1. Who is responsible
Optim, represented by Waldemar Jordet, is the data controller for the personal data described in this policy. For privacy questions, contact us at [email protected].
2. What data we process, and why
| Purpose | Data | Legal basis | Retention |
|---|---|---|---|
| Booking a discovery call | Name, email, phone number, company name, what you write about your goals, and the time of the call | Steps taken at your request before entering into a contract (GDPR Art. 6(1)(b)) | Up to 12 months after last contact, if no client relationship follows |
| Replying to enquiries by email or Instagram | Name, contact details and the content of your message | Legitimate interest in replying to you (Art. 6(1)(f)) | Up to 12 months after last contact |
| Delivering services to clients | Contact details, agreements, communication and invoicing data | Contract (Art. 6(1)(b)) and legal obligation under Norwegian bookkeeping law (Art. 6(1)(c)) | For the duration of the agreement. Accounting records are kept as long as bookkeeping law requires. |
| Running and securing the website | IP address, browser type and time, in server logs kept by the hosting provider | Legitimate interest in a secure, stable website (Art. 6(1)(f)) | A short period, under the provider's routines |
We do not use your data for automated decision-making or profiling, and we never sell personal data.
3. Who we share data with
We use a small number of providers to run the business. They process data on our behalf and under our instructions:
- Cal.com, Inc. (USA): the booking calendar on the contact page.
- Google (Gmail, Google Calendar and Google Meet): email, calendar and video calls.
- Our web hosting provider: running the website.
If you contact us via Instagram, Meta processes that data under its own terms, as an independent controller.
4. Transfers outside the EU/EEA
Some of our providers are based in the USA. Transfers rely on the EU–US Data Privacy Framework where the provider is certified, and otherwise on the European Commission's standard contractual clauses.
5. Cookies
This website uses no analytics or marketing tools. Read more in our cookie policy.
6. Your rights
You have the right to:
- access the data we hold about you
- have inaccurate data corrected
- have data erased when we no longer have grounds to keep it
- restrict processing
- object to processing based on legitimate interest
- receive your data in a machine-readable format (data portability)
Email [email protected] and we will reply within 30 days at the latest. If you believe we process your data unlawfully, you can complain to the Norwegian Data Protection Authority, Datatilsynet.
7. Security
We use reputable providers and secure connections (HTTPS), and limit access to data to what is necessary.
8. Changes
We update this policy when needed. The date at the top shows when it was last changed.