Privacy policy

‍

Last updated: 17.08.2025

SustEvo AS (“SustEvo”, “we”, “our”, “us”) is committed to protecting your privacy and ensuring that your personal data is handled responsibly, transparently, and in compliance with applicable data protection laws, including the General Data Protection Regulation (GDPR), the Norwegian Personal Data Act, and relevant German data protection requirements.

1. Data Controller

The data controller responsible for processing your personal data is:

SustEvo AS
Vollsveien 19, 1366 LYSAKER
Organization Number: NO 918 091 327 MVA
Email: post@sustevo.com
Phone: +47 22 56 10 00

For our operations in Germany:
SustEvo (Branch Office)
Frankfurter Str. 10, 65760 Eschborn, Germany

If you have any questions about this Privacy Policy or how we process your data, please contact us at:

post@sustevo.com

2. Personal Data We Collect

When you use our Contact page (https://www.sustevo.com/contact), we collect the following information you provide:

• Full name
• Email address
• Phone number (optional)
• Website (optional)
• Message content

We may also collect:

• Technical data (IP address, browser type, device information) for security and analytics.
• Cookies and similar technologies (see Section 7).

3. Purpose and Legal Basis for Processing

We process your personal data for the following purposes:

• Responding to inquiries (via the contact form).
  • Legal basis: Legitimate interest (Art. 6(1)(f) GDPR).
• Providing consultancy services and fulfilling contracts.
  • Legal basis: Contract performance (Art. 6(1)(b) GDPR).
• Compliance with legal obligations (e.g., invoicing, tax).
  • Legal basis: Legal obligation (Art. 6(1)(c) GDPR).
• Marketing communications (if you opt in).
  • Legal basis: Consent (Art. 6(1)(a) GDPR).

4. Data Sharing and Transfers

We do not sell your personal data.We may share your data with:

• Service providers (e.g., hosting, email, analytics).
• Business partners and subcontractors when necessary for project delivery.
• Authorities if required by law.

If data is transferred outside the EEA, we ensure appropriate safeguards (e.g., Standard Contractual Clauses).

5. Data Retention

We retain personal data only as long as necessary:

• Contact form submissions: up to 12 months after resolution.
• Contractual/project data: up to 5 years (legal requirement).
• Marketing data: until you withdraw consent.

6. Your Rights

Under GDPR, you have the right to:

• Access your personal data.
• Request correction or deletion.
• Restrict or object to processing.
• Data portability.
• Withdraw consent at any time.
• Lodge a complaint with Datatilsynet (Norway) or your local supervisory authority (e.g., BfDI in Germany).

7. Cookies and Tracking

Our website uses cookies and similar technologies to:

• Ensure proper website functionality.
• Analyze website traffic and improve user experience.

In Germany, we comply with TTDSG requirements, meaning non-essential cookies require your explicit consent. You can manage cookie preferences via our cookie banner or browser settings.

8. Security

We implement appropriate technical and organizational measures to protect your data, including encryption, access controls, and secure storage.

9. Updates to This Policy

We may update this Privacy Policy from time to time. The latest version will always be available on our website.