1. Introduction
Medcom AS (Org. no. 936 155 731) is the data controller for personal data collected through our websites and services. We are committed to protecting your privacy in accordance with the Norwegian Personal Data Act (personopplysningsloven) and the EU General Data Protection Regulation (GDPR).
This privacy policy explains what information we collect, how we use it, and what rights you have.
2. What information we collect
- Contact information: When you fill in the contact form or Start a project on the website, we collect your name, email address and, where provided, phone number and company name.
- The contact form: The message you send us through the contact form is sent as an email to post@medcom.no. It is not stored in any database on the website.
- Start a project: What you fill in under Start a project, that is, your contact details, your company, your website and your answers about the project, is stored in Medcom's customer system so that we can follow up the request. At the same time, we receive a notification by email.
- Internal summary: When a project request comes in, we create an internal summary of it using an AI service (Anthropic). The summary is used only by us to prepare for the conversation with you, and is never published.
- Technical information: If you say yes in the consent banner, we use Google Analytics 4 to see which pages are used. The IP address is anonymised. If you say no, nothing is measured.
- Cookies: The website does not set any cookies until you have consented to analytics. Your choice is stored in your browser, not by us.
3. How we use the information
Legal basis: We process personal data on the basis of consent, contract, legitimate interest or legal obligation, depending on the purpose.
- Responding to enquiries and providing customer service
- Delivering and improving our services
- Sending relevant information about our services (only with your consent)
- Analysing and improving our website
- Fulfilling legal obligations
4. Sharing of information
- Service providers: We use providers for sending email (Resend), hosting (Vercel), the database for the customer system (Supabase, with storage in the EU), internal summaries of project requests (Anthropic) and analytics (Google). They process data on our behalf under data processing agreements.
- Transfers outside the EU/EEA: Some of the providers are US companies. When information is processed outside the EU/EEA, this takes place on the basis of the European Commission's standard contractual clauses or the EU–US Data Privacy Framework.
- Legal requirements: We may share information if required by law or by public authorities.
5. Storage and security
We retain personal data for as long as is necessary for the purpose for which it was collected, or for as long as the law requires. Contact information is normally deleted after 2 years if no customer relationship has been established.
We use technical and organisational security measures to protect your information, including encryption and secure servers.
6. Your rights
- Access: You can ask to be told what information we hold about you
- Rectification: You can ask for incorrect information to be corrected
- Erasure: You can ask for information to be deleted
- Restriction: You can ask for the processing of your information to be restricted
- Data portability: You can ask to receive your information in a structured format
- Objection: You can object to processing based on legitimate interest
- Withdrawal of consent: You can withdraw a consent at any time
7. Contact and complaints
For questions about privacy or to exercise your rights, contact us at post@medcom.no.
You also have the right to lodge a complaint with the Norwegian Data Protection Authority (Datatilsynet) if you believe that we process personal data in breach of the regulations. The Norwegian Data Protection Authority can be contacted at www.datatilsynet.no.
8. Company information
Medcom AS, Org. no. 936 155 731. Registered business address: Almeveien 13, 3274 Larvik.
Medcom does not have an office and does not receive visitors at the address. We work digitally, based in Larvik, and meet clients by appointment. You can reach us at post@medcom.no or 92 91 34 33.