Privacy Policy

This privacy policy explains how Digiserv AS processes personal data when you visit our website and use our products and services. Most of the processing is necessary to perform our agreement with you, to comply with legal requirements, or is based on our legitimate interest – see “Legal basis” below. Processing that requires consent (for example non-essential cookies and certain marketing purposes) only takes place where you have given active consent, which you may withdraw at any time.

This policy applies to Digiserv's processing of personal data as controller – typically concerning visitors to the website, contact persons at customers and users of our services. Personal data that Digiserv processes on behalf of a customer (for example data belonging to the customer's own employees in Microsoft 365 or other services) is governed by the Data Processing Agreement between the parties.

When you visit our websites, technical information such as browser type, operating system, referring and exit pages, date and time, and clickstream data is recorded automatically. Such information is used in aggregated form for statistics, security and troubleshooting, based on our legitimate interest. An IP address is considered personal data and is processed as described elsewhere in this policy.

We use cookies on our websites to improve functionality and – only if you consent – to collect anonymized visitor statistics. For information about which cookies we use and how to manage them, see our overview of cookies.

Personal data and responsibility

If you have objections regarding privacy or the use of data that have not been handled satisfactorily, you may also lodge a complaint with the Norwegian Data Protection Authority (Datatilsynet).

Digiserv is responsible for the processing of personal data carried out in connection with visits to our websites or the ordering and administration of our products and services, and contact with Customer Service.

Digiserv collects the following personal data in order to identify and register the customer relationship, contact persons for the customer relationship and user accounts in our systems:

• Customer relationship: first name, last name, postal address, telephone number and email address.
• Contact persons and user accounts: first name, last name, telephone number and email address.

The data is also collected in order to deliver the service in accordance with the agreement and to provide customer service on request. For security reasons, the IP address used when ordering, administering and using our services is also stored. Providing the personal data is not voluntary unless otherwise stated in this policy or in the user interface of the services.

Personal data is stored in systems operated by Digiserv on infrastructure provided by our subprocessors. See our overview of subprocessors for more information about where data is processed.

Digiserv is obliged to delete or correct personal data that is inaccurate. Where necessary, we may verify and update contact details against publicly available sources to ensure that the information is correct.

Information collected via website forms

When you use forms on our websites, we collect the information necessary to respond to your inquiry:

• Contact form: Name, company (optional), email, telephone (optional) and message. The purpose is to respond to your inquiry.
• Remote support form: Email, company (optional) and a short description (optional). The purpose is to set up a remote support session so that a technician can assist you.

The information is used only for the stated purpose and is deleted once the inquiry has been answered or the remote support session has ended, unless the information is necessary for further customer follow-up. Form data is sent to and processed on Digiserv's own backend (digiserv.cloud).

The forms are protected by Cloudflare Turnstile to prevent spam and abuse. Turnstile analyzes limited information about your browser and your interaction (such as browser type and screen resolution) in order to distinguish humans from bots. This processing is based on legitimate interest (GDPR Article 6(1)(f)) in protecting our services. Cloudflare acts as a processor. For more information, see Cloudflare's privacy policy.

AI-powered domain name search

Our domain name service offers an AI-powered search where you can describe your business to get suggestions for available domain names. When you use this feature, the business description you enter (max. 300 characters) is sent to Anthropic's API via our server. No personal data such as name, email or IP address is sent to Anthropic – only the description itself. The processing is based on consent (GDPR Article 6(1)(a)), in that you actively choose to use the AI search feature. Anthropic acts as a processor. For more information, see Anthropic's privacy policy.

Customer service and customer follow-up

When you contact our Customer Service by telephone, email or other channels, Digiserv records and stores the personal data necessary to respond to the inquiry. The information is retained for use as a reference in case you request customer service again at a later date, and is used to provide the best possible service.

Automated decision-making

Digiserv does not make automated decisions, including profiling, that produce legal effects concerning you or similarly significantly affect you, cf. GDPR Article 22. The AI-powered domain name search only provides suggestions, which you decide yourself whether to use.

Processing of personal data

Personal data is collected so that Digiserv can carry out the tasks and services we are required to perform under law, regulations and/or agreement. Personal data is processed within the framework of the laws and regulations in force at any given time.

Legal basis

Digiserv's main processing activities have the following legal basis under GDPR Article 6:

• Delivery of services and performance of contract – Art. 6(1)(b): necessary for the performance of a contract with you.
• Invoicing, accounting and bookkeeping – Art. 6(1)(c): legal obligation, including under the Norwegian Bookkeeping Act (bokføringsloven).
• Customer service and customer follow-up – Art. 6(1)(b) and (f): necessary for the performance of the contract, and legitimate interest in providing good service.
• Email marketing to existing customers – Art. 6(1)(f): legitimate interest, cf. section 15, third paragraph, of the Norwegian Marketing Control Act (markedsføringsloven).
• Other marketing – Art. 6(1)(a): consent.
• Security measures and prevention of misuse – Art. 6(1)(f): legitimate interest in protecting our services.
• Credit assessment and payment security – Art. 6(1)(b) and (f): necessary to enter into and perform a contract, and legitimate interest in securing payment. A credit assessment is obtained when the contract is entered into, and otherwise when there is objective reason to believe that the ability to pay has deteriorated. You will receive a copy letter (gjenpartsbrev) from the credit reference agency.
• Updating contact details from external sources – Art. 6(1)(f): legitimate interest in accurate information. We may update inaccurate or incomplete information with data from publicly available sources and credit reference agencies (cf. the duty to inform under GDPR Article 14).
• Compliance with legal requirements – Art. 6(1)(c): legal obligation.

Personal data may be disclosed to third parties with whom Digiserv cooperates, both within and outside the EEA and the EU, so that we can carry out the tasks and services we are required to perform under law, regulations and/or agreement, and in accordance with this privacy policy.

Where there is a statutory duty to provide information to a public authority, registered personal data will be handed over in accordance with the authority's requirements.

Please note that the processing of personal data in relation to specific services and products may be governed by separate agreements made available in our Service Agreement. This includes, but is not limited to, domain names and the information registered in WHOIS.

Digiserv reserves the right to make information about you available in anonymized form.

Digiserv is also entitled to disclose information about you where this is necessary to perform the Agreement, or where such disclosure is necessary to enforce or apply our general terms and conditions, or to protect the rights, property and safety of ourselves and others.

If Digiserv discloses customer information, this will take place pursuant to a written agreement under which the recipient of the information undertakes to safeguard the purpose of the contract. Digiserv will only disclose customer information to recipients in countries outside the EEA if permitted by law or if you give your voluntary, explicit and informed consent to the disclosure.

Access and rectification

You are entitled at any time to access the information that is registered. You can view and edit your personal data at any time in our Control Panel. Information stored in connection with email correspondence is available by logging in to the support portal (support.digiserv.no).

You can also contact Customer Service, which will respond to your inquiry as quickly as possible within normal office hours.

Requests for access, rectification, erasure or the other rights set out below can be sent to personvern@digiserv.no. We respond without undue delay and at the latest within 30 days (GDPR Article 12(3)).

Retention and deletion

Information that is no longer necessary for the purpose for which it was stored will be deleted on an ongoing basis.

We store personal data about customers in accordance with applicable legislation. Accounting records and invoice data are retained for five years after the end of the financial year, cf. section 13 of the Norwegian Bookkeeping Act (bokføringsloven). When you cancel or delete services, contact details, order and invoice history and copies of correspondence are deleted or anonymized within 24 months after the customer relationship has ended, unless longer retention is necessary to comply with legal requirements or for the establishment, exercise or defense of legal claims.

Within this period, we may retain basic contact details with a view to a possible later renewal of the customer relationship, based on our legitimate interest (Art. 6(1)(f)). You can opt out of this at any time by contacting us.

Data portability

You have the right to data portability. This means that you can take your personal data with you in a machine-readable format.

Right to erasure

You have the right to request that personal data about you be erased when the purpose of the processing has been fulfilled or you withdraw the consent on which the processing is based, cf. GDPR Article 17. The right to erasure is limited by statutory retention obligations and Digiserv's need to protect legal rights.

Right to restriction of processing

You have the right to request that the processing of your personal data be restricted where the data is inaccurate, the processing is unlawful, or you have objected to the processing, cf. GDPR Article 18.

Right to object

You have the right to object to the processing of your personal data that is based on legitimate interest, cf. GDPR Article 21. You have the right at any time to object to the processing of your personal data for direct marketing purposes.

Right to withdraw consent

Where the processing is based on consent, you have the right to withdraw your consent at any time. Withdrawal of consent does not affect the lawfulness of processing carried out before the withdrawal.

Confidentiality and security

We use a combination of physical, electronic and procedural safeguards to protect personal data.

Information in your account is password-protected. In addition, the account password is stored using a salted one-way hashing algorithm with a variable work factor.

All data transmission over the Internet is encrypted with TLS (HTTPS), using modern protocols (TLS 1.2 or later). However, there is no guarantee that information cannot be disclosed, altered or destroyed through a breach of a firewall or secure server software.

Since no data transmission over the Internet is 100% secure, we cannot guarantee or warrant the security of any information you send to us.

If a security breach is likely to result in a high risk to your rights and freedoms, we will notify you without undue delay – in writing by email or text message (SMS) – so that you can take the necessary measures (cf. GDPR Article 34). We may also contact you electronically about security and privacy incidents and administrative matters relating to the service. Such communication is not marketing, and is necessary to perform the agreement and our legal obligations.

When Digiserv is the controller, we notify the Norwegian Data Protection Authority (Datatilsynet) of security breaches without undue delay and at the latest within 72 hours after becoming aware of the breach. When we process personal data on behalf of a customer, we notify the customer, who is responsible for reporting the breach to the supervisory authority.

Sensitive and confidential personal data

None of Digiserv's services require sensitive and confidential personal data to be provided. Registering such personal data in Digiserv's interfaces is not permitted, and such data must not be provided to Digiserv under any circumstances.

Where you are asked to submit a copy of an identity document, the national identity number (personnummer) must be redacted.

Third-party functionality and websites

In some cases, our services include third-party features, services, apps and links from other providers and websites whose privacy practices may differ from ours. These third-party features may collect your IP address and which page you visit on the website, and they may store a cookie so that the third-party features work as intended.

Third-party features may also collect sensitive information, for example financial information (credit card) to process purchases of products or services.

If you submit personal data to any of these websites, that information is subject to their privacy policies. We encourage you to read the privacy policies of all websites you visit carefully before providing personal data.

The fonts on the website (Inter, Schibsted Grotesk and Caveat) are self-hosted on our own servers. No requests or IP addresses are sent to Google or other third parties to load fonts.

We use Google Analytics 4 to understand how the website is used and to improve its content. The service is set up with Google's Consent Mode (Consent Mode v2). This means that we do not set cookies and cannot recognize you across visits until you have consented to analytics cookies in the cookie settings. If you have not yet made a choice, or if you have declined, we only send anonymous signals without identifiers. These cover the time, browser type and referring page, and Google uses them for aggregated statistics. Full measurement is only activated when you consent, and is switched off again if you withdraw your consent. We do not store your full IP address; for visitors in the EU/EEA, the IP address is truncated by Google by default, and the data is used only for aggregated visitor statistics. Cookie-based measurement is based on consent (GDPR Article 6(1)(a)). Google acts as a processor. For more information, see Google's privacy policy.

Marketing and electronic communication

Digiserv uses personal data for marketing its own products and services, analyzing customer behavior and sending newsletters and other information.

We send electronic marketing (email and text messages) to existing customers pursuant to section 15 of the Norwegian Marketing Control Act (markedsføringsloven), and only for our own similar products and services. All other electronic marketing takes place only with your consent. You can opt out of marketing free of charge – both by contacting us and via the unsubscribe link in each individual message.

After the customer relationship has ended, we may for a limited period continue to send you marketing about our own similar products and services, as long as you have not opted out. If you do not want this, you can opt out free of charge at any time.

Listing in telephone directories

If you have telephony services through Digiserv and do not opt out, Digiserv may make your name, address and telephone number available in telephone directories, for directory assistance services and for addressing purposes.

Changes to the privacy policy

We update the privacy policy as needed. In the event of material changes – that is, changes that restrict your rights or alter the parties' obligations – we give notice in the same way as for material changes to the General Terms and Conditions. The top of this page shows when the policy was last updated.