Privacy Policy

Who is the data controller? 

The General Manager of Eyde Cluster is, at all times, the data controller for personal data. In practice, our project managers and communications staff handle and use personal data. 

What is the purpose? 

The purpose of processing personal data is to carry out our core service, which is operating a member-based business cluster; planning and executing events, seminars, conferences, professional forums, and workshops; as well as developing and managing joint projects. This also includes the distribution of invitations, information, and marketing for our events, activities, and forums. 

What personal data is processed? 

The personal data collected depends on the purpose for which it is used. We do not collect more data than necessary. When registering for activities, courses, or conferences, we may collect company affiliation, full name, email address, and in some cases, payment information related to the individual or the company. We also process information about our member companies, which is not classified as personal data. When signing up for open market activities such as newsletters, webinars, or courses/conferences, we may collect company name, full name, email address, and phone number. 

Where is the data collected from? 

To participate in our activities, receive information, content, or other materials from Eyde Cluster, we need basic personal data from you. Eyde Cluster only sends information to contact persons at member companies or individuals who have actively provided their personal data. This may occur through, but is not limited to, newsletter sign-up, participation in courses/conferences, activities, or digital forums. 

Is providing personal data voluntary? 

It is not possible to carry out Eyde Cluster’s core activities without a minimum amount of personal data. When participating in a conference, personal data is needed for invoicing and follow-up. This includes non-sensitive personal data such as full name, phone number, email address, job title, company name, and company details. A large portion of our informational materials, courses, and webinars are distributed by email. We collect this data to deliver the requested content or service. We use the provided email and name for follow-up and communication. Therefore, if you are a member or wish to use our services and offerings, providing personal data is not optional. 

Is data shared with third parties? 

Our contact/member lists are, with consent, actively used in the newsletter service MailChimp to distribute relevant content. If an event—such as a conference, seminar, webinar, or course—is carried out in collaboration with a verified external partner, personal data may be shared with that partner. In such cases, we ensure that the external party does not use the data for other purposes. Apart from this, our contact lists are not shared with third parties. 

How is data deleted or archived? 

You may unsubscribe from our email list via a link included in every email we send. If you do not want your data shared with third parties like MailChimp, you must contact us directly (contact info below). If you have signed up for an upcoming Eyde Cluster event and later wish to have your personal data deleted, this cannot be done before any invoice has been paid. We may also need to retain certain data to comply with accounting laws. 

What are your rights and what laws apply? 

As a registered contact or member of Eyde Cluster, you have the right to access all personal data we have about you. You also have the right to have your data deleted, provided this does not conflict with applicable accounting legislation. Norwegian data protection laws and the EU General Data Protection Regulation (GDPR) apply. 

How is data secured? 

Your personal data is securely stored in our IT systems, provided by Visolit Arendal, in the newsletter platform MailChimp, and to some extent in our web solutions (eydecluster.com, prosin.no, globaloutlook.no), which are hosted by our provider Frameworks AS. We have data processing agreements with all providers to ensure privacy, transparency, and secure data storage.