Privacy policy – parqio.com
Last updated:
Parqio AS processes personal data about you when you visit our website or get in touch with us. This policy explains what we collect, why, who we share it with, and what rights you have.
1. Controller and scope
Parqio AS is the controller for the processing described here.
- Parqio AS, company registration number 922 590 265 (VAT: NO 922 590 265 MVA)
- Visiting address: Hegdehaugsveien 34, 0352 Oslo, Norway
- Postal address: Postboks 206 Bogstadveien, 0323 Oslo, Norway
- Email: privacy@parqio.com · Phone: +47 23 50 69 89
This policy covers the parqio.com website and enquiries you send us from it. If you use the Parqio app and our services, the privacy policy for the service applies instead – it also explains how responsibility is divided between Parqio and the organisation that runs your facility.
2. In short
- You can read the entire website without telling us anything about yourself.
- We do not measure you until you have actively consented. If you decline – or simply do not answer – nothing about you is recorded. The only things that happen without consent are anonymous, aggregated visitor statistics without cookies, and technical operations and security logs.
- If you submit the contact form, we use what you provide to reply to you and to follow up the enquiry as a sales conversation.
- We do not sell personal data, and we make no automated decisions that produce legal or similarly significant effects for you.
3. When you visit the website
The website runs on Vercel, which processes your IP address and your request in logs for technical and security reasons. This is necessary for the page to be delivered at all, and happens regardless of consent. Legal basis: legitimate interest in operations and security (GDPR Article 6(1)(f)).
With your consent we measure usage with PostHog, hosted in the EU. PostHog records nothing until you have actively consented in the consent banner: if you choose “Decline”, or close the banner without answering, no data is sent. IP addresses are anonymised in the analysis, and session recordings mask everything you type into form fields. Legal basis: consent (Article 6(1)(a)), which you can withdraw via “Change cookie consent” at the foot of the page.
Vercel Web Analytics and Speed Insights additionally give us anonymous, aggregated visitor statistics. They set no cookies and cannot be linked to you.
Details of cookies and storage technologies are set out in our cookie policy.
4. When you submit the contact form
We receive what you fill in: name, phone number, email address, building or company, type of facility, what you are interested in, and your message.
We also record which page and which button you came from and which language you were using, and – only if you have consented to analytics – a technical id that links the enquiry to your visit. That way we know what the enquiry is about before we call, and which parts of the website are actually useful.
The information is transferred to HubSpot, our customer relationship system, and used to reply to you and follow up the sales conversation.
Legal basis: legitimate interest in answering and following up an enquiry you initiated yourself (Article 6(1)(f)), and taking steps at your request before a possible contract is entered into (Article 6(1)(b)).
5. Sharing and processors
We share personal data with suppliers who process it on our behalf, only where necessary, and always under a data processing agreement and a duty of confidentiality. For the website these are:
- Vercel – hosting and delivery of the website, plus anonymous visitor statistics.
- Sanity – the publishing system the content lives in.
- PostHog – analytics and session recording in the EU, only with consent.
- Mux – video delivery.
- HubSpot – customer relationship management, receives submitted contact forms.
We may also disclose information where we are legally obliged to, to detect or prevent misuse, or in connection with a business transfer. In the event of a transfer, this policy continues to apply.
We never sell personal data.
6. Transfers outside the EEA
Some suppliers may process data outside the EEA. Where that happens, the transfer is safeguarded by the European Commission’s Standard Contractual Clauses, the EU-U.S. Data Privacy Framework, or another valid transfer mechanism under Chapter V of the GDPR.
7. Retention and deletion
- Analytics events in PostHog: 12 months.
- Session recordings in PostHog: 30 days.
- Accounting records: for as long as the Norwegian Bookkeeping Act requires.
8. Security
We protect the information with technical and organisational measures, including encryption, access control and regular risk assessments. The website is served only over HTTPS and has a strict Content Security Policy.
In the event of a personal data breach, we notify the Norwegian Data Protection Authority, and you where the law requires it, in accordance with the GDPR.
9. Marketing
We send you marketing only where you have consented, or where it concerns services closely related to something you already use and the Norwegian Marketing Control Act permits it. You can opt out at any time, free of charge, via the link in the message or by contacting us.
If you opt out of marketing, you will still receive necessary service messages about services you use. Those are not marketing.
10. Your rights
You have the right of access, rectification, erasure, restriction and data portability, and the right to object to processing based on legitimate interest.
Consent can be withdrawn at any time, as easily as it was given. You withdraw consent to analytics via “Change cookie consent” at the foot of the page.
We make no decisions based solely on automated processing that produce legal or similarly significant effects for you.
Contact privacy@parqio.com to exercise your rights. We respond without undue delay and within one month at the latest. If you believe we are processing data in breach of the rules, you can complain to the Norwegian Data Protection Authority (datatilsynet.no).
11. Changes and contact
We may update this policy. The date at the top shows when it was last changed, and material changes are notified by appropriate means.
Privacy questions can be directed to privacy@parqio.com, or Parqio AS, Postboks 206 Bogstadveien, 0323 Oslo, Norway.