Privacy

Privacy policy

Last updated 11 October 2026

Who is the data controller?

ResupplyNorway is the data controller for information submitted through this website. Questions can be sent to post@resupplynorway.com or raised by phone on +47 948 18 520.

What information do we collect?

When you send an enquiry, we store contact details, the chosen service, business details if provided, requirements, locations, timing, terrain information, requested reporting, free text and any attachments you upload. We also store technical information such as timestamps and an irreversible hash of the network address to limit spam.

Why do we process the information?

We use the information to assess your enquiry, contact you, prepare a quote and, where applicable, plan and document an agreed job. The basis is your consent before submission and, when you request a quote or enter an agreement, necessary steps before or during a contract.

Storage and access

Form data is stored in an access-restricted database and attachments in private object storage. Files are not published on the website. Only people who need the information to follow up the enquiry should have access. Technical service providers may process data on our behalf.

Retention periods

Enquiries that do not lead to work are deleted or anonymised when no longer needed, normally within 18 months. Information relating to agreements may be retained as long as needed for delivery, documentation and legal requirements.

Interest as a carrier or partner

When you register interest as a carrier, we store your name, contact details, home and working areas, availability, and what you write about experience, activity, training and motivation. For businesses and specialist partners, we also store business details, specialist fields, capacity and desired collaboration. We do not ask for national identity numbers or health information in the public form.

The information is used to consider an initial conversation and follow up your enquiry. Submission is not an offer of employment, work or a partnership, and no fully automated decisions are made. Access is limited to people following up recruitment and partnerships. Resend may be used to notify our internal inbox that a new enquiry has been stored.

Enquiries that do not lead to further dialogue are deleted or anonymised when no longer needed, normally within 12 months. If an ongoing employment, work or partnership relationship is established, necessary information is processed further on the basis of that relationship.

Interest in Resupply Training

When you register interest in testing Resupply Training, we store your name, email address, chosen programme, timestamp, consent and any comment. We use this information to follow up your interest and contact you about testing. We do not ask for health information. The form does not create an account or subscription.

Information is stored in the access-restricted database for interest enquiries. Resend is used to notify ResupplyNorway’s inbox. You can withdraw consent and request deletion by contacting us. Information is deleted or anonymised when no longer needed, normally within 12 months if your interest does not lead to further dialogue.

Your rights

You can request access, correction, deletion or restriction, or object to processing. You can also withdraw consent. Contact us using the email address above. You have the right to complain to the Norwegian Data Protection Authority (Datatilsynet).

Closed platform pilot

The platform is open as a limited pilot for invited users. During this phase, users can create accounts, complete profiles, select local teams, view published jobs and express interest. Job managers can create jobs and follow staffing.

Information in the platform

We process names, email addresses, assigned roles, account status, home areas, optional local teams, profile text, expressions of interest and job involvement. When an administrator sends an operational or job-related message, the message and delivery status are stored. For secure login, we also process passwords in encrypted and irreversible form, email verification, two-factor details, active sessions, network addresses, browser information, and security and audit events. Do not enter health information or other sensitive personal information in free-text fields.

Platform purposes and legal bases

Account, profile, team and job information is used to provide access to the pilot, administer the user relationship, staff jobs and contact relevant people. The legal basis is the agreement to participate in the pilot and actions requested by the user. Login data, security events and audit logs are processed based on our legitimate interest in protecting accounts and data, controlling access and reviewing administrative actions. The platform does not make decisions about users solely automatically.

Platform access and providers

Users can access their own information. Authorised administrators receive access only when their role and task require it. Cloudflare provides hosting, databases and private storage, and Resend is used for account, security, operational and job-related messages. Each message is sent separately to its recipient. Providers process information on our behalf under agreed security and privacy terms.

Platform retention periods

Account and profile information is retained while the account is active or the user has an ongoing relationship with ResupplyNorway. When the account or relationship ends, information is deleted or anonymised within 90 days. Expired, revoked and used invitations are deleted within 30 days of becoming inactive. Operational messages and delivery statuses are deleted after 180 days. Security and audit logs are retained for 24 months. Information needed for legal obligations or job documentation may be retained longer.

Map service

The route tool uses map tiles from Kartverket’s cache service. When you open the map, your browser connects directly to Kartverket and sends the technical request information needed to retrieve map tiles. Read more in Kartverket’s privacy policy and their terms of use.

Analytics and marketing

The website is prepared for analytics and advertising measurement, but these services must not be activated without valid configuration and the required consent system. Essential security and storage functions work independently of marketing tracking.