Privacy policy

Carbon Centric AS, Kalnesveien 5, NO-1712 Grålum, Norway. Business registration number: 927 461 137. Privacy contact: kj@carboncentric.no.

• Contact details: name, email address, phone number, company and job title.
• Communication data: content of emails, web forms, meetings, events and other business correspondence.
• Business relationship data: information necessary to manage agreements and deliver our services.

We also register contact details of individuals in organisations relevant to our business, without obtaining the data from the individual. Sources are publicly available: company websites, press releases, news articles, professional publications, LinkedIn and industry registers.

The data is limited to name, job title, employer, business contact details and any public statements relevant to our field (carbon capture and carbon dioxide removal). The legal basis is our legitimate interest in establishing and maintaining business relationships (GDPR Art. 6(1)(f)). We inform you of the registration at the latest at our first contact. You may object at any time, in which case we delete the data.

When you visit our website, technical data is collected via cookies: IP address, browser type, device, operating system, pages visited and visit duration. See section 7.

• Responding to inquiries: legitimate interest (Art. 6(1)(f)) / pre-contractual steps (Art. 6(1)(b)).
• Managing customer and business relationships: contract (Art. 6(1)(b)) and legitimate interest.
• Contacting potential business partners (see section 3): legitimate interest.
• Newsletters and email marketing: consent (Art. 6(1)(a), cf. the Norwegian Marketing Control Act § 15). Consent may be withdrawn at any time, including via the unsubscribe link in every mailing.
• Improving our website and communications: legitimate interest and consent (cookies).
• Compliance with legal obligations, including bookkeeping and accounting requirements: legal obligation (Art. 6(1)(c)).

We use standard email technologies (tracking pixels and link tracking) that may register email opens, link clicks, approximate location based on IP address, and device/email client type. The purpose is to improve communication and follow-up. The legal basis is legitimate interest. You can avoid tracking by disabling automatic image loading in your email client, or ask us to disable tracking for you by contacting kj@carboncentric.no.

Engagement data (email activity, website visits and form submissions) may be aggregated in our CRM and analysed to prioritise and tailor our follow-up of business contacts. This constitutes profiling for marketing and sales purposes based on legitimate interest; you may object at any time, in which case we will stop such analysis for you. The analysis is not used for decisions with legal effects for you (see section 12).

Our website uses strictly necessary cookies for basic functionality, and analytics and marketing cookies from HubSpot. Non-essential cookies are only set with your consent via the cookie banner, where consent can also be withdrawn. Cookies can also be managed in your browser settings; disabling them may affect functionality.

We do not share personal data with third parties for their own purposes. Data is processed by our data processors: HubSpot (CRM, marketing and web forms), Microsoft 365 (email, documents and storage), AI-based analysis and productivity tools used in our internal work, including Anthropic (Claude), and Vercel (website hosting provider). Data processing agreements under GDPR Art. 28 are in place with all processors.

Certain processors, including HubSpot and Microsoft, may process data in the United States. Transfers are based on the European Commission adequacy decision for the EU-U.S. Data Privacy Framework for certified organisations, supplemented by the EU Standard Contractual Clauses (SCCs) where relevant.

• Inquiries that do not lead to a business relationship: deleted no later than 24 months after last contact.
• Contact data in our CRM: reviewed regularly and deleted after 5 years without activity on our side (logged calls/meetings).
• Newsletter data: until consent is withdrawn.
• Accounting documentation: 5 years, pursuant to the Norwegian Bookkeeping Act.

Data is securely deleted or anonymised when no longer needed.

• Access to the data we hold about you.
• Rectification of inaccurate data and erasure ("right to be forgotten").
• Restriction of processing and data portability.
• Objection to processing based on legitimate interest — for direct marketing, we always stop processing upon objection.
• Withdrawal of consent at any time, without affecting the lawfulness of processing before withdrawal.

Requests can be sent to kj@carboncentric.no and will be answered within one month. You may also lodge a complaint with the Norwegian Data Protection Authority (Datatilsynet, datatilsynet.no).

We do not make decisions based solely on automated processing that produce legal effects or similarly significant effects for you.

Our website may contain links to third-party websites. We are not responsible for their privacy practices.

This policy may be updated. The current version is always available at carboncentric.no with the date of the latest update.