights Controller Addendum and LinkedIn’s equivalent page-insights terms, as made available by each platform to page administrators. Both arrangements designate the platform (Meta or LinkedIn, as applicable) as the primary point of contact for data subjects wishing to exercise their rights in relation to the insights processing. You may also direct any queries relating to this processing to bluZenit using the contact details in Section 1, and we will forward these as appropriate.

We may use our followers as targeted audiences for marketing activities on social media. [To be confirmed: if this consists of ordinary in-platform advertising directed at bluZenit’s existing followers using LinkedIn’s or Facebook’s native advertising tools, the platform is the independent controller for the ad-serving process itself. If bluZenit instead uploads follower or customer contact lists to create Custom Audiences (Meta) or Matched Audiences (LinkedIn), this constitutes a separate processing activity for which bluZenit is itself a controller, requiring its own Article 6 legal basis (legitimate interest, subject to a documented balancing test, or consent) and a corresponding Article 13(2)(b)/(e) disclosure — this section should be finalised once the technical implementation is confirmed.]

a) LinkedIn

bluZenit uses a button to connect to the social network LinkedIn in several places. This is only a link and not a so-called “social plugin”. If you do not use the button, no information is transmitted to LinkedIn, and no LinkedIn cookie is placed on your computer.

As soon as you click the button, without being logged in to LinkedIn, the login screen of LinkedIn opens in a new window after confirmation via the two-click method. In that case, it is possible that LinkedIn places a cookie on your hard drive. bluZenit acquires no knowledge of the content of the data transmitted or how LinkedIn uses it.

Sites contained within LinkedIn are operated exclusively by LinkedIn Corporation, 2029 Stierlin Court, Mountain View, CA 94304, USA. The data LinkedIn collects on these pages is therefore outside bluZenit’s sphere of knowledge and influence, save for the joint-controller processing described above in relation to bluZenit’s LinkedIn company page.

Further details on data collection and your legal rights, as well as setting options, can be obtained from LinkedIn’s Privacy Policy and User Agreement.

b) Facebook

bluZenit uses a button to connect to the social network Facebook in several places. This is only a link and not a so-called “social plugin”. If you do not use the button, no information is transmitted to Facebook, and no Facebook cookie is placed on your computer.

As soon as you click the button, without being logged in to Facebook, the login screen of Facebook opens in a new window after confirmation via the two-click method. In that case, it is possible that Facebook places a cookie on your hard drive. bluZenit acquires no knowledge of the content of the data transmitted or how Facebook uses it.

Sites contained within Facebook are operated exclusively by Meta Platforms, Inc., 1601 Willow Road, Menlo Park, CA 94025, USA. The data Facebook collects on these pages is therefore outside bluZenit’s sphere of knowledge and influence, save for the joint-controller processing described above in relation to bluZenit’s Facebook company page.

Further details on data collection and your legal rights, as well as setting options, can be obtained from Facebook’s Terms of Service.

c) Elementor Forms

bluZenit uses the native Elementor Forms widget to build and operate the contact form (see Section 2(b)) and the newsletter sign-up form described in Section 6(d) of this policy. Submitted form data is transmitted to and stored on bluZenit’s own servers/hosting environment (see Section 9) and is not shared with Elementor or other third parties as part of the form submission process itself. Depending on configuration, form data may additionally be forwarded by e-mail to bluZenit or stored in a connected database for the purpose of processing your enquiry or request.

d) Newsletter sign-up

The bluZenit website includes a newsletter sign-up form, built using the native Elementor Forms widget, where you can register your interest in receiving future updates from us. At present, bluZenit does not send out newsletters; we only collect and store the e-mail address you provide, so that we can contact you once a newsletter service is launched. Your e-mail address is not shared with others and is not used for any other purpose.

Data processing is based on your voluntary consent pursuant to Article 6 para. 1 sentence 1 lit. a GDPR, given when you submit the form. You can withdraw your consent and request deletion of your e-mail address from this list at any time by contacting us using the details in Section 1 of this policy. Before bluZenit begins sending newsletters, a data processing agreement compliant with Article 28 GDPR will be entered into with the relevant email service provider, and this policy will be updated to describe that processing (including how to unsubscribe) in more detail.

 

7. Your rights

You have the following rights:

  • To request information about your personal data processed by bluZenit pursuant to Article 15 GDPR. In particular, you may request information about the purposes of processing, the categories of personal data, the categories of recipients to whom your data have been or will be disclosed, the planned storage period, the existence of a right of rectification, deletion, restriction of processing or objection, the existence of a right of appeal, the origin of your data (if not collected by us), and the existence of automated decision-making including profiling and, if applicable, meaningful information on its specifics.
  • To immediately request the amendment of incorrect or incomplete personal data stored by bluZenit pursuant to Article 16 GDPR.
  • To request the deletion of your personal data stored by bluZenit pursuant to Article 17 GDPR, unless the processing is necessary to exercise the right to freedom of expression and information, to fulfil a legal obligation, for reasons of public interest, or to assert, exercise or defend legal claims.
  • To request, pursuant to Article 18 GDPR, the restriction of the processing of your personal data, if you dispute the accuracy of the data, if the processing is unlawful but you refuse to have the data deleted, if bluZenit no longer needs the data but you need it to assert, exercise or defend legal claims, or if you have filed an objection to the processing pursuant to Article 21 GDPR.
  • To request, pursuant to Article 20 GDPR, that the personal data you have provided to bluZenit be received in a structured, commonly used and machine-readable format, or to have the data transferred to another responsible party.

bluZenit does not engage in automated decision-making, including profiling, within the meaning of Article 22 GDPR, which produces legal effects concerning you or similarly significantly affects you.

In accordance with Article 7 para. 3 GDPR, you may revoke your consent to bluZenit at any time. Consequently, bluZenit is no longer allowed to continue processing data based on this consent in the future.

If you exercise any of the above rights, bluZenit will respond without undue delay and in any event within one month of receipt of your request. This period may be extended by a further two months where necessary, taking into account the complexity and number of requests; if so, we will inform you of any such extension and the reasons for the delay within one month of receipt of the request, in accordance with Article 12(3) GDPR.

In accordance with Article 77 GDPR, you can complain to a supervisory authority — in Norway, the Norwegian Data Protection Authority (Datatilsynet) — or the supervisory authority at your usual place of residence or workplace.

 

8. Right of recourse

If your personal data is processed based on legitimate interests pursuant to Article 6 para. 1 sentence 1 lit. f GDPR, you have the right to object to the processing of your personal data in accordance with Article 21 GDPR, if there are reasons for this arising from your particular situation, or if the objection is directed against direct advertising. In the latter case, you have a general right of recourse, which bluZenit will implement without you needing to specify a particular situation.

If you wish to exercise your right of revocation or recourse, simply send an e-mail to runar@bluzenit.com.

 

 

9. Hosting and data security

Hosting

The bluZenit website is hosted by WP Engine, Inc., 504 Lavaca Street, Suite 1000, Austin, TX 78701, USA (“WP Engine”), acting as bluZenit’s processor pursuant to Article 28 GDPR. WP Engine’s servers process the log-file data described in Section 2(a) of this policy, as well as any content you submit through the contact form or newsletter sign-up (see Sections 2(b) and 6(c)-(d)), in order to operate and deliver the website to you. Processing is carried out on the basis of Article 6 para. 1 sentence 1 lit. f GDPR (bluZenit’s legitimate interest in a reliable, secure and well-performing website).

Where data is processed by WP Engine outside the EU/EEA (e.g. in the United States), bluZenit relies on appropriate safeguards recognised under the GDPR, such as the EU Standard Contractual Clauses, to ensure an adequate level of data protection. A data processing agreement is in place with WP Engine. [Please confirm with WP Engine which data-centre region hosts the site and update this section accordingly — if hosting is entirely within the EU/EEA, the cross-border transfer language above can be removed.]

Data security

During your visit to the bluZenit website, bluZenit uses the SSL/TLS (Secure Socket Layer / Transport Layer Security) method in conjunction with the highest level of encryption supported by your browser. Whether a page of bluZenit’s website is transmitted in encrypted form is indicated by the closed display of the key or lock symbol in the address bar of your browser.

In addition, bluZenit uses appropriate technical and organisational security measures — implemented in part through its hosting provider, WP Engine — to protect your data against accidental or intentional manipulation, partial or total loss, destruction, or unauthorised access by third parties. These security measures are continuously improved in line with technological developments.

 

10. Validity and amendment of this data protection policy

This data protection policy is currently valid as of August 2026.

Due to further developments of our website and the offers made through it, or due to changes in legal or official requirements, it may become necessary to amend this data protection policy. The current data protection policy can be viewed and printed out by you at any time on this website (bluzenit.com/privacy-policy).