Terms & Conditions

Welcome to the Nocteva website. These Terms and Conditions govern your access to and use of this website, operated by Nocteva. By accessing or using the Site, you agree to be bound by these Terms.

‍

1. What Personal Data We Collect

1.1 Information You Provide to Us

When you fill in and submit the contact form on our Site, we collect the following personal data:

  • Name
  • Email address
  • Company or institution
  • Mobile/telephone number (if provided)
  • The content of your message

We only collect the information you actively choose to submit through the form. Fields marked as optional (such as mobile number) are provided at your discretion.

1.2 Information Collected Automatically

The Site is built and hosted on Webflow. Like most websites, the Site automatically uses a small number of standard, strictly necessary cookies set by Webflow to enable core functionality (for example, load balancing and security). We do not use Google Analytics, advertising pixels, or other third-party tracking or analytics cookies on the Site. For more detail on the specific cookies Webflow's hosting infrastructure sets, see Section 6 (Cookies) below.

Our web server and hosting provider may also automatically log limited technical information, such as IP address, browser type, device type, and pages visited, for security and site-operation purposes.

2. Why We Process Your Personal Data (Purpose and Legal Basis)

We process your personal data for the following purposes and on the following legal bases under Article 6 GDPR:

  • To respond to enquiries submitted through our contact form — legal basis: your consent (Art. 6(1)(a)) given by submitting the form, and/or our legitimate interest in responding to business enquiries (Art. 6(1)(f)).
  • To operate, secure, and maintain the Site, including preventing fraud and abuse — legal basis: legitimate interest (Art. 6(1)(f)).
  • To comply with legal obligations, where applicable — legal basis: legal obligation (Art. 6(1)(c)).

We do not use your personal data for automated decision-making or profiling that produces legal effects concerning you.

3. How Long We Keep Your Data

We retain personal data submitted via the contact form only for as long as necessary to respond to your enquiry and for a reasonable period afterwards in case of follow-up correspondence, and in any event no longer than 24 months from your last contact with us, unless a longer retention period is required by law or is necessary to establish, exercise, or defend legal claims. Technical log data generated by our hosting provider is retained in line with that provider's standard retention periods, typically for a limited number of weeks or months.

4. Who We Share Your Data With

We do not sell your personal data. We may share personal data with the following categories of recipients, acting as our data processors:

  • Webflow, Inc. — our website hosting and form-processing platform. Webflow may process personal data on servers located outside the EU/EEA (including in the United States). Where this occurs, the transfer is safeguarded by the European Commission's Standard Contractual Clauses or another valid GDPR transfer mechanism, as provided by Webflow.
  • Email service providers used to receive and manage contact form submissions sent to web@nocteva.no.
  • Professional advisors or authorities, where required to comply with a legal obligation or to protect our legal rights.

Any third-party processor we use is bound by a data processing agreement requiring them to protect your personal data in accordance with GDPR.

5. Cookies

The Site uses only the strictly necessary cookies automatically set by the Webflow platform to serve the Site and keep it secure and functional (for example, cookies related to content delivery and load balancing). These cookies do not track you across other websites and are not used for advertising or analytics purposes. Because these cookies are strictly necessary for the Site to function, they do not require your consent under applicable cookie rules; however, you can control or delete cookies at any time through your browser settings. Please note that blocking essential cookies may affect the Site's functionality.

If we introduce non-essential cookies (such as analytics or marketing cookies) in the future, we will update this Privacy Policy and, where required, request your consent through a cookie banner before such cookies are set.

6. Your Rights Under GDPR

If you are located in the EU/EEA, you have the following rights regarding your personal data:

  • Right of access — to obtain confirmation of whether we process your personal data, and a copy of it.
  • Right to rectification — to have inaccurate or incomplete personal data corrected.
  • Right to erasure (“right to be forgotten”) — to have your personal data deleted, subject to certain exceptions.
  • Right to restriction of processing — to limit how we use your personal data in certain circumstances.
  • Right to data portability — to receive your personal data in a structured, commonly used format, where applicable.
  • Right to object — to object to processing based on legitimate interest.
  • Right to withdraw consent — where processing is based on consent, at any time, without affecting the lawfulness of processing before withdrawal.

To exercise any of these rights, please contact us at web@nocteva.no. We will respond within the timeframes required by GDPR (generally within one month).

You also have the right to lodge a complaint with the Norwegian Data Protection Authority (Datatilsynet) at www.datatilsynet.no, or with the supervisory authority in your EU/EEA country of residence, if you believe your personal data has been processed unlawfully.

7. Data Security

We implement appropriate technical and organizational measures to protect personal data against unauthorized access, alteration, disclosure, or destruction, including relying on Webflow's platform-level security features (such as HTTPS encryption) for data submitted through our Site. However, no method of transmission or storage is completely secure, and we cannot guarantee absolute security.

8. Children's Privacy

The Site is not directed at children, and we do not knowingly collect personal data from individuals under the age of 16. If you believe a child has provided us with personal data, please contact us so we can delete it.

9. Changes to This Privacy Policy

We may update this Privacy Policy from time to time to reflect changes in our practices or for legal, operational, or regulatory reasons. The “Effective date” at the top of this page indicates when it was last revised. We encourage you to review this page periodically.

‍