Privacy policy

For data about accounts, billing, customer contact and visits to this website, Itema AS (org. no. 882 067 122, Brøsetvegen 164B, 7069 Trondheim, Norway), which provides Licens, is the controller.

For data our customers enter into the service – such as names and e-mail addresses of agreement owners, vendor contacts and the content of uploaded documents – the customer is the controller and Itema AS is the processor. This is governed by the data processing agreement.

Account and login: name, e-mail address, mobile number if you use SMS reminders, and two-factor authentication details. Purpose: to give you access and send reminders. Legal basis: contract (GDPR Art. 6(1)(b)).

Billing: company name, organisation number, billing address and payment information. Card details are processed by Stripe and not stored by us. Legal basis: contract and legal obligation under bookkeeping rules (Art. 6(1)(b) and (c)).

Activity log and security: who changed what and when, and technical data needed to protect the service. Legal basis: legitimate interest in keeping the service secure and traceable (Art. 6(1)(f)).

Customer contact: e-mails you send us. Legal basis: legitimate interest in responding to enquiries (Art. 6(1)(f)).

We use Plausible to measure visits to this website. Plausible doesn't use cookies, doesn't store IP addresses and doesn't collect information that identifies you. The data is stored in the EU.

Account data is kept for as long as you have an account. When an organisation is deleted, its data and documents are removed from the service, and from backups within the backup retention period. Accounting records are kept for as long as bookkeeping rules require.

You have the right of access, rectification, erasure, restriction, data portability and to object to processing based on legitimate interest. If your request concerns data a customer has entered into the service, we'll pass it on to that customer. You can also complain to the Norwegian Data Protection Authority (Datatilsynet).

An organisation's owner can export or delete the entire organisation from the settings at any time.

Questions about privacy? Send us an e-mail via the contact page, or write to Itema AS, Brøsetvegen 164B, 7069 Trondheim, Norway.