Privacy Policy
We care about your privacy. This page explains, in plain language, what we collect, why we collect it, and how we keep it secure.
1. Website analytics
We use two tools to understand how people use our website:
- Plausible Analytics – a cookie-free, privacy-friendly tool hosted in the EU (Germany) that collects only anonymised, aggregated data (pages visited, device type, approximate location).
- HubSpot Analytics – used for more detailed tracking of visitor interactions, including pages viewed, time on site, and referral sources, to help improve our services and marketing. HubSpot may set cookies and process some personal data.
2. Hosting and infrastructure
Our site is built and hosted on Webflow, which uses AWS infrastructure (including CloudFront and AWS Global Accelerator) and Cloudflare CDN. This means some data (like IP addresses) may be processed in the United States. Webflow is certified under the EU–US Data Privacy Framework and uses Standard Contractual Clauses to protect transferred data. All traffic is encrypted via HTTPS.
3. Event sign-ups and accounts
If you register an event or log into the organiser portal, we collect details you provide (such as name, email, phone) to manage your participation. The organiser portal uses Memberstack for secure login and membership management. Memberstack encrypts your data and is based in the US with EU Standard Contractual Clauses in place.
4. Newsletters
If you subscribe to our newsletter, we store your name and email to send you updates. We use HubSpot to manage email addresses, send newsletters, and track engagement. You can unsubscribe at any time by clicking the link in any email or contacting us.
5. Automation services
We use Make, Zapier, and n8n to automate workflows between our systems (for example, moving data between forms, CRM, and email tools). These services may temporarily process personal data as part of automation tasks but do not store that data long-term. Data is processed securely in transit and only for the purpose of carrying out the automation.
6. Embedded content
Some pages include embedded videos from YouTube or links to social media. These services may set their own cookies or collect information according to their own privacy policies.
7. Data retention
We only keep personal data as long as necessary for the purpose it was collected.
8. Your rights
You have the right to access, correct, delete, or object to the processing of your personal data, and to withdraw consent at any time.
Updated: August 2025 by Fredrik Salberg
1. Introduction
1.1 We are committed to safeguarding the privacy of our website visitors and service users.
1.2 This policy applies where we are acting as a data controller with respect to the personal data of our website visitors and service users; in other words, where we determine the purposes and means of the processing of that personal data.
1.3 Our website incorporates privacy controls which affect how we will process your personal data. By using the privacy controls, you can specify whether you would like to receive direct marketing communications and limit the publication of your information. You can access the privacy controls via [URL].
1.4 In this policy, "we", "us" and "our" refer to Oslo Business Region. For more information about us, see Section 6.
2. Credit
2.1 This document was created/updated by Oslo Business Region on the 23rd of May, 2023.
3. How we use your personal data
3.1 In this Section 3 we have set out:
(a) the general categories of personal data that we may process;
(b) in the case of personal data that we did not obtain directly from you, the source and specific categories of that data;
(c) the purposes for which we may process personal data; and
(d) the legal bases of the processing.
3.2 We may process data about your use of our website and services ("usage data"). The usage data may include your geographical location, browser type and version, operating system, referral source, length of visit, page views and website navigation paths, as well as information about the timing, frequency and pattern of your service use. The source of the usage data is our analytics tracking system provided by HubSpot. This usage data may be processed for the purposes of analysing the use of the website and services. The legal basis for this processing is our legitimate interests, namely monitoring and improving our website and services.
3.3 We process personal data related to data subjects who sign up for our events. The personal data may include but are not limited to name, e-mail address and telephone number of the data subject. The process is necessary for event administration. The legal basis for our processing is our legitimate interests, as the processing is necessary for event administration.
3.4 We process personal data related to data subjects in order to send newsletters to people who have signed up to receive our newsletters. The personal data that we process include name and e-mail address of the data subject. Recipients can unsubscribe by using the link included in each inquiry or by sending us an e-mail at hey@oiw.no. The legal basis for our processing is consent from the data subject. We use HubSpot as a data processor to manage e-mail addresses and send out our newsletter.
3.5 We may process personal data related to data subjects in order to provide relevant content and offers using HubSpot as our customer relationship management software. HubSpot helps us to manage and analyze customer interactions and data. The legal basis for this processing is our legitimate interests, namely to help businesses and improve our services.
4. Retaining and deleting personal data
4.1 Section 4 sets out our data retention policies and procedures, which are designed to help ensure that we comply with our legal obligations in relation to the retention and deletion of personal data.
4.2 Personal data that we process for any purpose or purposes shall not be kept for longer than is necessary for that purpose or those purposes.
4.3 Personal data of event participants is stored until the administration of the event has been completed.
4.4 Personal data related to our newsletter recipients is stored until the recipient withdraws the consent. When the consent is withdrawn, we will delete the personal data related to the recipient.
5. Your rights
5.1 In this Section 5, we have summarised the rights that you have under data protection law. Some of the rights are complex, and not all of the details have been included in our summaries. Accordingly, you should read the relevant laws and guidance from the regulatory authorities for a full explanation of these rights.
5.2 Your principal rights under data protection law are:
(a) the right to access;
(b) the right to rectification;
(c) the right to erasure;
(d) the right to restrict processing;
(e) the right to object to processing;
(f) the right to data portability;
(g) the right to complain to a supervisory authority; and
(h) the right to withdraw consent.
6. Our details
6.1 This website is owned and operated by Oslo Business Region AS.
6.2 Our principal place of business is at MESH, Tordenskiolds gate 2, 0160 Oslo
6.3 You can contact us:
(a) by post, to the postal address given above
(b) by email, using the email address hey@oiw.no
Universal Design
Norwegian
Vi er forpliktet til å gjøre vår nettside og digitale tjenester tilgjengelige for alle, og vi erkjenner at det er rom for forbedringer. Vår dedikasjon til tilgjengelighet er ikke bare et juridisk krav, men en kjerneverdi som gjenspeiler vår innsats for å skape en inkluderende digital opplevelse for alle brukere.
Vi er allerede godt i gang med å gjøre endringer som vil forbedre tilgjengeligheten på vår nettside. Dette inkluderer å sikre at all vår audiovisuelle media har tekstalternativer og lydtekster, og at vår kildekode oppfyller de strengeste standardene for webtilgjengelighet.
Vårt team arbeider også tett med eksperter på tilgjengelighet for å revurdere og oppdatere vår tilnærming til webdesign og utvikling. Vi er i ferd med å implementere endringer som vil gjøre vår nettside mer navigerbar og forståelig for alle brukere, uavhengig av deres fysiske eller teknologiske behov.
Tilgjengelighet er en løpende reise, og vi er forpliktet til kontinuerlig forbedring. Hold øye med fremtidige oppdateringer om vår fremgang.
English
To what extent does the website comply with universal design requirements?
The website partially complies with the ICT universal design requirements.
There are violations of 16 out of 48 requirements in the regulations.What do the violations mean for users?
The violations recorded in this statement have particular consequences for users with the following conditions:
Use without vision
Use with limited vision
Use without color vision
Use without hearing
Use with reduced hearing
Use with reduced mobility or strength
Use with reduced cognition
We are committed to making our website and digital services accessible to everyone, and we acknowledge that there is room for improvement. Our dedication to accessibility is not just a legal requirement, but a core value that reflects our effort to create an inclusive digital experience for all users.
We are already well underway with making changes that will improve the accessibility of our website. This includes ensuring that all our audiovisual media have text alternatives and audio descriptions, and that our source code meets the strictest standards for web accessibility.
Our team is also working closely with accessibility experts to reassess and update our approach to web design and development. We are in the process of implementing changes that will make our website more navigable and understandable for all users, regardless of their physical or technological needs.
Accessibility is an ongoing journey, and we are committed to continuous improvement. Keep an eye out for future updates on our progress.
Updated: 21 February 2024 by Fredrik Salberg