Privacy Policy
Last updated: 2026-03-10
Data Controller
Broentech Sentinel AS (org.nr 835 459 322), located in Horten, Norway, is the data controller for personal data processed through this website.
Contact: stian@broentech.no
What Data We Collect
Account information: When you create an account, we collect your display name, email address, and authentication credentials. If you sign in with Google, we receive your name and email from Google.
Messages: When you send messages through the platform, we store the message content, your user ID, and timestamps.
Meeting bookings: When you book a meeting, we store your company name, organization number, meeting description, and booking details.
Contact form submissions: When you use the contact form, we collect your name, email, subject, and message.
Legal Basis for Processing
We process your data based on the following legal grounds under GDPR Article 6:
Consent (Art. 6(1)(a)): You provide consent when creating an account and accepting these terms.
Contract performance (Art. 6(1)(b)): Processing is necessary to provide the services you have requested, such as messaging and meeting bookings.
Legitimate interest (Art. 6(1)(f)): We have a legitimate interest in preventing abuse and maintaining platform security.
Data Retention
Account data is retained for as long as your account is active.
Messages and bookings are retained for as long as your account exists.
Contact form submissions are retained for up to 12 months.
You may request deletion of your data at any time through your profile page.
Third-Party Processors
Google Firebase: We use Google Firebase for authentication, database storage, and hosting. Google processes data in accordance with their Data Processing Terms. Data may be stored in EU/EEA data centers.
Google Calendar: If you book a meeting, a calendar event may be created via the Google Calendar API.
Google reCAPTCHA: We use reCAPTCHA v3 on the contact form to prevent automated abuse. This service may collect usage data as described in Google's Privacy Policy.
Google Analytics: We use Google Analytics 4 (GA4) to collect anonymous website usage statistics. Data is processed by Google in accordance with their Data Processing Terms. IP anonymization is enabled. Analytics data is retained for 14 months. Analytics cookies are only set after you give explicit consent.
We do not sell your data to third parties.
Your Rights
Under GDPR, you have the following rights regarding your personal data:
Right of access: You can download all your data from your profile page.
Right to rectification: You can update your profile information.
Right to erasure: You can delete your account and all associated data from your profile page.
Right to data portability: Your data export is provided in a machine-readable JSON format.
Right to object: You can contact us to object to specific processing activities.
Right to lodge a complaint: You have the right to lodge a complaint with the Norwegian Data Protection Authority (Datatilsynet) at datatilsynet.no.
Security
We implement appropriate technical and organizational measures to protect your personal data, including encrypted data transmission (HTTPS), server-side authentication verification, and access controls.
Changes to This Policy
We may update this privacy policy from time to time. The last updated date at the top of this page indicates when the policy was last revised. Continued use of the service after changes constitutes acceptance of the updated policy.