This privacy policy explains how LGR Technologies AS handles personal data in connection with this website (lgrtech.no). We have written it to be read, not skimmed past. If anything is unclear, contact us using the details below.
1. Who is responsible (data controller)
LGR Technologies AS
Org. nr. 933 959 589
VM-paviljongen, Høgskoleringen 4, 7034 Trondheim, Norway
Email: main@lgrtech.no (general) / erik@lgrtech.no
LGR Technologies AS is the data controller for the processing described here. We have not appointed a data protection officer, as we are not required to under GDPR Article 37; you can direct any privacy question to the email addresses above.
2. What this website does and does not do
This is a static informational website, deliberately built to be privacy-friendly:
- It sets no cookies and uses no localStorage or sessionStorage.
- It runs no analytics or tracking (no Google Analytics, Tag Manager, Matomo, Plausible or similar).
- It loads no third-party content on page load. Fonts are served from our own server, not from a font CDN, so your IP address is not sent to any third party when a page loads.
- The main personal data we process is what you send us through the contact form and the order form. Films on the site are served from our own server.
Because nothing is stored on, or read from, your device when a page loads, no cookie-consent banner is required. Each activity is described below.
3. The contact form
What we collect. When you use the contact form on our Contact page, you provide: first name, last name, email address, organisation (optional), inquiry type, and the free-text message you write. Only email address and message are required; the other fields are voluntary. If you leave a voluntary field blank, the only consequence is that we may know less context about your inquiry.
Why, and on what legal basis. We use this data solely to read and respond to your inquiry and to take any steps you ask for before entering into a contract. The legal basis is GDPR Article 6(1)(b) (steps at your request prior to a possible contract) and/or Article 6(1)(f) (our legitimate interest in answering inquiries about our products). We do not use contact-form data for marketing, profiling or automated decision-making.
How it is delivered. When you press send, your message is transmitted over HTTPS to our own server — the same server that hosts this website — which emails it to our mailbox at main@lgrtech.no. We do not use any third-party form service, and your submission is not transferred outside the EU/EEA at this step. Our mailbox is hosted on Microsoft 365 (see sections 5 and 6).
Retention. We keep inquiry emails for as long as needed to handle your request and for a reasonable period afterwards for follow-up and record-keeping, and we delete them when they are no longer needed.
4. Server logs
We keep limited operational and security logs to run and protect the service; they are not used to track or profile you.
5. Recipients and processors
We do not sell or share your personal data. Data is disclosed only to:
- Microsoft 365 (Microsoft) — hosts our email. Your contact-form message is delivered to and stored in our mailbox there.
- Our hosting provider — operates the server that serves this site and runs the contact-form handler (see section 4).
6. Transfers outside the EU/EEA
We keep personal data within the EU/EEA wherever possible. One limited situation can involve a third country:
- Email (Microsoft 365): Microsoft operates Microsoft 365 under its EU Data Boundary, keeping data within the EU. For any limited transfer to the United States, Microsoft is certified under the EU-US Data Privacy Framework (GDPR Article 45) and additionally offers Standard Contractual Clauses (Article 46).
7. Your rights
Under the GDPR you have the right to:
- Access — obtain confirmation of, and a copy of, the personal data we hold about you.
- Rectification — have inaccurate or incomplete data corrected.
- Erasure — have your data deleted where the conditions are met.
- Restriction — have our processing limited in certain circumstances.
- Objection — object to processing based on legitimate interest (Article 6(1)(f)).
- Data portability — receive certain data in a structured, machine-readable format.
- Withdraw consent — where processing is based on consent, withdraw it at any time without affecting the lawfulness of processing carried out beforehand.
To exercise any of these, contact us at main@lgrtech.no. We respond free of charge and without undue delay.
8. Right to complain
If you believe we are processing your personal data unlawfully, you have the right to lodge a complaint with the Norwegian Data Protection Authority (Datatilsynet), the supervisory authority for the GDPR and personopplysningsloven in Norway:
Datatilsynet — Postboks 458 Sentrum, 0105 Oslo, Norway — www.datatilsynet.no
We would, however, appreciate the chance to address your concern first.
9. Changes to this policy
If we change how we process personal data, we will update this policy and the "Last updated" date above. If a change introduces a new purpose, we will inform you before that processing begins.