1. Who we are
AI Value Compass AS, organisation number 937 782 292, Dronningveien 22, 3531 Krokkleiva, Hole, Norway ("we", "us") is the data controller for the personal data described in this policy. Data controller means we decide why and how your personal data is processed.
This policy covers personal data we process when you visit www.aivaluecompass.com (the "Website"), contact us, subscribe to our newsletter, attend our events, or work with us as a client, prospective client or supplier.
We process personal data in line with the EU General Data Protection Regulation (GDPR) as incorporated in the Norwegian Personal Data Act (Personopplysningsloven).
Questions about privacy: helge.rynning@outlook.com
2. What we collect, why, and on what legal basis
We only collect the personal data we need for each purpose below. We do not sell personal data, and we do not use it for automated decisions that have legal or similarly significant effects on you.
| Purpose | Personal data | Legal basis (GDPR art. 6) |
|---|---|---|
| Answering enquiries via contact form, email or phone | Name, email, phone, company, job title, your message | Legitimate interest in responding (6(1)(f)), or steps before a contract (6(1)(b)) |
| Booking meetings | Name, email, company, meeting time, notes you add | Steps before a contract (6(1)(b)) |
| Delivering consulting services | Contact details of client staff, information shared during the engagement | Contract (6(1)(b)); legitimate interest for contact persons at client companies (6(1)(f)) |
| Invoicing and bookkeeping | Name, company, billing address, invoice and payment details | Legal obligation under the Norwegian Bookkeeping Act (6(1)(c)) |
| Newsletter | Name, email, opening and click statistics | Consent (6(1)(a)); unsubscribe at any time |
| Events and webinars | Name, email, company, attendance | Contract or consent, depending on the event (6(1)(b) or (a)) |
| Website operation and security | IP address, browser, device, logs | Legitimate interest in a secure, working website (6(1)(f)) |
| Website statistics and marketing cookies | Online identifiers, usage data | Consent (6(1)(a)); see our Cookie Policy |
| Business development on LinkedIn and similar | Public professional profile data, our correspondence | Legitimate interest in B2B marketing (6(1)(f)) |
Where we rely on legitimate interest, we have weighed our interest against your privacy. You can object at any time (see section 5).
We do not intend to collect special categories of personal data (such as health data). Please do not send us such data unless it is necessary.
3. Who we share data with
We use trusted service providers (data processors) that process personal data on our behalf, under data processing agreements. They may not use the data for their own purposes.
| Service | Provider (example) | Used for |
|---|---|---|
| Website hosting and platform | Domene.no (domain); KATEK Sites (website hosting) | Running the Website and contact forms |
| Email and office tools | Microsoft 365 / Google Workspace | Email, documents, calendar |
| Accounting and invoicing | DNB Regnskap/DNB Accounting | Invoicing and bookkeeping |
| Newsletter | Mailchimp / MailerLite / other | Sending newsletters |
| Meeting booking | Calendly / other | Scheduling meetings |
| Video meetings | Microsoft Teams / Zoom / Google Meet | Online meetings and workshops |
| Analytics | Google Analytics | Website statistics, only with consent |
| AI tools | e.g. business versions of Claude or ChatGPT | Drafting and analysis, set up so data is not used for model training |
We may also share data with our accountant or auditor, with legal advisers, and with public authorities where the law requires it.
Transfers outside the EU/EEA. Some providers may process data outside the EU/EEA, for example in the USA. We only allow this where there is a lawful transfer mechanism, such as an EU adequacy decision (including the EU–US Data Privacy Framework) or the EU Standard Contractual Clauses.
4. How long we keep data, and how we protect it
We keep personal data only as long as we need it for the purpose it was collected for.
| Data | Retention period |
|---|---|
| Enquiries that do not lead to an engagement | 12 months after last contact |
| Client and engagement records | Duration of the engagement plus 3 years |
| Accounting records | 5 years after the end of the financial year, as required by the Norwegian Bookkeeping Act |
| Newsletter subscriptions | Until you unsubscribe |
| Website logs | 90 days |
| Cookies | See the durations in our Cookie Policy |
We protect personal data with appropriate technical and organisational measures. If a personal data breach occurs that is likely to put your rights at risk, we will notify Datatilsynet and, where required, you.
5. Your rights
Under the GDPR you have the right to:
- access the personal data we hold about you and get a copy;
- rectification of inaccurate or incomplete data;
- erasure of your data where there is no longer a lawful reason to keep it;
- restriction of processing in certain situations;
- data portability, receiving data you gave us in a machine-readable format;
- object to processing based on legitimate interest, including direct marketing at any time;
- withdraw consent at any time, without affecting processing that took place before.
To use your rights, email helge.rynning@outlook.com. We reply without undue delay and within one month. We may ask you to confirm your identity. Using your rights is free of charge.
Complaints. If you believe we process your data unlawfully, please contact us first so we can put it right. You also have the right to complain to Datatilsynet, the Norwegian Data Protection Authority (www.datatilsynet.no).
6. Changes to this policy
We update this policy when our processing or the law changes. The latest version is always published on the Website, with the date of the last update below.
7. Contact
AI Value Compass AS · Org. no. 937 782 292, Dronningveien 22, 3531 Krokkleiva, Hole, Norway, email address helge@aivaluecompass.com · phone +47 90 98 99 17
Last updated: 5 November 2026