This privacy policy explains how LGr Technologies AS handles personal data in connection with this website (lgrtech.no). We have written it to be read, not skimmed past. If anything is unclear, contact us using the details below.
1. Who is responsible (data controller)
LGr Technologies AS
Org. nr. 933 959 589
VMpaviljongen 1, 7034 Trondheim, Norway
Email: main@lgrtech.no (general) / erik@lgrtech.no
LGr Technologies AS is the data controller for the processing described here. We have not appointed a data protection officer, as we are not required to under GDPR Article 37; you can direct any privacy question to the email addresses above.
2. What this website does and does not do
This is a static informational website, deliberately built to be privacy-friendly:
- It sets no cookies and uses no localStorage or sessionStorage.
- It runs no analytics or tracking (no Google Analytics, Tag Manager, Matomo, Plausible or similar).
- It loads no third-party content on page load. Fonts are served from our own server, not from a font CDN, so your IP address is not sent to any third party when a page loads.
- The only personal data we process is (a) what you send us through the contact form, and (b) — only if you click to play it — the data your browser sends to YouTube when the MLTS film loads.
Because nothing is stored on, or read from, your device when a page loads, no cookie-consent banner is required. Each activity is described below.
3. The contact form
What we collect. When you use the contact form on our Contact page, you provide: first name, last name, email address, organisation (optional), enquiry type, and the free-text message you write. Only email address and message are required; the other fields are voluntary. If you leave a voluntary field blank, the only consequence is that we may know less context about your enquiry.
Why, and on what legal basis. We use this data solely to read and respond to your enquiry and to take any steps you ask for before entering into a contract. The legal basis is GDPR Article 6(1)(b) (steps at your request prior to a possible contract) and/or Article 6(1)(f) (our legitimate interest in answering enquiries about our products). We do not use contact-form data for marketing, profiling or automated decision-making.
How it is delivered. When you press send, your message is transmitted over HTTPS to our own server — the same server that hosts this website — which emails it to our mailbox at main@lgrtech.no. We do not use any third-party form service, and your submission is not transferred outside the EU/EEA at this step. Our mailbox is hosted on Microsoft 365 (see sections 6 and 7).
Retention. We keep enquiry emails for as long as needed to handle your request and for a reasonable period afterwards for follow-up and record-keeping, and we delete them when they are no longer needed.
4. The MLTS film (YouTube)
The MLTS product page contains a film. Nothing is requested from YouTube when the page loads — you see only a still image and a play button. Only if you click play does the player load, at which point an embedded YouTube player from youtube-nocookie.com (operated by Google) is loaded. From that moment, Google receives your IP address and device/browser information and may set cookies or use local storage in your browser; this is governed by Google's own privacy policy. Because Google's servers are in the United States, this involves a transfer to a third country. Google LLC is self-certified under the EU-US Data Privacy Framework, so this transfer relies on the European Commission's adequacy decision of 10 July 2023 (GDPR Article 45). The legal basis for loading the player is your explicit request (your click), GDPR Article 6(1)(a)/(b). If you do not click play, no contact with Google or YouTube takes place.
5. Server logs
Our web server is configured not to keep visitor access logs — there is no stored, per-request record of your IP address. Some minimal, short-lived technical or error logging may occur to operate and secure the service, but it is not used to profile or track visitors.
6. Recipients and processors
We do not sell or share your personal data. Data is disclosed only to:
- Microsoft 365 (Microsoft) — hosts our email. Your contact-form message is delivered to and stored in our mailbox there.
- Google / YouTube — only if you click to play the MLTS film (see section 4).
- Our hosting provider — operates the server that serves this site and runs the contact-form handler (see section 5).
7. Transfers outside the EU/EEA
We keep personal data within the EU/EEA wherever possible. Two limited situations can involve a third country:
- Email (Microsoft 365): Microsoft operates Microsoft 365 under its EU Data Boundary, keeping data within the EU. For any limited transfer to the United States, Microsoft is certified under the EU-US Data Privacy Framework (GDPR Article 45) and additionally offers Standard Contractual Clauses (Article 46).
- YouTube film playback (United States), only on your click: relying on the EU-US Data Privacy Framework adequacy decision (GDPR Article 45), under which Google LLC is self-certified.
8. Your rights
Under the GDPR you have the right to:
- Access — obtain confirmation of, and a copy of, the personal data we hold about you.
- Rectification — have inaccurate or incomplete data corrected.
- Erasure — have your data deleted where the conditions are met.
- Restriction — have our processing limited in certain circumstances.
- Objection — object to processing based on legitimate interest (Article 6(1)(f)).
- Data portability — receive certain data in a structured, machine-readable format.
- Withdraw consent — where processing is based on consent, withdraw it at any time without affecting the lawfulness of processing carried out beforehand.
To exercise any of these, contact us at main@lgrtech.no. We respond free of charge and without undue delay.
9. Right to complain
If you believe we are processing your personal data unlawfully, you have the right to lodge a complaint with the Norwegian Data Protection Authority (Datatilsynet), the supervisory authority for the GDPR and personopplysningsloven in Norway:
Datatilsynet — Postboks 458 Sentrum, 0105 Oslo, Norway — www.datatilsynet.no
We would, however, appreciate the chance to address your concern first.
10. Changes to this policy
If we change how we process personal data, we will update this policy and the "Last updated" date above. If a change introduces a new purpose, we will inform you before that processing begins.