Privacy notice

This notice explains which personal data we process when you visit unitedtechnology.org, write to us or use the order form.

Who is responsible

C. Middelthon, Norwegian org. no. 934 773 632, Trysil-Knuts gate 14, 4021 Stavanger, Norway. The business trades as Websenter and sells and operates United Technology. Contact: post@websenter.no.

When you visit the website

The pages set no cookies for visitors who are not logged in, and we use no analytics tools. We do not load fonts, scripts or other content from other services. If you log in as an administrator, WordPress uses the cookies needed for the login.

unitedtechnology.org is currently hosted by Hostinger in Frankfurt, Germany (EU), which runs the server and the cache in front of it. If the website moves, we update this notice. As on every website, technical logs are kept with the IP address, the time and the page requested. The logs are used only for operations and to detect and stop attacks, and that is our basis: legitimate interest in a secure website that works (GDPR Article 6(1)(f)). Hostinger deletes the logs when they are no longer needed for this and does not state a fixed number of days.

When you write to us

If you write to post@unitedtechnology.org or post@websenter.no, we use the details only to reply and follow up. The basis is our legitimate interest in answering enquiries (point (f)). The mailboxes are hosted by Hostinger (post@unitedtechnology.org) and Microsoft (post@websenter.no). Enquiries that do not lead to an agreement are deleted no later than 12 months after the last contact.

When you use the order form

What we store

• The organisation: name, organisation or registration number, address and preferred web address. For Norwegian organisations also this from the Central Coordinating Register for Legal Entities (Enhetsregisteret): the form of organisation, whether it is registered in the Register of Non-Profit Organisations (Frivillighetsregisteret) and the VAT Register (Merverdiavgiftsregisteret), whether it is deleted, bankrupt or being wound up, and when we checked.
• The contact person: name, e-mail, and role and phone if you give them.
• The person who accepts the agreement or sends the request: name, e-mail and role.
• The choices in the form: package, hosting, add-ons, e-mail from the website, payment, preferred start date, invoice format and the answers to the privacy questions. Those answers are about the organisation, not you.
• For an order: the time of acceptance and a checksum showing which version of the agreement texts and the price list was accepted.

We do not store your IP address with the order. If the organisation is a sole proprietorship, its name and address may be personal data about the owner.

What must be filled in. The organisation number (or name and address outside Norway), the preferred web address and the contact person’s name and e-mail. For an order also the preferred start date, the name, role and e-mail of the person who accepts, and the three confirmations. The contact person’s role and phone and a registration number outside Norway are optional. If a required field is missing, the form cannot be sent.

Registry lookup. When you enter a Norwegian organisation number, the website fetches the organisation’s details from Enhetsregisteret, which is a public register. Among other things this decides whether the non-profit price applies. We do not fetch board members or other people. The lookup itself is cached for one day so we do not need to repeat it. The details that become part of the order are kept as long as the order. The basis is our legitimate interest in correct customer details and the correct price (point (f)).

Protection against misuse. To stop spam and automated attempts, the website counts how many times the same visitor uses the form within an hour. The count is kept for one hour under a code derived from the IP address (a hash), not the IP address itself, and it is not linked to what you submit. The basis is our legitimate interest in a secure website (point (f)).

Why we process the data. To enter into and follow up the agreement with the organisation, and to be able to document who accepted it and what was accepted. The basis is our legitimate interest in entering into and following up agreements with organisations (point (f)). We do not use AI tools to process orders and requests.

Who receives the data

• The person who accepts the agreement receives it by e-mail. We receive a copy.
• Hostinger (EU) runs the server for unitedtechnology.org and sends e-mail from the website.
• Microsoft provides our mailboxes at websenter.no. The company is American and certified under the EU–U.S. Data Privacy Framework, which is the basis for transfers to the USA. You can read about the certification at dataprivacyframework.gov, or ask us for more information.

We share data with the providers described here, and otherwise only when the law requires it. We never sell personal data.

How long we keep it

• The order and the acceptance: for as long as the agreement applies, and then for three years, so we can document what was agreed. Invoices and other accounting records are kept for five years under the Norwegian Bookkeeping Act, in our accounting system.
• Requests that do not lead to an agreement: no later than 12 months after the last contact.
• Copies in e-mail are deleted on the same schedule. Backups of the website rotate out under Hostinger’s routine.
• The cached registry lookup: one day. The misuse counter: one hour.

Your rights

You can ask for access to the data we hold about you, and ask for it to be corrected or erased. You can also ask us to restrict processing, and object to processing based on legitimate interest. Write to post@websenter.no. We reply within one month.

If you think we process your data wrongly, you can complain to the Norwegian Data Protection Authority (Datatilsynet, datatilsynet.no).

Member data on customers’ websites

This notice does not cover the data on the websites we operate for customers. There the customer is the controller, and we process the data under the data processing agreement with the customer.

Customers’ websites are hosted with the provider that fits the hosting choice in the order. Today that is Hostinger or Rocket.net, and we may add more providers so customers have more to choose from. The provider for each customer is named in the data processing agreement (Annex 3).

Changes

If we change this notice, we update the date at the top. If a change affects how we use data we already hold, we tell those affected by e-mail before the change takes effect.