Privacy

01

Who this information covers

Nouit AS, organisation number 832 452 912, is the controller for information used to operate this website and handle enquiries. You can contact us at contact@nouit.no.

This information covers the main website, internal administration and demonstrations published by Nouit. Further production services, payments, import permissions and controller/processor responsibilities require a separate agreement and notice before that processing starts.

02

When you contact us

We receive what you choose to send, such as your name, email address, business and message. Contacting us is voluntary, but we need enough information to reply. Do not send passwords or sensitive information.

General enquiries and communication with business representatives are handled to reply and follow up the conversation, on the basis of legitimate interests (GDPR Article 6(1)(f)). The interest is to communicate with people who contact us. Where you are personally a party to a proposed or existing contract, necessary pre-contractual or contractual processing may rely on Article 6(1)(b).

Email links open your email app. When the contact form is enabled, Resend sends your name, email and message to the Nouit inbox. The message itself is not stored in the application database, but is processed by Resend and the existing mailbox provider. Abuse prevention stores temporary counters under a key derived from an IP address, not a copy of the message.

03

Technical operation and security

Nouit AS is responsible for the website. Technical hosting is provided by Vercel. Delivering a page involves technical information such as an IP address, requested page and browser information. Vercel processes and stores operational and security information. Optional analytics and marketing tools are not loaded without consent. After consent, Nouit may use first-party attribution data and configured Google tagging to understand which campaigns lead to enquiries.

Necessary processing for reliable operation, troubleshooting and abuse prevention relies on legitimate interests (Article 6(1)(f)). Without consent, Nouit does not persist marketing attribution on your device. Information already present in the URL may still accompany an enquiry you actively submit. Hosting-provider logs are a separate form of processing.

When automated traffic is suspected, Nouit may retain pseudonymous technical fingerprints, page and timestamps for up to 14 days for traffic quality and security. Raw IP addresses are not stored in this overview.

04

Internal login and administration

When internal administration is enabled, Nouit uses Neon PostgreSQL for administrator names, email addresses, password hashes, sessions and second-factor information. Sessions may include IP address and browser information. Resend sends login codes when the email method is selected. TOTP uses an authenticator app instead.

The purposes are access control, security and controlled publishing. Processing relies on legitimate interests in protecting the system and managing content (Article 6(1)(f)). Access is limited to approved internal users. Retention and cleanup procedures must be settled before production use.

05

Website proposals and demonstrations

A proposal may contain a business name, contact details, photos, listings and descriptions from an agreed source. Content must be reviewed before publication. Material available elsewhere is not automatically free to reuse; rights, information to data subjects and the lawful basis must be established for the actual use.

Drafts, sales status and internal notes are accessible only to administrators. A published demonstration is public to anyone who has or finds the address, even though search engines are asked not to index it. Expiry hides the page but does not delete drafts, notes or history. Deletion is a separate operation.

When a demonstration or customer site uses images from an external image host, the browser retrieves them directly from that provider. The image host may then receive technical request data, including the IP address. We restrict external image sources and do not send a referrer from the demonstration page.

06

Language and cookies

The /no or /en address determines the language. At the root address /, we use your browser language or a saved choice. We do not use IP geolocation to choose a language.

When you select a language yourself, nouit_lang stores no or en for up to 180 days. It contains no unique user ID and is not used for analytics. Optional attribution, analytics and marketing measurement are activated only if you consent on the website.

07

Providers, retention and transfers

Vercel provides technical hosting. Resend sends messages when email features are enabled. Neon provides PostgreSQL when administration or database-backed demonstrations are enabled. Incoming email and aliases remain with the existing mailbox provider. We do not sell personal information. Access should be limited to people and providers with a relevant need and covered by appropriate data processing agreements.

Vercel also uses a global delivery network and subprocessors. Running the application in Frankfurt therefore does not mean that all personal information is processed exclusively in Germany or the EEA.

If an enquiry becomes a customer relationship, further processing must be explained to the customer. Mandatory record-keeping may require longer retention and must be tied to the relevant legal obligation.

08

Your rights

You can request access, correction, erasure or restriction. Data portability applies where its conditions are met. You can object to processing based on legitimate interests. If processing later relies on consent, you can withdraw it without affecting the lawfulness of earlier processing.

Send requests to contact@nouit.no. We may need appropriate confirmation of your identity. We normally respond within one month; any lawful extension must be explained. You can complain to the Norwegian Data Protection Authority. The website does not use automated decisions or profiling with legal or similarly significant effects.