Privacy and Cookie Policy

Carbon Centric AS

Last updated: March 2026

1. Introduction

Carbon Centric AS (“Carbon Centric”, “we”, “us”) is committed to protecting your personal data and ensuring that it is processed responsibly and in accordance with applicable data protection legislation, including the EU General Data Protection Regulation (GDPR).

This Privacy and Cookie Policy explains:

what personal data we collect
how we use it
the legal basis for processing
how long we store it
your rights regarding your personal data
how we use cookies and analytics tools

This policy applies to visitors to our website, business contacts, partners, customers and other individuals interacting with Carbon Centric.

By using our website and digital channels, you acknowledge the practices described in this policy.

2. Data Controller

Carbon Centric AS is the data controller responsible for the processing of personal data described in this policy.

Carbon Centric AS
Kalnesveien 5
1712 Grålum
Norway

Organisation number: 927 461 137

For questions regarding privacy or personal data processing, please contact:
Email: kj@carboncentric.no

3. Personal Data We Collect

We may collect and process the following categories of personal data.

Contact Information

name
email address
phone number
company name and job title

Communication Data

Information you provide when contacting us through:

email
website contact forms
meetings or events
business correspondence

Website Usage Data
When visiting our website we may collect technical information such as:

IP address
browser type
device type
operating system
pages visited
time and duration of visits

Business Relationship Data
When working with customers, partners or investors we may process information necessary to manage the relationship and deliver services.

4. Purpose of Processing

We process personal data for the following purposes:

responding to inquiries and contact requests
managing business relationships with partners, customers and stakeholders
providing information about our services and activities
sending newsletters or other communication you have subscribed to
improving our website and communication
complying with legal and regulatory obligations

5. Legal Basis for Processing

We process personal data based on the following legal grounds under GDPR Article 6.

Legitimate Interest
Processing necessary for:

managing professional relationships
responding to inquiries
communicating with partners and stakeholders
improving our services and website

Consent

Where required, such as for:
newsletter subscriptions
certain marketing communications
cookies requiring consent

You may withdraw consent at any time.

Legal Obligations
Processing necessary to comply with legal requirements such as accounting, regulatory or reporting obligations.

6. Email Communication and Tracking

When communicating with partners, customers or professional contacts by email, Carbon Centric may use standard email technologies such as tracking pixels or link tracking.

This may allow us to understand whether emails are opened and whether links are clicked.

Information collected may include:

email open events
link clicks
approximate location based on IP address
device or email client type

The purpose is to:

improve communication with business contacts
follow up on relevant inquiries
understand engagement with information we send

The legal basis for this processing is Carbon Centric’s legitimate interest in managing professional communication. If you prefer not to have email interactions tracked, you may disable automatic image loading in your email client.

7. Cookies and Analytics

Our website uses cookies and similar technologies.

Cookies are small text files stored on your device when visiting a website. They help websites remember user preferences and improve functionality.

We use cookies for the following purposes:

ensuring basic website functionality
analysing website traffic and usage
improving user experience
supporting communication and marketing activities

Types of Cookies

Necessary cookies
Required for basic functionality of the website.

Analytics cookies
Used to collect aggregated statistics about website usage.

Marketing and communication cookies
Used to understand how visitors interact with our website and communication.

We use HubSpot, a customer relationship management and marketing automation platform, to manage website interactions, forms, analytics and communication.

HubSpot may collect information such as:

IP address
browser type
device information
pages visited
time spent on pages
form submissions
interactions with emails and website content

This information helps us improve our website, communication and services.

Where required by law, cookies are used based on user consent.

You can manage or disable cookies through your browser settings. Disabling cookies may affect the functionality of the website.

8. Third-Party Services

We may use third-party service providers to operate our business and website, including providers for:

website hosting
analytics tools
customer relationship management (CRM) systems
email communication platforms

One of the service providers we use is HubSpot, which provides tools for website forms, communication management, analytics and customer relationship management.

These providers process personal data on our behalf as data processors and only to the extent necessary to perform their services.

Where personal data is transferred outside the EU/EEA, appropriate safeguards are implemented in accordance with GDPR.

9. Data Retention

We retain personal data only for as long as necessary for the purposes described in this policy, including:

managing business relationships
responding to inquiries
fulfilling contractual obligations
complying with legal requirements

Certain information may be stored for longer periods if required by law, such as accounting legislation which may require storage for up to seven years.

When personal data is no longer required, it will be securely deleted or anonymised.

10. Your Rights

Under the GDPR you have the following rights regarding your personal data:

right to access your personal data
right to request correction of inaccurate data
right to request deletion of personal data
right to restrict processing
right to object to processing based on legitimate interest
right to data portability where applicable

If you have subscribed to newsletters or other communication, you may unsubscribe at any time using the link provided in the email.

You also have the right to lodge a complaint with the Norwegian Data Protection Authority (Datatilsynet).

To exercise your rights, please contact us using the contact details above. We will respond as soon as possible and no later than one month after receiving your request.

11. Links to Other Websites

Our website may contain links to external websites such as LinkedIn, YouTube or other services.

Carbon Centric is not responsible for the privacy practices or content of such third-party websites. We recommend reviewing their privacy policies before providing personal information.

12. Updates to This Policy

This Privacy and Cookie Policy may be updated from time to time to reflect changes in legal requirements or business practices.

The latest version will always be available on our website.