Privacy

Who is responsible

LedLys AS, Sandgata 55, 7012 Trondheim, Norway, is the data controller for the personal data processed through this website. If you have questions about privacy, contact us at arvid@ledlys-as.no.

Cookies and tracking

The website sets no cookies before you have said yes to it. We use Google Analytics for statistics, but only if you accept in the message shown when you arrive at the site (see "Statistics (Google Analytics)"). If you reject, or do not answer, nothing is loaded from Google. We do not use advertising or marketing tools. Fonts, images and maps are hosted on the website itself. The only other thing loaded from another site is the chat on the Norwegian pages, described under "The chat".

Your choice is stored in your browser (local storage), so you are not asked on every page. It is not a cookie, and it is not sent to anyone. You can change or withdraw your choice at any time by pressing "Cookies" at the bottom of the page.

Like every web server, the server at our web host (PRO ISP) logs technical details about each request, including IP address, time and the page requested. The logs are used for operation and security.

Statistics (Google Analytics)

If you accept, we use Google Analytics 4 to see how many people visit the website, which pages are read and how visitors find us. Google Ireland Limited processes the data on our behalf.

Two cookies are then set: _ga and one called _ga_ followed by a code. They give your browser a random identifier, so that we can tell visits apart, and they last for up to two years. Google receives, among other things, your IP address, your browser and device, which pages you view and where you came from. Google Analytics does not store your IP address. We have turned off the advertising and personalised advertising features, so the data is not used for marketing. We only see aggregated figures, not who you are.

Detailed data about individual visits is stored by Google for two months. The reports with aggregated figures are kept longer. Google may process the data in the USA, under the EU Standard Contractual Clauses or the EU–US Data Privacy Framework. You can read more in Google's information about privacy in Analytics.

The legal basis is the consent you give by pressing "Accept" (GDPR Article 6(1)(a)). You can withdraw it at any time by pressing "Cookies" at the bottom of the page and choosing "Reject". The cookies are then deleted and the site stops sending anything to Google.

The contact form

When you send a message through the contact form, we receive your name, your e-mail address, your telephone number if you give it (optional), your choices about what the enquiry is about, and the message you write. The data is sent as an e-mail to LedLys AS and stored in a closed administration page that only employees with a login and a one-time code can access. It is used only to answer and follow up your enquiry, and we do not use it for marketing.

The legal basis is the consent you give by sending the form (GDPR Article 6(1)(a)). You can withdraw your consent at any time by contacting us.

To prevent misuse of the form, such as spam and mass mailing, we temporarily store an encoded (hashed) value of your IP address. It is deleted automatically shortly afterwards. The legal basis is our legitimate interest in protecting the website against misuse (Article 6(1)(f)).

Your enquiry ends up in our e-mail account at Domeneshop, is sent through the web host PRO ISP and is stored in the administration page at the same web host. They process the data on our behalf and do not use it for their own purposes. We do not pass the data on to anyone else.

We delete the enquiry automatically after 24 months, or earlier when it is no longer needed to answer you or follow up the matter, unless we are required to keep it, for example under the accounting rules if the enquiry leads to a sale.

Backups of the administration page (the enquiries and the newsletter list) are taken daily and deleted after 14 days, so something we delete may remain in a copy for up to 14 more days.

We also count, anonymously, how many people reach each step of the form and how many send it, so that we can make the form easier to use. Only the number per day and step is stored. No name, e-mail address, IP address or anything on your device is stored in that count, and it cannot be linked to you. What you type in the form is not sent until you press "Send enquiry".

The newsletter

On the Norwegian front page you can subscribe to the newsletter from LedLys AS, which is written in Norwegian. You first receive an e-mail with a link you must press to confirm the subscription (double opt-in), and only then are you added to the list. If you do not confirm within 30 days, the address is deleted again.

We store your e-mail address, the times of subscription and confirmation, the text you consented to and your IP address at the time you confirmed, as documentation of the consent. The data is in the closed administration page at the web host PRO ISP, and only employees with a login and a one-time code can access it. We use it only to send you the newsletter from LedLys AS. When sending, we may use an e-mail service that processes your address on our behalf.

The legal basis is the consent you give by subscribing and confirming (GDPR Article 6(1)(a) and Section 15 of the Norwegian Marketing Control Act). You can unsubscribe at any time with the link in every newsletter, or by contacting us. The IP address is then deleted, but we keep the e-mail address on a list of unsubscribed addresses, so that you do not receive the newsletter by mistake. If you want us to delete the address completely, contact us at arvid@ledlys-as.no.

The chat

On the Norwegian pages of this website (not on the English pages) there is a chat in the bottom corner, provided by Otal AS (Sandgata 55, 7012 Trondheim, Norway, org. no. 984 238 002). It answers questions about LedLys AS using artificial intelligence, and we may follow up the conversation ourselves.

The chat is loaded from otal.no when you open a Norwegian page. Otal then receives, among other things, your IP address and information about your browser, as every website does when you visit it. The chat uses no cookies, but stores a small technical setting in your browser (local storage) to remember unread messages.

If you write in the chat, your messages and any attachments are stored by Otal, and we can read them. Do not write more personal information than necessary, and never sensitive information.

Otal processes the data on our behalf and stores it in the EU. Otal uses sub-processors, including Anthropic for the AI model that produces the answers, and some of them may process data in the USA. The transfer is made under the EU Standard Contractual Clauses or the EU–US Data Privacy Framework. You can read more in Otal's privacy statement.

The legal basis for showing the chat and for Otal receiving your IP address is our legitimate interest in being able to answer visitors quickly (Article 6(1)(f)). When you write a message, the legal basis is the consent you give by sending it (point (a)). You can withdraw your consent at any time by contacting us.

We delete the conversations when they are no longer needed to answer you or follow up the matter, unless we are required to keep them.

Your rights

You have the right to access, correct and delete the data we hold about you, and to ask for the processing to be restricted. Contact us at arvid@ledlys-as.no and we will help you. If you believe that we process personal data in breach of the rules, you can complain to the Norwegian Data Protection Authority (Datatilsynet).

Links to other websites

The website links to other websites, for example Google Maps and the manufacturers' sites. When you follow such a link, the privacy rules of that website apply, and we are not responsible for them.