NORWEP

This Privacy Policy is provided as a draft version. It is currently under review by our legal counsel, and revisions may occur before the final policy is approved and published. We appreciate your understanding as we complete this process.

1. Purpose

This Privacy Policy outlines how Norwegian Energy Partners (NORWEP) collects, uses, stores, and protects personal data. It applies to individuals who interact with NORWEP through its websites, event portal, events, and communications.

2. Legal Basis

NORWEP processes personal data in accordance with applicable Norwegian privacy laws and the European Union General Data Protection Regulation (GDPR).

3. What Data We Collect

We may collect the following personal data: name, title, email address, phone number, job address, company affiliation, market interests and professional preferences. For event participants we may also collect dietary preferences and other logistics‑related information you voluntarily provide.

4. How We Collect Data

5. How We Use Personal Data

Send relevant updates and newsletters
Verify access rights to partner content
Send event invitations and reminders
Maintain contact records and engagement history in our CRM system (HubSpot) to manage relationships and tailor communications

We do not sell or rent personal data to third parties.

6. Data Sharing

If you register for an event, your contact details may be made available to other participants through the event portal, where applicable.

We may share personal data with trusted service providers who help us deliver our services (e.g., IT and hosting providers, event partners). These parties act as data processors and are bound by data protection obligations.

7. Data Retention

Personal data is retained only as long as necessary for the purposes for which it was collected or as required by law. We apply retention schedules to periodically review and delete or anonymise data.

8. Your Rights

Access your personal data
Correct inaccurate data
Request deletion of your data
Object to or restrict processing in certain cases
Opt out of marketing communications

These rights may be limited when data must be retained for legal reasons. You can exercise your rights by contacting us - see Section 11 (Contact Information).

9. Where We Store and Process Data (HubSpot CRM)

We use HubSpot as our customer relationship management (CRM) platform to store and manage contact information, communication preferences, event interactions, and related engagement data. HubSpot acts as our data processor.

Hosting location: our HubSpot account is hosted in the European Union (Germany). Depending on the tools and integrations you use with us, limited transfers to countries outside the EEA may occur. In such cases, appropriate safeguards (such as the EU Standard Contractual Clauses) and additional measures are applied, where required.

Categories of data processed in HubSpot typically include: identification and contact details, organisation and role, preferences and interests, subscription choices, activity with our website/emails, and event registrations.

10. Cookies and Similar Technologies

Cookies are small files stored on your device when you visit our websites or event portals. We also use similar technologies (e.g., tags, pixels, local storage) for the purposes described below.

10.1 Legal basis and categories

Strictly necessary cookies enable core site functions (e.g., security, load balancing, authentication). These are placed based on our legitimate interests/necessity to provide the service and do not require consent.

Functional, Analytics and Advertising cookies are used only with your consent (opt‑in). You can provide or withdraw consent at any time via the Cookie settings link on our site. Where supported, we honour Global Privacy Control (GPC) signals.

10.2 How we use cookies

Necessary - site operation, security, content membership.
Functional - remembering choices (e.g., chat widget state), improving features.
Analytics - understanding usage to improve content and services (aggregated reporting; without consent we do not associate visits with identifiable individuals).

10.3 HubSpot cookies (examples)

Depending on your choices, HubSpot may set cookies including:

hubspotutk - stores a visitor’s unique identifier; prevents duplicate contacts (typical expiry ~6 months).
__hstc - main visitor tracking cookie (domain, utk, timestamps, session count; typical expiry ~6 months).
__hssc - session tracking (increments view count in a session; ~30 minutes).
__hssrc - indicates if a session was restarted (session).

A current, detailed list of HubSpot cookies and purposes is provided by HubSpot: https://knowledge.hubspot.com/privacy-and-consent/what-cookies-does-hubspot-set-in-a-visitor-s-browser

10.4 Managing your choices

On first visit, our banner lets you consent per category. You can change your preferences or withdraw consent at any time via the Cookie settings link in the footer. Withdrawing consent does not affect the lawfulness of processing prior to withdrawal.

10.5 Retention

Cookie lifetimes vary by category and provider. Typical durations are session‑based, 30 minutes, one day or up to six months for HubSpot analytics cookies. Exact durations may change and are reflected in the Cookie settings interface.

10.6 International transfers & hosting

Where cookies involve processing outside the EEA, we rely on appropriate safeguards (e.g., Standard Contractual Clauses) and additional measures where necessary. Our HubSpot account is hosted in the EU (Germany).

10.7 Updates to this section

We may update this section to reflect changes in our cookie use or applicable laws. The "Last updated" date at the top of this Privacy Policy indicates the latest revision.

11. Contact Information

If you have questions or requests regarding your personal data, please contact us at digital@norwep.com.