Privacy Policy
Last updated: 11 August 2026
Portal Space ("Portal Space", "we", "us", or "our") respects your privacy and is committed to protecting your personal data.
This Privacy Policy explains how we collect, use, store, disclose and otherwise process personal data when you visit our website at https://www.portalspace.no/ or interact with us, including when you submit an application or contact us through our website.
Portal Space is based in Norway and processes personal data in accordance with applicable data protection legislation, including the EU General Data Protection Regulation ("GDPR") as applicable and the Norwegian Personal Data Act (Personopplysningsloven).
1. Who is responsible for your personal data?
The data controller responsible for the processing described in this Privacy Policy is:
Portal Space
Sem Sælands vei 24
0371 Oslo
Norway
Email: hello@portalspace.no
If you have questions about how we process your personal data or wish to exercise your privacy rights, you can contact us using the details above.
Data Protection Officer
We have not designated a Data Protection Officer unless otherwise required by applicable law.
2. What personal data do we collect?
The personal data we collect depends on how you interact with Portal Space.
2.1 Application information
When you submit an application through our website, we collect the information you choose to provide in the application form.
This may include, depending on the information requested in the relevant application:
-
Name
-
Email address
-
Telephone number
-
Organisation or affiliation
-
Information contained in your application
-
Other information you voluntarily provide in connection with your application
We only ask for information that is relevant to the application process and should not submit personal data that is not requested or necessary for that purpose.
If an application form asks for additional categories of information, the relevant form should explain why that information is requested where required by law.
2.2 Contact forms
If you use our contact form to get in touch with Portal Space, for example regarding sponsorship, partnerships, collaboration or other enquiries, we may collect:
-
Name
-
Email address
-
Organisation or company
-
Telephone number, if provided
-
The contents of your message
-
Any other personal data you choose to provide
We use this information to respond to your enquiry and manage the relationship arising from that enquiry.
2.3 Technical information
When you visit our website, certain technical information may be processed automatically by our website infrastructure, hosting provider or other technical service providers.
Depending on the configuration of our systems, this may include:
-
IP address
-
Date and time of access
-
Browser and device information
-
Requested pages or resources
-
Technical logs and diagnostic information
-
Information necessary for security and operation of the website
We do not currently use Google Analytics or similar analytics services, and we do not currently use the website for behavioural advertising or marketing tracking.
3. How do we use your personal data?
We process personal data only for specific and legitimate purposes.
Depending on the circumstances, we may use personal data to:
-
Receive and assess applications;
-
Communicate with applicants;
-
Respond to enquiries submitted through our contact forms;
-
Communicate with potential or existing sponsors, partners and collaborators;
-
Administer and operate our website;
-
Maintain the security and functionality of our website and systems;
-
Prevent misuse, fraud or security incidents;
-
Comply with legal and regulatory obligations; and
-
Establish, exercise or defend legal claims where necessary.
We will not use your personal data for purposes that are incompatible with the purposes for which it was collected unless permitted or required by applicable law.
4. Legal basis for processing
Under the GDPR, we must have a lawful basis for processing personal data.
Depending on the circumstances, Portal Space may rely on one or more of the following legal bases under Article 6 GDPR:
Performance of a contract or steps prior to entering into a contract
We may process personal data where this is necessary to take steps at your request before entering into an agreement or to perform an agreement with you.
Legitimate interests
We may process personal data where this is necessary for our legitimate interests, provided that those interests are not overridden by your interests or fundamental rights and freedoms.
Examples may include:
-
Responding to enquiries;
-
Managing applications;
-
Maintaining and securing our website and systems;
-
Communicating with organisations, sponsors and partners; and
-
Establishing, exercising or defending legal claims.
Where we rely on legitimate interests, we consider the impact of the processing on individuals and take appropriate measures to protect their rights.
Legal obligations
We may process personal data where necessary to comply with a legal obligation applicable to Portal Space.
Consent
Where required by law, we may process personal data on the basis of your consent.
Where processing is based on consent, you may withdraw your consent at any time. Withdrawal of consent does not affect the lawfulness of processing carried out before consent was withdrawn.
5. Applications and application decisions
Personal data submitted through an application form is used for the purposes of administering and assessing the relevant application.
Access to application information should be limited to people who need the information for legitimate Portal Space purposes.
We do not sell application data or use application information for unrelated advertising or marketing purposes.
If an application contains personal data relating to other individuals, you should only provide that information where you have a lawful basis to do so and, where appropriate, have informed those individuals that their information is being provided to Portal Space.
6. Contact and sponsorship enquiries
Information submitted through our contact forms may be used to respond to your enquiry and, where relevant, to discuss sponsorships, partnerships, collaborations or other business relationships.
If your enquiry leads to an ongoing relationship or agreement, we may process relevant contact information for the purposes of managing that relationship.
We do not currently use contact-form information for unrelated marketing campaigns.
7. Cookies and similar technologies
Portal Space does not currently use Google Analytics, advertising trackers or similar analytics technologies.
Our website may nevertheless use cookies or similar technologies that are technically necessary for the operation, security or functionality of the website.
Where non-essential cookies or similar technologies are introduced, we will provide appropriate information and, where required by applicable law, obtain your consent before using them.
You may also manage cookies through your browser settings.
8. Who may receive your personal data?
We do not sell your personal data.
We may disclose personal data to third parties where this is necessary for the purposes described in this Privacy Policy or where required by law.
These recipients may include:
Service providers
We may use third-party providers to operate our website, forms, email, hosting, storage and other technical infrastructure.
Where such providers process personal data on our behalf, we will take appropriate steps to ensure that the processing is governed by appropriate contractual and data protection safeguards.
Current service providers:
-
Website/hosting provider: Wix
-
Email provider: Google
-
Application/contact-form provider: Google
Legal and regulatory authorities
We may disclose personal data where required to do so by law, court order, or a valid request from a competent public authority.
Professional advisers
Where necessary, personal data may be shared with professional advisers such as lawyers, accountants or auditors, subject to applicable confidentiality and data protection obligations.
9. International transfers
Some of our service providers may process or store personal data outside Norway or the European Economic Area ("EEA").
Where personal data is transferred outside the EEA, we will ensure that the transfer is carried out in accordance with applicable data protection law.
Depending on the circumstances, this may include relying on:
-
An adequacy decision of the European Commission;
-
Standard Contractual Clauses approved by the European Commission;
-
Appropriate supplementary measures where necessary; or
-
Another lawful transfer mechanism permitted under applicable law.
You may contact us using the details in Section 1 if you would like further information about relevant international transfers and safeguards.
10. How long do we keep your personal data?
We retain personal data only for as long as necessary for the purpose for which it was collected, unless a longer retention period is required or permitted by law.
Retention periods depend on the type of information and the reason it was collected.
Application information
Application information will normally be retained for [INSERT PERIOD] after the relevant application process has ended, unless we have a legitimate reason or legal obligation to retain it for longer.
Contact enquiries
Information relating to contact and sponsorship enquiries will normally be retained for 5 years after the enquiry or relationship has ended, unless longer retention is necessary for legal, contractual or other legitimate purposes.
Where personal data is no longer necessary, we will delete it, anonymise it or otherwise securely dispose of it, subject to applicable legal requirements and reasonable technical limitations such as backup systems.
11. Your rights under the GDPR
Depending on the circumstances and applicable law, you may have the following rights regarding your personal data.
Right of access
You may request confirmation as to whether we process personal data about you and, where applicable, request a copy of that personal data.
Right to rectification
You may request that inaccurate or incomplete personal data is corrected.
Right to erasure
In certain circumstances, you may request that your personal data is deleted.
This right is not absolute. We may need to retain certain information where required or permitted by law.
Right to restriction of processing
In certain circumstances, you may request that we restrict the processing of your personal data.
Right to object
Where we process your personal data based on legitimate interests, you may have the right to object to that processing.
You may also have an absolute right to object to processing for direct marketing purposes where applicable.
Right to data portability
Where the legal requirements are satisfied, you may have the right to receive personal data you have provided to us in a structured, commonly used and machine-readable format and to request that it be transmitted to another controller.
Right to withdraw consent
Where we rely on your consent, you may withdraw it at any time.
Withdrawal does not affect the lawfulness of processing that took place before the withdrawal.
Right to complain
If you believe that we process your personal data unlawfully, you have the right to lodge a complaint with the competent data protection supervisory authority.
For Portal Space in Norway, this is:
Datatilsynet (Norwegian Data Protection Authority)
You can find information about contacting Datatilsynet at https://www.datatilsynet.no/.
You are also welcome to contact Portal Space first so that we can try to address your concern.
12. How to exercise your rights
To exercise any of your privacy rights, please contact us at:
Please provide enough information for us to understand your request and verify your identity where reasonably necessary.
We will normally respond to a valid request within the timeframe required by applicable data protection law.
We generally do not charge a fee for exercising your GDPR rights. However, where permitted by law, we may charge a reasonable fee or refuse to act on a request that is manifestly unfounded or excessive.
13. Security
We take reasonable technical and organisational measures to protect personal data against accidental or unlawful destruction, loss, alteration, unauthorised disclosure or access.
The measures we use depend on the nature of the information and the risks associated with its processing.
No method of transmitting or storing information electronically can be guaranteed to be completely secure. However, we take appropriate measures designed to reduce the risks to personal data.
14. Data breaches
Where a personal data breach occurs, we will assess the breach and take appropriate steps in accordance with applicable data protection law.
Where legally required, we will notify the relevant supervisory authority and/or affected individuals within the applicable statutory timeframes.
15. Automated decision-making and profiling
Portal Space does not currently use personal data to make decisions based solely on automated processing that produce legal or similarly significant effects on individuals.
We also do not currently use personal data for behavioural profiling or targeted advertising.
If these practices change, we will update this Privacy Policy and provide any information or safeguards required by applicable law.
16. Changes to this Privacy Policy
We may update this Privacy Policy from time to time to reflect changes to our services, data-processing practices or applicable legal requirements.
When we make changes, we will update the "Last updated" date at the top of this Privacy Policy.
Where required by law, we will provide additional notice or obtain consent before making material changes that affect how we process your personal data.
We encourage you to review this Privacy Policy periodically.
17. Contact us
If you have questions about this Privacy Policy, how we process personal data, or your privacy rights, please contact us:
Portal Space
Sem Sælands vei 24
0371 Oslo
Norway
Email: hello@portalspace.no