How we handle your personal data

Who is responsible

Arcaio AS (orgnr: 937005261), Sandesundveien 3b, 1706 Sarpsborg, is the data controller for the data collected on this website. You can always contact us about privacy at kontakt@arcaio.no or by phone on (+47) 400 30 522.

What we collect, and why

• The forms on the site (contact, enquiries about services and packages, orders). You give your name and email, and optionally your phone number, company, a message and choices you make (for example services, industry or channels). In some forms you can also attach images, such as logos or reference images. We use this to reply to you, prepare a quote and deliver what you ordered. The basis is that you ask us to do so before a contract is made (GDPR Article 6(1)(b)) and our legitimate interest in following up enquiries (point (f)).
• Where the enquiry came from. Together with the form, your browser sends which page and form you used, the first page you landed on, which site you came from and any campaign tags in the link (UTM). If you have put services in the enquiry list, they are included. We use this to know which part of the site works. The basis is our legitimate interest (Article 6(1)(f)). The information about where you came from is kept in your browser only while you have the site open.
• The enquiry list. The services you add to the list are stored on your own device (the browser's local storage) so the list is remembered between pages. It is not sent to us until you send a form yourself. You can remove the choices at any time or clear your browser data.
• Newsletter. If you sign up for the newsletter at the bottom of the page, we store your email address, the language of the page and the page you signed up from in Mailchimp. You first get an email where you must confirm the subscription, and we send no newsletter until you have confirmed. The basis is your consent (GDPR Article 6(1)(a)). You can unsubscribe at any time with the link at the bottom of every email, or by writing to us.
• Email. If you write to us, we use your email address and the content to reply. The forms send your enquiry directly to us. If sending does not work, a form may instead open an email draft in your own email program. In that case you are the one who sends the message.
• Technical data. Whoever operates our website may record your IP address and technical details in server logs for security and troubleshooting (legitimate interest).

You do not have to give us any information, but we cannot reply without an email address. We do not make decisions based solely on automated processing, and we do not use your data for profiling.

Cookies and tracking

The website uses no third-party fonts. We host the fonts ourselves, so your browser does not contact Google or anyone else for them. The browser storage described above is needed for the site to work and does not require consent.

If you choose "Accept optional", we use Google Analytics 4 (Google Ireland Ltd.) to measure how the site is used: which pages are visited, where visitors come from and how they move around the site. Google then sets cookies (_ga and _ga_MP775ESHYH) in your browser, and data may be processed outside the EEA. We do not use ad personalisation in Google Analytics.

If you accept optional cookies, we also use Meta Pixel (Meta Platforms Ireland Ltd.) to measure how our ads on Facebook and Instagram perform, and to show relevant ads to people who have visited the site. Meta then records which pages you visit and whether you submit a form or sign up for the newsletter (not what you write). Meta sets the _fbp cookie, and data may be processed outside the EEA. If you are logged in to Facebook or Instagram, Meta may link the visit to your account. Meta is an independent controller for its own use of the data, see Meta's privacy policy.

If you choose "Only necessary", neither Google Analytics nor Meta Pixel is loaded and no cookies are set. Your choice is stored on your device, and you can change it at any time under "Cookie settings" at the bottom of the page. We never switch on anything optional without your consent.

Who receives the data

We do not sell personal data. It is only shared with suppliers who help us run the website, handle enquiries and send email. Today these are Vercel (hosting the website), Zapier (forwards the forms), Airtable (the customer database where we collect enquiries), Mailchimp (the newsletter), Google (Google Analytics) and Meta (Meta Pixel), the last two only if you have accepted optional cookies. They process the data on our behalf and on our instructions, and we have data processing agreements with them. Data may also be disclosed where the law requires it. Several of the suppliers may process data in the USA. In that case we make sure there is a lawful transfer mechanism, for example the EU standard contractual clauses.

How long we keep the data

• Enquiries that do not lead to an assignment are deleted no later than 24 months after the last contact.
• We keep the newsletter address until you unsubscribe.
• When you become a customer, we keep the data for as long as the customer relationship lasts. Invoices and accounting records are kept for as long as the Norwegian Bookkeeping Act requires (currently five years).
• Files you send us are only used for the assignment and are deleted when the assignment is delivered and closed, unless you ask us to keep them.

Your rights

You have the right to access what we hold about you, to have it corrected or deleted, to restrict or object to the processing, and to receive your data in a common format. Email kontakt@arcaio.no and we will reply within one month at the latest. You can also complain to the Norwegian Data Protection Authority, Datatilsynet, if you believe we process your data in breach of the law.

Security

The site uses an encrypted connection (HTTPS). Access to data is limited to those who need it to reply to you. The forms have simple protection against spam, and image uploads are limited to image files of a set size.

Changes

We update this page when something changes, and the date at the top shows the last update.