Privacy Statement

1. Data Controller

Starquest AS (hereafter "StarQuest" or "we") is the data controller responsible for the processing of personal data as described in this privacy policy. This policy applies to both visitors to our website (starquest.no) and users of the StarQuest platform.

2. What Personal Data We Collect

We collect and process personal data in the following contexts:

• •Website visitors: IP address, browser type, pages visited, and cookies (see our Cookie Policy).
• •Contact forms: Name, email address, company, and message content when you reach out to us.
• •Platform users: Name, email, role, organization data, and activity logs necessary to provide our services.
• •Job applicants: CV, application data, and related documents submitted through our recruitment tools.

3. How We Use Your Data

We process personal data to:

• •Provide, maintain, and improve our platform and services.
• •Respond to inquiries and provide customer support.
• •Ensure security and prevent fraud.
• •Comply with legal obligations (e.g. tax, accounting, GDPR).
• •Analyze website usage to improve the user experience.

4. Legal Basis

We process personal data based on one or more of the following legal grounds under the GDPR: consent (Article 6(1)(a)), contractual necessity (Article 6(1)(b)), legal obligation (Article 6(1)(c)), or legitimate interest (Article 6(1)(f)).

5. Data Sharing & Transfers

We do not sell your personal data. We may share data with trusted sub-processors (e.g. hosting providers, email services) who process data on our behalf under strict data processing agreements. All transfers outside the EEA are safeguarded by Standard Contractual Clauses or equivalent mechanisms.

6. Data Retention

We retain personal data only for as long as necessary for the purposes described in this policy, or as required by law. When data is no longer needed, it is securely deleted or anonymized.

7. Your Rights

Under the GDPR, you have the right to:

• •Access the personal data we hold about you.
• •Request correction of inaccurate data.
• •Request deletion of your data ("right to be forgotten").
• •Restrict or object to processing.
• •Data portability.
• •Withdraw consent at any time.

To exercise any of these rights, contact us at hey@starquest.no.

8. Security

We implement appropriate technical and organizational measures to protect your personal data against unauthorized access, alteration, disclosure, or destruction. This includes encryption, access controls, and regular security assessments.

9. Supervisory Authority

If you believe your rights have been violated, you have the right to lodge a complaint with the Norwegian Data Protection Authority (Datatilsynet) at datatilsynet.no.

10. Changes to This Policy

We may update this privacy policy from time to time. Any changes will be posted on this page with an updated revision date. We encourage you to review this page periodically.