1. Introduction

SIGRA Group (“SIGRA”, “we”, “us”, or “our”) is committed to protecting your personal data.

This Privacy Policy explains how we collect, use, and safeguard personal information when you visit our website, contact us, apply for a position, or engage with us as a client, supplier, or business partner.

We process personal data in accordance with the General Data Protection Regulation (GDPR) and applicable Norwegian data protection legislation.

2. Data Controller

The relevant SIGRA company with which you interact is the data controller for your personal data.

For general inquiries regarding this Privacy Policy, please contact:

3. What Information We Collect

We may collect and process the following personal data:

When You Visit Our Website

• IP address
• Browser and device information
• Pages visited and usage data
• Cookies (see section 8)

When You Contact Us

• Name
• Company name
• Email address
• Phone number
• Information provided in your message

When You Engage in Business with Us

• Contact details
• Role and company information
• Contractual and communication records

When You Apply for a Job

• CV and application documents
• Education and employment history
• References and other information you provide

We only collect personal data that is necessary for the relevant purpose.

4. Why We Process Personal Data

We process personal data in order to:

• Respond to inquiries
• Provide services and fulfill contracts
• Manage customer and supplier relationships
• Improve our website and communication
• Conduct recruitment processes
• Comply with legal obligations

Our legal basis for processing includes contractual necessity, legitimate interest, legal obligation, or consent where applicable.

5. Sharing of Information

Personal data may be shared with:

• Other companies within the SIGRA Group
• IT service providers and hosting partners
• CRM and communication platforms
• Professional advisors
• Public authorities when required by law

All third-party processors are required to handle personal data securely and in accordance with GDPR.

6. Data Retention

We retain personal data only for as long as necessary to fulfill the purpose for which it was collected, or as required by applicable law.

When personal data is no longer needed, it is securely deleted or anonymized.

7. Your Rights

Under GDPR, you have the right to:

• Access your personal data
• Request correction of inaccurate data
• Request deletion of your data
• Restrict or object to processing
• Request data portability
• Withdraw consent (where processing is based on consent)

You also have the right to lodge a complaint with the Norwegian Data Protection Authority (Datatilsynet).

8. Cookies

Our website uses cookies to improve functionality, performance, and user experience.

Cookies may include:

• Necessary cookies
• Analytics cookies
• Functional cookies

You can manage cookie preferences through your browser settings.

For more information, please refer to our Cookie Policy.

9. Changes to This Policy

We may update this Privacy Policy from time to time. The latest version will always be available on our website.