Privacy Policy

1. Introduction

Testnor AS ("we", "us", or "our") operates the website testnor.com. This Privacy Policy explains how we collect, use, and protect your personal data when you visit our website or sign up for our newsletter.We are committed to protecting your privacy and complying with applicable data protection laws, including the EU General Data Protection Regulation (GDPR), the Norwegian Personal Data Act (Personopplysningsloven), and the California Consumer Privacy Act (CCPA).

2. Data Controller

The data controller responsible for your personal data is Testnor AS, email: support@testnor.com

3. Personal Data We Collect

We collect the following categories of personal data:

Newsletter registration data — email address, first name, last name, company, and country, when you sign up for our newsletter.
Technical data — IP address and browser type, collected automatically via Cloudflare for security purposes.

We do not collect payment information, create user accounts, or knowingly collect data from individuals under the age of 16.

4. How We Use Your Data

We use your personal data for the following purposes:

To send you our newsletter and relevant updates (based on your consent).
To maintain the security and performance of our website (legitimate interest).
To comply with legal obligations.

5. Legal Basis for Processing (GDPR)

Under the GDPR, we process your personal data on the following legal bases:

Consent (Article 6(1)(a)) — for newsletter subscriptions. You may withdraw your consent at any time by clicking the unsubscribe link in any email we send you.
Legitimate interests (Article 6(1)(f)) — for website security and fraud prevention.
Legal obligation (Article 6(1)(c)) — where processing is required by law.

6. Cookies

Our website uses cookies. A cookie is a small text file stored on your device. We use the following cookies:

Strictly necessary cookies — set by Cloudflare for bot protection and spam filtering (Cloudflare Turnstile). These do not require your consent as they are essential for the secure operation of the site.

We do not currently use analytics or marketing cookies. Should this change, we will update this policy and request your consent where required. You can manage or delete cookies via your browser settings at any time.

7. Third-Party Services

We use the following third-party service providers who may process your data on our behalf:

Cloudflare — provides CDN, security, and spam protection. Data may be processed in the USA. Cloudflare is certified under the EU-U.S. Data Privacy Framework.
EmailOctopus — our newsletter platform, where your registration data (email, name, company, and country) is stored and used to send you updates. EmailOctopus is GDPR-compliant and does not sell your data.

We do not sell your personal data to third parties.

8. International Data Transfers

Some of our service providers are located outside the European Economic Area (EEA). Where we transfer data internationally, we ensure appropriate safeguards are in place.

9. Data Retention

We retain your personal data only for as long as necessary for the purposes described in this policy:

Newsletter registration data (email, name, company, country) — retained until you unsubscribe or request deletion.
Server logs and technical data — retained for up to 90 days.

10. Your Rights

Depending on your location, you may have the following rights regarding your personal data:

Right to access — request a copy of the data we hold about you.
Right to rectification — request correction of inaccurate data.
Right to erasure — request deletion of your data ("right to be forgotten").
Right to restrict processing — request that we limit how we use your data.
Right to data portability — receive your data in a structured, machine-readable format.
Right to object — object to processing based on legitimate interests.
Right to withdraw consent — for any processing based on consent, withdraw at any time.

California residents also have rights under the CCPA, including the right to know what personal information is collected, the right to delete personal information, and the right to opt out of the sale of personal information. We do not sell personal information.To exercise any of these rights, please contact us at support@testnor.com. We will respond within 30 days.

11. Right to Lodge a Complaint

If you believe we are processing your personal data unlawfully, you have the right to lodge a complaint with your national data protection authority. In Norway, this is: Datatilsynet (Norwegian Data Protection Authority), website: www.datatilsynet.no

12. Changes to This Policy

We may update this Privacy Policy from time to time. The date at the top of this document indicates when it was last revised. We encourage you to review this page periodically.

13. Contact Us

If you have any questions about this Privacy Policy or how we handle your data, please contact us: Testnor AS, email: support@testnor.com