Privacy policy

This is an English translation of our Norwegian privacy policy. If the two versions differ, the Norwegian version applies.

1. What this policy covers

This privacy policy applies to the aerk.no website and the services connected to it:

• Enquiries by email, through the contact form and through contact links on the website
• Meeting bookings
• The use of cookies
• Prospecting and cold outreach to businesses (sales and marketing)

It does not apply to ongoing client work. Where personal data is processed on behalf of a client, for example in advertising or content production, this is governed by a separate data processing agreement between Aerk and the client.

2. Data controller

Omni Correia de Melo Medeiros
Organisation number: 936231942
Address: Dælenenggata 17
Email: lm@aerk.no

Questions about privacy can be sent to lm@aerk.no.

3. What data we process

We only process the data we need to run the business:

Contact details

Name, email address, phone number, job title, employer and a link to a public profile, such as LinkedIn.

Communication

The content of emails, messages, the contact form and enquiries, as well as notes from calls and meetings.

Meeting bookings

Name, email address, time and any information you provide yourself when booking.

Client and billing details

Billing address, contact person, delivery, amount and payment status.

Technical data

IP address, browser, device and usage patterns, to the extent these are collected through cookies.

We do not ask for, and have no need for, special categories of personal data, such as health data or information about political or religious beliefs.

4. Contact form

When you send the contact form on aerk.no, we receive the details you fill in by email, and they are stored in our customer system so we can follow up on your enquiry. The legal basis is that you have asked us to get in touch. The data is deleted when it is no longer needed for the enquiry or a client relationship.

5. Prospecting and cold outreach

Aerk does outbound sales to businesses. As part of this, we record and process contact details about employees at potential clients, typically the CEO, founder or head of marketing.

Where the data comes from

Publicly available sources such as the Brønnøysund Register Centre, the company's own website and social media, as well as commercial B2B databases, primarily Apollo.io.

What data

Name, job title, employer, work email, work phone number and a link to a public profile. We only record details connected to your professional role, not private contact information.

What we use it for

To assess whether the business could benefit from our services, and to get in touch with a relevant offer by email, LinkedIn, phone or SMS.

Legal basis

Legitimate interest under Article 6(1)(f) of the GDPR. We have an interest in reaching businesses that could benefit from our services, the contact happens in a professional context and concerns a limited set of data, and we therefore believe it does not unreasonably affect your privacy. Email marketing to individuals only takes place where section 15 of the Norwegian Marketing Control Act (markedsføringsloven) allows it, such as in an existing client relationship or with consent.

Your right to opt out

You can tell us at any time that you do not want to be contacted. Send an email to lm@aerk.no, and we will delete the data or mark it so that you are not contacted again. You do not need to give a reason.

6. Meeting bookings

The website links to a booking service where you choose a time for a meeting yourself. The service processes your name, email address, the time and any details you provide, and creates a calendar event for us. The provider is a data processor for Aerk.

7. Cookies and analytics

We use Google Analytics on aerk.no to see how many people visit the site, where they come from and how the pages are used. Google Analytics sets cookies (_ga and _ga_*) that can last for up to two years. We do not use Google Analytics for advertising.

We also use Contentsquare to understand how the website is used, for example where visitors click and scroll and where they drop off. Contentsquare can replay visits as recordings of the page, but never collects the text you type into forms. The tool sets cookies (_cs_*) that can last for up to 13 months. Contentsquare is established in the EU and is a data processor for Aerk.

These tools, and Meta Pixel described below, load when you visit aerk.no. You can turn off analytics for yourself here, which deletes the cookies and stops the tools from loading again in this browser:

Turn off analytics for me · Turn it back on

Meta Pixel

We use Meta Pixel from Meta Platforms Ireland Ltd. on aerk.no and visibility.aerk.no to measure whether our ads on Facebook and Instagram lead to visits, completed forms and booked meetings, and to be able to show ads to people who have visited the pages. Meta Pixel sets cookies (_fbp and possibly _fbc) that can last for up to 90 days, and sends information about your visit, such as your IP address, browser and which pages and actions it concerns, to Meta. You can turn off Meta Pixel at any time with the links above. Aerk and Meta are joint controllers for the collection and transfer of the data to Meta, while Meta is an independent controller for its further use, as set out in Meta's privacy policy.

You can also block or delete cookies in your browser settings.

The fonts are hosted on our own server, and booking opens with an external provider, which may receive your IP address as a technical necessity to deliver the content.

8. Transfers outside the EEA

Some of our providers are established in the United States. Where personal data is transferred out of the EEA, the transfer is protected by a valid transfer mechanism, such as the EU Standard Contractual Clauses (SCC) or the EU-US Data Privacy Framework, along with any necessary supplementary measures.

9. Security

We use two-factor authentication on our tools, limit access to what is necessary, and use providers with established security practices. In the event of a personal data breach that poses a risk to your rights, we notify the Norwegian Data Protection Authority (Datatilsynet) within 72 hours, and you directly if the risk is high.

10. Your rights

You have the right to:

• access the data we hold about you
• have incorrect data corrected
• have data deleted
• request restriction of processing
• object to processing based on legitimate interest, including prospecting
• receive your data in a machine-readable format (data portability)
• withdraw consent at any time

Send your request to lm@aerk.no. We normally reply within 30 days. You can complain to the Norwegian Data Protection Authority (Datatilsynet) if you believe the processing breaks the rules, but we would appreciate hearing from you first.

11. Changes

This policy may be updated. The current version is always available on aerk.no. Significant changes will be announced on the website.