Privacy Policy

1. Introduction

This privacy policy describes how Arealize AS (“Arealize”) processes personal data as the data controller, and helps you understand what rights you have as a data subject in this regard. The privacy policy will change from time to time, and the current version will always be available on Arealize’s website.

Arealize also processes personal data as a data processor on behalf of companies that are customers and use Arealize’s software platform. Such processing is subject to Arealize’s data processing agreement with the respective customers and the customers’ own privacy policies.

2. Personal data, purposes, and legal bases for processing

2.1 Personal data processed to provide Arealize’s services

Arealize processes personal data about people who register user accounts on the software platform Arealize offers via its website, in order to provide its services and enable login to the platform. The personal data may include name, email address, employer/company affiliation, role, and login metadata (IP address, information about the browser used, login time, geolocation, etc.). The legal basis for this processing is Arealize’s legitimate interest in providing its services and fulfilling agreements with its customers, cf. GDPR Article 6(1)(f).

2.2 Personal data processed for marketing and sales purposes

If you subscribe to newsletters or marketing material, Arealize will use your registered personal data to keep you updated on product updates and other business-related news. The personal data may include your name, email address, employer/company affiliation, and role. The legal basis for this processing is your consent, cf. GDPR Article 6(1)(a), or, if you are a registered user of Arealize’s software platform, Arealize’s legitimate interest in keeping users informed and updated about Arealize’s services, cf. GDPR Article 6(1)(f).

Arealize may use personal data from willing customers and users in connection with the publication of references or similar content on Arealize’s website and in other channels. The personal data may include name, employer/company affiliation, and role. The legal basis for this processing is your consent, cf. GDPR Article 6(1)(a).

Arealize processes personal data about potential customers or customer representatives for marketing and sales purposes. The personal data may include name, email address, telephone number, and employer/company affiliation. The legal basis for this processing is Arealize’s legitimate interest in marketing its business and services to potential customers, cf. GDPR Article 6(1)(f).

2.3 Personal data processed for operational and communication purposes

Arealize processes personal data that is necessary to maintain normal operations and business-related communication, e.g. in connection with support, contact with suppliers and customers, contact with potential candidates for employment, etc. The personal data may include name, email address and contact information, and employer/company affiliation and role. Depending on the person Arealize communicates with, and what the communication concerns, the legal basis for processing will be Arealize’s legitimate interest in maintaining business-related communication, cf. GDPR Article 6(1)(f).

3. Third parties and sharing of personal data

Arealize uses third-party service providers to deliver its services and will share personal data with these providers as necessary to operate and improve our platform. Beyond this, Arealize will not share personal data with third parties, unless it follows from an agreement or instruction, or is necessary to comply with legal obligations, cf. GDPR Article 6(1)(c).

4. Information security and retention time

Arealize will implement appropriate technical and organisational measures to achieve a level of security appropriate to the risk, in accordance with GDPR Article 32. The personal data processed under this privacy policy will be stored for as long as is necessary for the processing purposes set out above.

5. Your rights

Arealize processes personal data in accordance with applicable data protection legislation, including the Personal Data Act and the GDPR, under which data subjects have certain rights.

As a data subject, you can request information about, and access to, all personal data Arealize processes about you. You may also request rectification and erasure of your personal data, restriction of processing, and transmission of the personal data to you in a machine-readable format.

When Arealize’s processing of personal data is based on your consent, you may withdraw your consent at any time. The withdrawal of consent will not affect the lawfulness of the processing carried out before the consent was withdrawn.

If you believe that Arealize has not complied with your rights under applicable data protection legislation, you can complain to the Norwegian Data Protection Authority.

Any questions about your rights under this privacy policy can be directed to contact@arealize.ai.