Privacy
Privacy Policy
1. What this policy covers
Eldurai AS processes personal data when you visit eldurai.com, contact us, or register your interest in our service.
This policy explains what data we process, why we process it, how long we keep it, who we share it with, and what rights you have.
This privacy policy applies only to eldurai.com, enquiries to Eldurai and marketing. It does not apply to the processing of personal data within the Eldurai service itself.
The service is not yet on general sale. Participants in our pilot and research projects have received separate information about the processing of their personal data, and separate consent forms where relevant. That information is what applies to those activities.
When the Eldurai service goes on ordinary sale, we will publish a separate privacy policy for it.
2. Who is responsible
Eldurai AS is the data controller for personal data processed through the website and in connection with enquiries and marketing.
Company reg. no. 935 103 339
Jacob Borchs gate 21
3012 Drammen, Norway
Privacy enquiries: privacy@eldurai.com
Everything else: info@eldurai.com
3. What data we process
Data you give us
When you complete a form, register your interest in Eldurai, or contact us, we may process:
- your name
- your email address
- your phone number, if you provide it
- what you are interested in
- the content of your message
- the time of your enquiry
- a record of any consent to news and marketing
Please do not send us health information or other sensitive personal data through the forms on this website.
If you contact us on behalf of another person, please give us as little information about them as possible.
This website is intended for adults. We do not knowingly collect personal data about children through the website.
Data recorded when you visit the website
When you visit the website, certain technical data may be recorded so that we can deliver the site securely and reliably. This may include:
- your IP address
- your browser and device type
- the time of your visit
- technical logs relating to security, operations and troubleshooting
We do not use this data to follow you across other websites or to build a profile of you for marketing purposes.
4. What we use the data for
| Purpose | Data | Legal basis |
|---|---|---|
| Answering enquiries | Contact details and the content of the enquiry | Our legitimate interest in being able to reply to people who contact us, cf. GDPR Article 6(1)(f) |
| Following up interest in Eldurai | Contact details and the information you have given us | Our legitimate interest in following up people who have themselves registered interest in Eldurai, cf. GDPR Article 6(1)(f). Where the enquiry concerns entering into an agreement, the processing may also be necessary to take steps prior to entering into it, cf. Article 6(1)(b) |
| Sending news and marketing | Name, email address and a record of consent | Consent, cf. GDPR Article 6(1)(a) and the Norwegian Marketing Control Act § 15 |
| Ensuring stable and secure operation of the website | Technical logs and necessary technical information | Our legitimate interest in running, securing and maintaining the website, cf. GDPR Article 6(1)(f) |
| Documenting consent and compliance with data protection law | Necessary records of when and how consent was given or withdrawn | Our legitimate interest in being able to document that personal data has been processed lawfully, cf. GDPR Article 6(1)(f) |
Where processing is based on our legitimate interest, we have assessed that it is necessary for the purpose and does not intrude unreasonably on your privacy. You may object to processing based on legitimate interest. See section 9.
Registering your interest in Eldurai does not automatically sign you up for marketing. We will only send you newsletters and other marketing communications if you have consented to this, or if we otherwise have a lawful basis for contacting you.
5. Cookies and similar technology
Cookies are small data files that may be stored on your device when you visit a website.
On eldurai.com we use only cookies and similar technology that are strictly necessary for the site to function, stay secure, and deliver features you have asked for. Cookies of that kind do not require prior consent under the Norwegian Electronic Communications Act § 3-15.
We do not currently use cookies for analytics, statistics, advertising or marketing. Nor do we use this technology to follow you across other websites or share information with advertising networks.
On the About us page you can choose to show a map of where we are based. The map is provided by Google Maps and is only loaded when you press «Show map». Once the map has loaded, Google may set its own cookies and process data under Google's privacy policy.
If we later wish to introduce analytics tools, marketing tools or other technologies that require consent, we will obtain consent before they are activated and update this privacy policy.
6. How long we keep the data
We do not keep personal data longer than is necessary for the purpose it was collected for.
| Data | Retention |
|---|---|
| Enquiries and interest registrations | Normally deleted no later than 12 months after last contact, unless further follow-up is needed or the contact has developed into a customer relationship |
| Newsletters and marketing | Processed until you unsubscribe or withdraw your consent |
| Technical logs | Processed for as short a time as possible, and only as long as needed for security, operations and troubleshooting |
| Necessary cookies | Stored no longer than needed for the function in question |
| Consent records | Kept for as long as necessary to document that the processing was lawful |
Data may be kept longer where this is necessary to meet a legal obligation, or to establish, exercise or defend a legal claim.
7. Who has access to the data
We never sell personal data.
We use a small number of providers to run the website and follow up enquiries. Where providers process personal data on our behalf, they may only process it on our instructions and in accordance with the applicable data processing agreements.
We currently use, among others:
Used for hosting and storage of the website. The site is configured to run and store data in Microsoft's Norwegian Azure region.
Used to manage contact details and to send newsletters and other communications you have requested or consented to.
We may also disclose personal data where we are legally required to do so, for example following a request from a public authority.
8. Processing outside the EEA
Our website is operated with primary storage in Norway.
Some providers, or their sub-processors, may nonetheless process personal data outside the EU and EEA. Loops is provided by Astrodon Corporation in the United States, and may involve processing of personal data in the US. Astrodon states that it is certified under the EU–US Data Privacy Framework. Where this cannot be used as the transfer basis, the EU Standard Contractual Clauses, among other mechanisms, may be used.
Where personal data is transferred outside the EEA, we ensure the transfer complies with the GDPR. This may be achieved by:
- the recipient being covered by a valid European Commission adequacy decision
- the EU Standard Contractual Clauses being used as the transfer basis
- other lawful transfer mechanisms and necessary safeguards being applied
This section concerns the tools we use in connection with the website and our communication with you.
Personal data processed as part of the Eldurai service itself, in the user's home, is not covered by this privacy policy. Eldurai's solution is built on the basis that such data is to be stored within the EU and EEA.
9. Your rights
Data protection law gives you a number of rights. Which rights apply depends among other things on what data we process and which legal basis we rely on.
You may, among other things, have the right to:
- know what personal data we hold about you, and receive a copy of it
- have data corrected where it is wrong or incomplete
- have personal data deleted
- have our processing of the data restricted
- object to processing based on our legitimate interest
- receive data you have given us in a structured, machine-readable format where the conditions for data portability are met
- withdraw a consent you have previously given
Withdrawing consent does not affect the lawfulness of processing already carried out before the consent was withdrawn.
We do not use personal data from the website for automated decisions that have legal effects for you or otherwise significantly affect you.
To exercise your rights, contact us at privacy@eldurai.com. We respond without undue delay and normally within one month. In some cases we may ask for information needed to verify your identity before we disclose or change personal data.
If you believe we are processing your personal data unlawfully, we would like you to contact us so we can look into it. You also have the right to complain to the Norwegian Data Protection Authority. More information is available at datatilsynet.no.
10. Changes to this privacy policy
We update this privacy policy if we change the website, start using new providers, or change how we process personal data.
The latest version will always be available at eldurai.com. The date at the top of the page shows when the policy was last updated.
Version 1.1 · Last updated 27 September 2026
Eldurai AS · Company reg. no. 935 103 339 · Jacob Borchs gate 21, 3012 Drammen, Norway ·
privacy@eldurai.com