How AIRIT handles personal data

This page tells you what we collect about you, why, how long we keep it and the rights you have. The policy is versioned, so you can always see what has changed.

Version: 5.1
Last updated: 14 October 2026; Applies to airit.no and to AIRIT’s contact with customers, prospects and webinar participants.

1. Who is responsible for your data

AIRIT AS is the data controller. That means we decide why and how your data is processed, and we are responsible for doing it correctly.

AIRIT AS
Org. no.: 931 971 786
Offices: Oslo, Hamar, Trondheim
Privacy email: personvern@airit.no
Postal address: To follow

For customers in Denmark, AIRIT ApS, CVR no. 465 602 99, Copenhagen, is responsible for the customer relationship. The two companies use the same systems and follow this policy.

2. What we process, why and for how long

We process only what the purpose requires. Each situation is described separately below.

When you contact us

When: You use the contact form, send an email or call.
Data: Name, email, company if you give it, and what you write to us.
Purpose: Reply to you and follow up on your enquiry.
Legal basis: Our legitimate interest in answering enquiries (GDPR article 6(1)(f)). If the enquiry concerns a quote, the basis is that we are preparing a contract with you (article 6(1)(b)).
Retention: 12 months after the last contact, unless you become a customer.

When you want to hear about webinars

When: You leave your email address on the webinar page, or you register for a webinar. Registration happens at Livestorm, where you give your name, email and company.
Data: Your email address. When you register, also your name and company, and what you write in chat and questions during the webinar.
Purpose: Send you the link to the webinar, an email when new webinars are ready, and the recording afterwards.
Legal basis: The consent you give in the form (GDPR article 6(1)(a)). You can withdraw it at any time.
Retention: Until you unsubscribe. Every email has an unsubscribe link.

When you are a contact person at a customer

When: Your organisation has an agreement with AIRIT.
Data: Name, job title, email, phone, and what we have agreed, delivered and invoiced.
Purpose: Fulfil the agreement: installation, operation, support and invoicing.
Legal basis: The agreement with the customer (GDPR article 6(1)(b)) and our accounting obligations (article 6(1)(c)).
Retention: For as long as the agreement runs. Accounting records are kept for five years after the financial year, as Norwegian accounting law requires.

Data in the solutions we deliver

Access logs and video recordings in Avigilon Alta (Motorola Solutions) belong to the customer. The customer is the controller and AIRIT is the processor. That means we process the data only on the customer’s instructions, governed by a data processing agreement. Our technicians enter the system only when the customer asks for support, and access is logged. The customer decides how long data is kept in their system.

3. Visiting airit.no

The website is hosted by Google Firebase Hosting. The server logs IP address, time and the page you requested. The logs are technical, used for operations and security, and we do not use them to identify you.

We use Google Analytics to measure how the website is used: which pages are visited, for how long, and where visitors come from. It sets cookies, small text files in your browser, only after you have accepted in the banner. Your IP address is shortened before it is stored. You can change your choice at any time via "Cookies" at the bottom of the page.

If you choose a language, your browser stores the choice locally. It is not a cookie, and the choice is not sent to us.

The forms are sent to HubSpot, our customer system, together with the address of the page you sent from. HubSpot processes the data on our behalf.

Videos from YouTube and Vimeo load only when you press the play button. From then on the provider’s own privacy terms apply.

4. Who we share data with

We never sell data. We share only with suppliers that do a job for us and are bound by a data processing agreement. That is an agreement obliging the supplier to process the data only as we instruct.

HubSpot: customer system (CRM) and forms
Google Analytics: measurement of traffic on the website
Livestorm: registration and delivery of webinars
Microsoft 365: email, calendar, documents and meetings in Teams
Google Firebase: hosting of the website
Avigilon Alta (Motorola Solutions): the cloud platform for access control and video, for data in customer solutions

Some suppliers process data outside the EEA, including in the United States. Such transfers rest on a lawful basis under GDPR chapter V, such as the European Commission’s standard contractual clauses.

We disclose data to the police or other authorities only when the law requires it.

5. How we protect the data

Access is given only to employees who need it for their work, and removed when the need ends. All traffic to airit.no and to our systems is encrypted (HTTPS), so nobody can read it in transit. If we discover a breach that may affect you, we notify you and the supervisory authority within 72 hours, as the law requires.

6. Your rights

Under the GDPR you have these rights:

Access: Learn what data we hold about you, and get a copy.
Rectification: Have inaccurate or incomplete data corrected.
Erasure: Have data deleted that we no longer have grounds to keep.
Restriction: Ask us to pause processing while we look into an objection.
Data portability: Receive the data you gave us in a machine-readable format.
Objection: Object to processing we base on legitimate interest.
Withdraw consent: Withdraw a consent at any time. It does not affect processing already carried out.

Write to personvern@airit.no. We reply within 30 days. We may ask you to confirm your identity before we release data.

If you disagree with how we handle your data, you can complain to Datatilsynet in Norway or Datatilsynet in Denmark.

7. Changes to this policy

We update the policy when we change what we process, which suppliers we use or how the website works. Each version gets a new number and date, and the change is listed in the log below. We notify customers of major changes by email.

Version log for the privacy policy
Version	Date	Change
5.1	14 October 2026	The form for notifications about new webinars is now sent to HubSpot, like the contact form. No new supplier.
5.0	13 October 2026	New supplier: Google Analytics measures traffic on the website, with a consent banner and anonymised IP address. Cookies are set only after consent.
4.3	13 October 2026	The cookie section is prepared for traffic measurement with a consent banner. The site still sets no cookies.
4.2	13 October 2026	Layout: the page has its own share image for links in social media. No change to the content.
4.1	13 October 2026	Layout: the table of data can now be scrolled and focused with the keyboard. No change to the content.
4.0	8 October 2026	Registration for webinars now happens at Livestorm (new processor) instead of Microsoft Teams. Name, email and company are collected when you register.
3.0	8 October 2026	The contact form is now sent to HubSpot (processor, EU region) instead of opening the email program. The webinar form is unchanged. No tracking cookies.
2.2	8 October 2026	The contact form no longer has an “industry” field. The list of data collected is corrected.
2.1	2 October 2026	Webinars: the form now collects only an email address, and registration for the webinar itself happens in Microsoft Teams. Retention changed to “until you unsubscribe”.
2.0	2 October 2026	Rewritten: controller for Norway and Denmark, purpose, legal basis and retention per processing activity, our role as processor, cookies, suppliers, the right to complain and this version log.
1.0	1 October 2026	First version, published with the new website.

Questions about privacy

Write to us and we reply within 30 days.

personvern@airit.no All contact details