How we handle your data
ATLA AS collects as little personal data as possible, and only what is needed to reply to you. This page explains what we hold, why, and what you can ask us to do about it.
Who we are
ATLA AS is the data controller for the personal data described on this page. We are a Norwegian company developing offshore freshwater supply chains, with offices in Arendal and Stavanger, Norway. You can reach us at mail@atla.no for any question about this policy or about data we hold.
What we collect
Information you send us. If you use the contact form or email us directly, we receive your name, organisation, email address, and the content of your message. We use this only to respond to you and to carry on the correspondence you started.
Server logs. Our web host records standard technical information when a page is requested — IP address, browser type, the page requested, and a timestamp. These logs exist to keep the site running securely and are not used to build a profile of you.
Cookies and tracking
This website sets no cookies of its own, and uses no analytics, advertising, or third-party tracking scripts. There is nothing to consent to and nothing to opt out of.
Why we are allowed to hold it
Where you contact us, we rely on legitimate interest under Article 6(1)(f) of the GDPR: you have asked us a question and we have a clear interest in answering it. Where correspondence leads towards an agreement, we rely on Article 6(1)(b), processing necessary to take steps at your request before entering a contract. Server logs are retained on the basis of our legitimate interest in operating the site securely.
How long we keep it
Correspondence is kept for as long as it is commercially relevant, and reviewed periodically — enquiries that lead nowhere are deleted within 24 months. Server logs are retained by our host for a short technical retention period. Where law requires us to keep records for longer, for example accounting rules, we do so.
Who else sees it
We do not sell personal data and we do not share it for marketing. Your data is handled by our email and web hosting providers acting as data processors on our instructions, and may be shared with professional advisers or public authorities where we are legally obliged to do so. Any transfer of data outside the EEA is made under the European Commission’s standard contractual clauses or an equivalent safeguard.
Your rights
Under the GDPR you may ask us for a copy of the personal data we hold about you, ask us to correct it if it is wrong, ask us to delete it, ask us to restrict how we use it, ask to receive it in a portable format, and object to processing we carry out on the basis of legitimate interest. Write to mail@atla.no and we will respond within one month.
If you believe we have handled your data improperly you may complain to the Norwegian Data Protection Authority, Datatilsynet (www.datatilsynet.no). We would appreciate the chance to address your concern first.
Security
We apply appropriate technical and organisational measures to protect personal data against loss, misuse, and unauthorised access. No system is perfect, and we will notify you and the supervisory authority where a breach requires it.
Changes to this policy
If this policy changes we will publish the revised version here and update the date at the top of the page.