Who is responsible
Harper Invest AS is responsible for the personal information described here. We use it to answer enquiries, manage agreements and keep the website secure. Your rights and the contact point for privacy requests are explained below.
This policy covers this website, enquiries and our customer relationships. New products or uses of personal information are covered before that processing starts.
When you use the contact form
We collect your name, email address, organisation name, organisation registration number, message and enquiry topic. The topic follows the service page, or you select it on the contact page. We record when the enquiry arrives, its language and how it is handled.
Providing information is voluntary. Name, email, organisation name, organisation registration number and message are required to submit a business enquiry. We use the organisation details to identify the business you represent. The information comes from you. If someone contacts us on your behalf, it comes from that person.
We use these details to respond to your enquiry. For general enquiries and contact with business representatives, the legal basis is our legitimate interest in handling business correspondence. If you request steps towards an agreement with you personally, the legal basis is taking those steps at your request before entering a contract.
When we work together
We use contact details, correspondence, agreement details and necessary billing and payment records to arrange and deliver our services, send invoices and follow up the agreement.
For agreements with you personally, this is necessary to perform the contract. For contact people at a customer or partner organisation, the basis is our legitimate interest in managing that business relationship. Records required for bookkeeping are processed to meet our legal obligations.
When you visit the website
We process your IP address, pages requested, time of access and browser information to deliver pages, investigate errors and prevent misuse. This is based on our legitimate interest in operating a secure, reliable website. Abuse-prevention checks can prevent a form submission from being accepted. Technical logs include request and enquiry identifiers, processing outcomes and timing so we can investigate delivery failures and errors. The application does not copy your message or contact details into these logs.
Cookies and browser storage
The website application does not set cookies or save preferences in your browser. We do not use advertising or analytics trackers, or embed social media widgets. There are no optional cookie categories to enable.
See cookies and browser storage for more information.
Who receives the information
Personal information is shared with contracted website service providers only for operating the site and handling enquiries.
These providers operate internationally, including in the United States. Transfers outside the EEA are subject to the applicable data protection safeguards, including standard contractual clauses where required. Information about the safeguards applying to your data is available through the contact form.
Information is disclosed to public authorities where required by law, including necessary agreement and accounting records.
How long we keep information
Information is deleted or anonymised when it is no longer needed. The following limits apply:
- Enquiries without an agreement: up to 12 months after the dialogue ends.
- Spam and quarantined messages: up to 12 months after receipt.
- Agreements: while the agreement is active.
- Accounting and supporting records: the period required by bokføringsloven § 13, to meet our legal obligations.
- Records for a specific legal claim: while needed to establish, exercise or defend the claim, taking account of foreldelsesloven §§ 2–3, based on our legitimate interest in handling that claim.
- Technical records and recovery copies: up to 12 months, or less where the service provider applies a shorter retention schedule.
Improving our business
Statistics used to understand demand and improve our services must be anonymous: individuals must no longer be identifiable, including when the information is combined with other data. Anonymous statistics may be retained beyond the periods above.
Your rights
You can request a copy of your personal information and correction of inaccurate information. You can also request deletion or restricted use where the legal conditions apply. Some records must be retained to meet a legal obligation.
For information you provided that is processed automatically to prepare or perform a contract with you, you can request a portable copy.
You have the right to object to processing based on legitimate interests on grounds relating to your situation.
Privacy requests are handled through the contact form. If your request is unrelated to an organisation, enter “Not applicable” in the organisation fields. We respond within one month. If the complexity or number of requests requires a lawful extension, we explain this within that month. Identity information is requested only where needed to verify a request. Any refusal or limitation is explained.
You can complain to Datatilsynet, the Norwegian Data Protection Authority, or to the supervisory authority where you live or work in the EEA.
Changes
The review date shows when this policy was updated. Material changes to how personal information is used are communicated to affected individuals before the changed processing begins.