This policy explains what personal data Nordic BESS collects through this website and through contact with us, why we collect it, and what rights you have. Personal data is any information that can be linked to you as a person, such as your name, email address or IP address.
Last updated: October 2026
1. Who is responsible
NORDIC BESS AS is the data controller for the processing described in this policy.
NORDIC BESS AS, Stortingsgata 6, 0161 Oslo, Norway. Org. no. 937 489 080.
Questions about this policy or your data: info@nordicbess.com
2. What this policy covers
This policy covers:
visits to this website
enquiries sent to us by email or through our contact form
job applications sent to us
contact with suppliers, subcontractors and business partners
It does not cover websites we link to, or our pages on social media platforms. Those are governed by their own privacy policies.
3.1 When you visit our website
When you visit the website, our hosting provider automatically processes technical data needed to deliver the site and keep it secure. This includes your IP address, browser type, device type, the pages you visit and the time of your visit.
We use privacy-friendly analytics to understand how the website is used, for example which pages are visited most. These statistics are aggregated. They do not use cookies and are not used to identify you.
Legal basis: our legitimate interest in operating a secure, functional website and improving its content (GDPR Article 6(1)(f)).
3.2 When you contact us
If you email us or use our contact form, we process the information you give us. This is usually your name, email address, company and the content of your message. We use it only to respond to you and follow up on your enquiry.
Legal basis: our legitimate interest in responding to enquiries (GDPR Article 6(1)(f)). If your enquiry relates to a possible contract with us, the basis is taking steps at your request before entering into a contract (GDPR Article 6(1)(b)).
We delete enquiries when they are no longer needed, and no later than 6 months after our last contact, unless the enquiry leads to an ongoing business relationship.
3.3 When you apply for a job
If you send us a job application, we process the information in your application, CV and any other documents you share. We may also process notes from interviews and, with your knowledge, information from references you have named.
Legal basis: taking steps at your request before entering into an employment contract (GDPR Article 6(1)(b)).
You do not need to share sensitive information, such as health information, in your application. If you choose to do so, we process it only with your explicit consent or where the law requires it.
If you are not hired, we delete your application no later than 6 months after the recruitment process ends. If you would like us to keep your application for future roles, we will ask for your consent.
3.4 Suppliers, subcontractors and business partners
When we work with suppliers, subcontractors and partners, we process contact details of their employees and representatives, such as name, role, email address and phone number. We also process information included in tenders, quotes and contracts.
Legal basis: performance of a contract (GDPR Article 6(1)(b)), our legitimate interest in managing business relationships (GDPR Article 6(1)(f)), and compliance with legal obligations such as Norwegian accounting legislation (GDPR Article 6(1)(c)).
We do not sell personal data.
We use trusted service providers (data processors) that process data on our behalf and only according to our instructions:
Website hosting and analytics: Framer B.V., Netherlands
Email and office software: Microsoft (Microsoft 365), which hosts our email, including messages sent to info@nordicbess.com
IT services: external IT service providers or consultants who help us maintain our internal systems
We may also share data with public authorities where we are legally required to do so.
Some of our service providers may process data outside the European Economic Area. Where this happens, we make sure the transfer is protected by appropriate safeguards, such as an EU adequacy decision or the European Commission’s Standard Contractual Clauses.
We keep personal data only as long as necessary for the purpose it was collected for, or as long as the law requires. Retention periods for each purpose are listed in section 3.
We use technical and organisational measures to protect personal data against unauthorised access, loss or misuse. Access is limited to people who need it for their work.
Under data protection law, you have the right to:
Access: get a copy of the personal data we hold about you
Rectification: have inaccurate or incomplete data corrected
Erasure: have your data deleted in certain situations
Restriction: ask us to limit how we use your data in certain situations
Objection: object to processing based on our legitimate interests
Data portability: receive data you have given us in a machine-readable format, where processing is based on consent or contract
Withdraw consent: at any time, where processing is based on consent. This does not affect processing carried out before you withdrew it.
To exercise your rights, contact us at info@nordicbess.com. We will respond without undue delay, and no later than one month after receiving your request.
If you believe we are processing your data unlawfully, you can lodge a complaint with the Norwegian Data Protection Authority (Datatilsynet) at datatilsynet.no. We would appreciate the chance to resolve your concern first, so please contact us directly.
This website contains links to other websites, including our LinkedIn page. We are not responsible for how those websites process personal data. If you follow or interact with us on social media, the platform processes your data according to its own privacy policy.
We may update this policy when our services or legal requirements change. The current version is always available on this page, with the date of the latest update shown at the top.