This Privacy Policy ("Policy") describes how Gateway.FM AS ("Company," "we," "us," or "our") processes personal data as a data controller in connection with your use of our public websites, communications, and general business operations. We encourage you to read this Policy carefully to understand how we handle and protect personal data and the choices available to you regarding your data.
Privacy at a Glance
- We process personal data primarily in connection with our public websites, communications, and general business operations.
- Personal data processed on behalf of customers through our infrastructure services is governed by separate customer agreements and applicable Data Processing Addenda (DPAs).
- We process personal data in accordance with applicable data protection laws and on appropriate legal bases.
- We do not sell personal data.
- We implement appropriate technical and organisational measures designed to protect personal data.
- Individuals may have rights in relation to their personal data, as described in this Policy.
- Certain blockchain networks are designed to be immutable, which may affect the ability to modify or delete data recorded on-chain.
Scope of This Policy
This Policy applies to personal data we process when you interact with us, including but not limited to when you:
- visit or interact with our public websites;
- communicate with us via contact forms, email, or other channels;
- subscribe to newsletters or marketing communications;
- participate in partner, ecosystem, or marketplace-related activities.
What Do We Mean by "Personal Data"?
"Personal data" means any information relating to an identified or identifiable individual. This includes, for example, names, contact details, online identifiers such as IP addresses, and other information that can reasonably be linked to an individual. Information that does not relate to an identifiable individual is considered non-personal data.
Categories of Personal Data We Collect
Depending on how you interact with us, we may collect and process the following categories of personal data:
- Contact Information: name, email address, company name, job title, and similar details you provide when contacting us or subscribing to communications.
- Technical and Usage Data: IP address, device information, browser type, operating system, pages viewed, and related diagnostic and security logs generated when you visit our websites.
- Communications: information contained in inquiries, emails, feedback, or other communications you send to us.
- Partner and Ecosystem Data: business contact details submitted in connection with partner listings, marketplace participation, or similar programs.
We do not intentionally collect special categories of personal data unless required by law.
How We Use Personal Data
We use personal data for the following purposes:
- to operate, maintain, and improve our websites;
- to respond to inquiries and communicate with you;
- to manage marketing communications, newsletters, and events;
- to administer partner, ecosystem, or marketplace programs;
- to ensure security, prevent misuse, and protect our systems;
- to comply with applicable legal and regulatory obligations.
Legal Bases for Processing
Where required under applicable data protection law, we rely on one or more of the following legal bases:
- Legitimate Interests, such as operating and improving our websites, communicating with users, and maintaining security;
- Consent, for example where you opt in to marketing communications or non-essential cookies;
- Contractual Necessity, such as responding to requests made by you prior to entering into a contract;
- Legal Obligations, where processing is required to comply with applicable laws.
Marketing Communications
When you subscribe to newsletters, join waitlists, or otherwise provide your contact details, we may send you marketing or informational communications where permitted by law. You may opt out or manage your communication preferences at any time by using the unsubscribe link or contacting us.
International Data Transfers
Personal data may be transferred to and processed in countries outside your country of residence, including outside the EEA. Where required, we implement appropriate safeguards, such as Standard Contractual Clauses, to ensure an adequate level of protection in accordance with applicable data protection laws.
Security Measures
We implement appropriate technical and organisational measures designed to protect personal data against accidental or unlawful destruction, loss, alteration, unauthorised disclosure, or access.
Your Rights
Subject to applicable data protection law, you may have certain rights in relation to your personal data, including the right to:
- access and obtain a copy of your personal data;
- request correction or deletion;
- object to or restrict processing;
- withdraw consent where processing is based on consent.
If you believe our processing of your personal data is unlawful, you also have the right to lodge a complaint with a supervisory authority, including the Norwegian Data Protection Authority (Datatilsynet).
Changes to this Policy
We may update this Policy from time to time. The most current version will be published on our website.
Contact Us
If you have questions about this Privacy Policy or about our data protection practices, please contact:
Gateway.FM AS
Løkkeveien 109, 4007 STAVANGER, Norway
Email: privacy@gateway.fm