Privacy policy
Compilo AS, organisation number 995 781 778 (“Compilo”, “we”, “us”, “our”), cares about your privacy and processes personal data securely, correctly and lawfully. This policy explains how we process personal data when you visit web.compilo.no or contact us through this website.
This privacy policy applies to:
- visitors to this website;
- people who register for a course or webinar using the form on this website;
- people who email an address published on this website, including with support questions.
It does not cover our products Kvalitet and Bridge, which have their own privacy policies, or customer contracts, invoicing and other processing outside this website. If you apply for a job or internship through the Confirma group careers page, a separate policy applies. You can find it here. This website has no application form.
Cookies on this website are described in our cookie policy.
Data controller
Compilo is the data controller for the processing described in this policy. That means we decide which personal data is processed through this website and for what purpose, and that the processing must comply with the General Data Protection Regulation (GDPR).
How we collect your personal data
If you visit the website, we process technical data generated by the visit, including your cookie choice. If you accept analytics, we also process aggregated usage data. You can read more in the cookie policy.
If you use a form on the website, or email an address published here, we process the personal data you give us.
Details of our processing
The tables below describe the categories of personal data, the purposes, the legal basis, how long the data is kept, and who receives it.
To provide a functioning website
| Purpose | To provide a working website and remember your cookie choice. |
|---|---|
| Data | IP address and other technical information from the visit. Your cookie choice, stored in cc_cookie. Google Fonts and Cloudflare (cdnjs) may receive technical data, such as IP address, when fonts and icons are loaded. |
| Legal basis | Legitimate interest in providing a working and secure website, including through strictly necessary cookies (GDPR Article 6(1)(f)). |
| Retention | cc_cookie remains for up to 182 days, or until you delete it. Other technical data is kept only as long as needed to operate and secure the site. See the cookie policy. |
| Recipients | Vercel, which hosts the website. Google, for fonts. Cloudflare, for icons. |
To analyse how the website is used
| Purpose | If you have given your consent, to analyse aggregated use of the website in order to improve it. We do not use this for advertising or to analyse marketing campaigns. |
|---|---|
| Data | Aggregated statistics via Plausible Analytics, such as pages viewed, referrer and device type. Plausible does not set a tracking cookie, does not use local storage, and does not keep a lasting user ID. IP address is used to create a daily hash and is not stored as such. Your choice is stored in cc_cookie. |
| Legal basis | Consent (GDPR Article 6(1)(a)). You can withdraw or change your consent at any time via Administrer cookies in the footer. Read more in the cookie policy. |
| Retention | Aggregated analytics are kept according to the retention settings in our Plausible account. The consent cookie lasts up to 182 days. |
| Recipients | Plausible Analytics, only if you consent. Plausible processes this data in the EU. |
To handle the course and webinar form
| Purpose | To communicate with you and handle a registration you send through the course and webinar form on this website. |
|---|---|
| Data | Name, role, email address, telephone number, organisation, and which event you register for. |
| Legal basis | Steps at your request before a contract, or performance of a contract, if you register in your own name (GDPR Article 6(1)(b)). Legitimate interest if you register as a representative of an organisation (GDPR Article 6(1)(f)). |
| Retention | For as long as needed to administer the event and the related communication. We then delete the data, unless the law requires a longer period or we need it to establish, exercise or defend a legal claim. |
| Recipients | Compilo’s event system at compilo.no, which receives the form, and the IT suppliers that operate that system. |
To answer email sent to addresses on this website
| Purpose | To communicate with you when you email an address published on this website, such as support@compilo.no or an employee’s address, including about support questions. |
|---|---|
| Data | Your email address. Name, telephone number, organisation and any other information you include in the message. |
| Legal basis | Steps before a contract if you contact us in order to enter into an agreement (GDPR Article 6(1)(b)). Otherwise, legitimate interest in offering a contact channel and answering questions about our services (GDPR Article 6(1)(f)). |
| Retention | For as long as the communication continues, and then deleted unless a longer period is required by law or to establish, exercise or defend a legal claim. |
| Recipients | The Compilo staff who handle the message, and the supplier of our email system. |
Longer retention
Notwithstanding the retention periods above, we may keep your personal data for longer if the law requires it, or if we need it to establish, exercise or defend a legal claim.
Transfers outside the EU/EEA
We and our suppliers process personal data both inside and outside the EU/EEA. Plausible processes website analytics in the EU. Our host (Vercel), Google Fonts and Cloudflare may process technical data outside the EU/EEA.
Where personal data is processed outside the EU/EEA, we make sure the transfer complies with data protection law. We do that either by relying on a country that the European Commission has decided provides an adequate level of protection, or by using appropriate safeguards such as the Commission’s standard contractual clauses. You can read about adequacy decisions and the standard contractual clauses on the Commission’s website.
Your rights
You have the rights below in relation to the processing described in this policy. To use them, contact us using the details below.
- Right to withdraw consent. Where processing is based on your consent, you may withdraw it at any time. We then stop that processing unless another legal basis applies. You can withdraw analytics consent via Administrer cookies in the footer.
- Right of access. You may ask whether we process your personal data. If we do, you may receive information about the processing, including the purpose, the categories of data and how the data is handled. You may request a copy. The first copy is free.
- Right to rectification. You may have inaccurate personal data corrected without undue delay, and ask us to complete incomplete data.
- Right to object. You may object at any time to processing based on legitimate interest. We may continue only if we demonstrate compelling legitimate grounds that override your interests, rights and freedoms, or if the processing is necessary to establish, exercise or defend a legal claim. You may also object at any time to processing for direct marketing, and we must then stop. This website is not used for newsletters or other direct marketing.
- Right to erasure. You may ask us to erase your personal data. We must do so if the data is no longer needed, if the processing is based on consent and you withdraw it, if you object to direct marketing, if you object to legitimate-interest processing and there are no overriding grounds, if the processing is unlawful, or if erasure is required by law. We are not obliged to erase data where we must keep it to comply with a legal obligation or to establish, exercise or defend a legal claim.
- Right to restriction. You may require us to restrict processing while we verify accuracy that you dispute, where the processing is unlawful and you prefer restriction to erasure, where we no longer need the data but you need it for a legal claim, or while we assess an objection.
- Right to data portability. Where processing is based on your consent or on a contract with you, and is carried out by automated means, you may receive the personal data you provided in a structured, commonly used and machine-readable format, and ask us to transmit it to another controller where that is technically possible.
- Right to lodge a complaint. You may lodge a complaint with the Norwegian Data Protection Authority (Datatilsynet). You can read more on their website.
Contact
If you want to contact us about the processing described in this policy:
Compilo AS
Organisation number: 995 781 778
Email: support@compilo.no
This privacy policy was adopted by Compilo AS on 28 September 2026.