Privacy Policy
Updated 6 October 2026
Norsonic is committed to protecting your personal data and processing it securely, lawfully and transparently.
This privacy policy explains what personal data Norsonic collects, why we process it, who it may be shared with, how long it is retained and what rights you have.
Personal data is processed in accordance with the EU General Data Protection Regulation (EU) 2016/679 (GDPR) and other applicable data protection legislation.
1. Who is responsible for your personal data?
Norsonic AS is the data controller for personal data processed for Norsonic’s own purposes, including in connection with our products, services, websites and other business activities. This means that Norsonic AS is responsible for ensuring that personal data is processed in accordance with applicable data protection legislation, including the EU General Data Protection Regulation (GDPR).
Both Norsonic AS and its subsidiary Norsonic AB may process personal data as part of their business activities, including sales, marketing, customer service, support and the administration of customer and business relationships.
Personal data is shared between the companies as they use shared systems. Processing must comply with applicable data protection rules and Norsonic’s internal information security and data protection procedures. A data processing agreement has been entered into between Norsonic AS and Norsonic AB.
When Norsonic acts as a data processor (NorCloud)
Norsonic provides NorCloud, a cloud service for storing and processing measurement data, including audio recordings. When personal data is processed on behalf of NorCloud customers, Norsonic acts as the data processor, while the customer is normally the data controller.
Processing is governed by data processing agreements with customers. Authorised Norsonic personnel may access customer data when necessary for technical support, troubleshooting or operation of the service.
Norsonic is an independent data controller for personal data processed for its own purposes, such as administering and managing customer relationships.
Companies covered by this privacy policy
|
Norsonic AS – Data controller |
Norsonic AB |
If you have any questions about the processing of personal data or wish to exercise your data protection rights, please contact:
Email: info@norsonic.com Telephone: +47 32 85 89 00
2. When do we collect personal data?
We may collect personal data when you:
-
purchase or express an interest in our products or services
-
request a quotation or send us another enquiry
-
contact us by email, telephone, contact form or other communication channels
-
receive support, servicing or calibration
-
subscribe to newsletters or other marketing communications
-
register for courses, webinars, meetings or events
-
visit or use our websites
-
communicate with us through social media
-
represent a customer, distributor, supplier or business partner
-
apply for a job with us.
We may also receive personal data from other sources, such as:
-
our authorised distributors and business partners
-
the company or organisation you work for
-
public registers and other publicly available sources
-
professional networks and social media
-
other third parties where we have a lawful basis for processing the data.
3. What personal data do we process?
The data we process depends on your relationship with Norsonic and how you interact with us. We may process the following:
Contact and identification details
-
name
-
job title and employer
-
email address
-
telephone number
-
country and geographical market
-
other relevant contact details.
In certain situations, you may voluntarily provide other information, such as details of allergies or other requirements for adjustments in connection with an event. Such information is processed only where necessary and where we have a valid lawful basis.
Customer and business information
-
customer or company information
-
quotations and enquiries
-
products and services you have purchased or expressed an interest in
-
order, delivery and invoice information
-
servicing, support and calibration history
-
licence and product information
-
communications and correspondence with Norsonic.
Marketing and communication information
-
subscriptions to newsletters and other communications
-
consents and opt-outs
-
participation in events, courses and webinars
-
interests relating to products, services or subject areas.
Technical information and website usage data
-
IP address
-
browser and device type
-
operating system
-
referring website
-
pages visited
-
time and duration of visits
-
interactions with our websites
-
information collected through cookies and similar technologies.
When you identify yourself to us, for example by submitting a contact form, requesting a quotation or registering for an event, information about your activity on our websites may be linked to your contact profile in our CRM system (HubSpot). This may include both previous and future visits, provided that the necessary consent to tracking has been given.
Non-essential cookies and similar technologies are used only where we have the necessary consent.
Recruitment information
If you apply for a job with Norsonic, we may process information such as your name, contact details, CV, application, education, work experience, references and other information you provide during the application process.
Norsonic does not normally need to process special categories of personal data, such as health information or religious or political beliefs.
4. Why do we process personal data?
We process personal data only where we have a defined purpose and a lawful basis.
Enquiries, quotations and sales
When you contact us about a product, solution or quotation, we use your contact and company details to handle and follow up on your enquiry.
Processing is normally based on our legitimate interest in responding to enquiries, preparing quotations and following up with prospective customers and business relationships (Article 6(1)(f) of the GDPR).
Where processing is necessary to enter into or perform a contract directly with you as a private individual, the lawful basis is Article 6(1)(b) of the GDPR.
Customer and contractual relationships
We process personal data to:
-
administer orders and deliveries
-
fulfil contracts
-
send order confirmations and other necessary information
-
administer licences
-
issue invoices and follow up on payments
-
provide servicing, support and calibration
-
maintain existing customer relationships.
When we process contact details of individuals representing our business customers, processing is normally based on our legitimate interest in administering and maintaining the customer relationship (Article 6(1)(f) of the GDPR).
Where processing is necessary to perform a contract directly with you as a private individual, the lawful basis is Article 6(1)(b) of the GDPR.
We also process personal data where necessary to comply with legal obligations, such as accounting and bookkeeping requirements (Article 6(1)(c) of the GDPR).
Support, servicing and product information
We may use contact, customer and product information to provide support and servicing and to supply necessary or relevant information about products you use.
This may include information about software, updates, product changes, servicing and other matters relevant to the safe or effective use of our products.
Processing is based on the performance of a contract or our legitimate interest in supporting our products and customers.
Marketing and newsletters
We may use contact details to send information about products, services, webinars, events and other relevant industry news. Where consent is required, we send such communications only if you have consented.
Where permitted by law, communications to existing customers and professional contacts may also be based on our legitimate interest in providing information about relevant products and services. You may opt out of direct marketing or withdraw your consent at any time.
Events, webinars and courses
When you register for an event, webinar or course, we use your information to administer your registration, communicate practical information and run the event.
The lawful basis will depend on the event and may be the performance of a contract, consent or our legitimate interest.
Improving our websites and services
We may use information about how our websites are used to:
-
analyse traffic and usage
-
improve content and user experience
-
understand which products and subject areas are relevant to our visitors
-
measure the effectiveness of communications and marketing
-
detect and prevent security threats and misuse.
Where processing requires consent, it takes place only after you have given that consent through our cookie settings.
We also use HubSpot to manage customer and contact information. Where we have the necessary lawful basis, information about website visits and activity may be linked to a contact profile. This may be used to understand which products and services the contact has shown an interest in, follow up on relevant enquiries and tailor our communications. Non-essential tracking requires valid consent.
Suppliers, distributors and business partners
We process contact details of individuals at our suppliers, distributors and other business partners to administer the business relationship, communicate, fulfil contracts and manage our collaboration.
Processing is normally based on our legitimate interest in administering our business relationships or on the performance of contracts.
Recruitment
When you apply for a job with Norsonic, we process your personal data to assess your application, communicate with you and carry out the recruitment process.
Processing is based on steps relating to the possible conclusion of an employment contract and our legitimate interest in administering the recruitment process.
Legal and administrative obligations
We may process personal data where necessary to comply with legal requirements, including those relating to accounting, bookkeeping, documentation and regulatory requirements.
In such cases, the lawful basis is our legal obligation.
5. When do we rely on legitimate interests?
Where processing is based on legitimate interests, we assess whether Norsonic’s need to process the data outweighs the impact on your privacy.
This may apply to:
-
maintaining relationships with customers and professional contacts
-
handling relevant business enquiries
-
administering supplier and distributor relationships
-
sending relevant communications to existing customers
-
ensuring security and preventing misuse
-
improving our services and business processes.
We do not rely on legitimate interests as a lawful basis where your rights and privacy interests outweigh our interests.
6. Do we share personal data with others?
Norsonic does not sell personal data.
We share personal data only where necessary for a legitimate purpose and where we have a valid lawful basis.
Personal data may be shared with:
-
other Norsonic companies where necessary
-
IT, hosting and cloud service providers
-
providers of CRM, communication and marketing systems
-
providers of analytics and web services
-
accounting, payment, transport and logistics providers where relevant
-
professional advisers and other service providers
-
public authorities where we are legally required to disclose information
-
authorised Norsonic distributors where necessary to handle or follow up on an enquiry.
Service providers processing personal data on our behalf must process it only in accordance with our instructions and applicable data processing agreements and data protection rules.
Sharing with our distributors
Norsonic sells products and solutions through an international network of authorised distributors.
If you contact Norsonic about products, solutions, quotations or other commercial matters in a market served by a local distributor, we may share your contact details and relevant information from your enquiry with that distributor so that your enquiry can be followed up locally.
We share only the information that is relevant and necessary for this purpose.
7. Transfers of personal data outside the EU/EEA
Norsonic works with suppliers, business partners and distributors in several countries. Personal data may therefore be transferred to, or made available to, recipients outside the EU/EEA, including when customer enquiries are forwarded to our authorised distributors for local follow-up.
When personal data is transferred outside the EU/EEA, we ensure that the transfer has a valid legal basis and the necessary safeguards in accordance with the GDPR.
These may include:
-
transfers to countries that the European Commission has recognised as providing an adequate level of protection
-
the EU’s Standard Contractual Clauses (SCCs)
-
other lawful transfer mechanisms under the GDPR.
You can contact us at info@norsonic.com if you would like more information about the safeguards that apply to a particular transfer.
8. How long do we retain personal data?
We do not retain personal data for longer than necessary for the purpose for which it was collected.
How long the data is stored depends on factors including:
-
the type of personal data
-
the purpose of processing
-
how long we have an active customer or business relationship
-
warranties, servicing obligations and product lifespans
-
statutory retention and documentation requirements
-
the need to handle claims, disputes or other legal matters.
Data that must be retained under bookkeeping, accounting or other legislation is stored for as long as the law requires.
Personal data processed on the basis of consent is normally processed until consent is withdrawn or the purpose no longer applies, unless we have another lawful basis for continued processing.
When personal data is no longer necessary, it is securely deleted or anonymised.
Anonymised data that can no longer be linked to an individual may be used for statistics and analysis.
9. Cookies and similar technologies
Our websites use essential cookies and, with your consent, cookies for analytics and statistics.
We use Google Analytics 4 and HubSpot to understand how our websites are used and to improve content and user experience. When you identify yourself, for example by submitting a form, your browsing activity may be linked to your contact profile in HubSpot, provided that the necessary consent has been given.
You can change or withdraw your consent at any time via Edit Cookie Settings on our websites.
You can find an overview of the cookies we use, their purposes, providers and retention periods in our Cookie Policy.
10. Automated decision-making and profiling
Norsonic uses information to segment and tailor communications, for example based on the products, services or subject areas a contact has shown an interest in.
Norsonic does not make automated individual decisions that produce legal effects concerning you or similarly significantly affect you, as governed by Article 22 of the GDPR.
11. Your rights
When Norsonic processes personal data about you, you have several rights under data protection legislation.
Depending on the processing and the lawful basis, you may have the following rights:
Access
You may request information about the personal data we process about you and obtain a copy of that data.
Rectification
You may ask us to correct personal data that is inaccurate or incomplete.
Erasure
In certain circumstances, you may ask for your personal data to be deleted.
Restriction of processing
In certain circumstances, you may ask us to restrict how your personal data is processed.
Objecting to processing
Where processing is based on legitimate interests, you may have the right to object to the processing.
You always have the right to object to the processing of personal data for direct marketing purposes.
Data portability
Where the conditions under the GDPR are met, you may have the right to receive personal data you have provided to us in a structured, commonly used and machine-readable format, or to have the data transferred to another data controller.
Withdrawing consent
Where processing is based on consent, you may withdraw your consent at any time. Withdrawal does not affect the lawfulness of processing carried out before consent was withdrawn.
These rights do not necessarily apply in every situation. Certain rights may be limited by the lawful basis or other legal provisions.
If you wish to exercise your rights, please contact us at info@norsonic.com.
We may request the information necessary to verify your identity before handling your request.
12. If we receive personal data about you from others
In certain cases, Norsonic may receive personal data about you from sources other than you.
These may include:
-
your employer or the business you represent
-
other Norsonic companies
-
distributors or business partners
-
public registers
-
publicly available professional sources and networks
-
other third parties that may lawfully share the data.
The data will normally consist of contact and business information, such as your name, job title, employer, email address, telephone number and information relevant to an existing or potential business relationship.
When we receive personal data from sources other than you, we provide information about the processing in accordance with Article 14 of the GDPR, unless a lawful exemption applies.
13. Security
Norsonic uses appropriate technical and organisational security measures to protect personal data against unauthorised access, alteration, loss, misuse or disclosure.
Access to personal data is restricted to individuals and suppliers who need the data to perform their duties.
14. Complaints to a supervisory authority
If you believe that Norsonic is processing your personal data in breach of applicable data protection rules, we encourage you to contact us first at info@norsonic.com so that we can investigate the matter.
You also have the right to lodge a complaint directly with the relevant national supervisory authority.
Norway
Datatilsynet (Norwegian Data Protection Authority)
Sweden
Integritetsskyddsmyndigheten (IMY, Swedish Authority for Privacy Protection)
You may also have the right to contact the data protection authority in the country where you live or work, or where you believe a breach of data protection rules has occurred.
15. Changes to this privacy policy
We may update this privacy policy when our services, systems or processing activities change, or where necessary as a result of changes in legislation.
The current version will always be available on our websites.
If there are significant changes to how we process personal data, we will inform you in an appropriate manner.
16. Contact us
If you have any questions about this privacy policy or how we process personal data, or if you wish to exercise your rights, please contact us:
Norsonic AS
GunnersbrĂĄtan 2, 3409 Tranby, Norway
Email: info@norsonic.com Telephone: +47 32 85 89 00
Organisation no.: NO 929 743 040 MVA