Privacy Policy
Last updated: January 27, 2026
This privacy policy applies to Alfred AI AS. It explains what kind of personal data we collect when you use our services, what we use it for, and what rights you have.
1. What is Personal Data?
Personal data is any information that can be directly or indirectly linked to a physical person, such as a name, postal address, email address, location, and mobile number.
2. Who is the Data Controller?
Alfred AI AS, represented by the CEO, is the Data Controller for the processing of personal data we collect. This means that we have the primary responsibility for complying with privacy regulations and determining the purpose of the collection and use of personal data.
Alfred AI AS
Org. number: 835 845 702 MVA
Grimstadgata 28, 0464 Oslo, Norway
3. What Personal Data Do We Collect?
We collect the following personal data:
Potential Customers
When you interact with us to purchase services (potential customer), we collect information such as name, email, phone number, job title, employer, and communication history. We collect this information to communicate with you and explore the possibility of cooperation.
Legal basis: Consent (if you sign up for marketing) or legitimate interest (to follow up on sales processes).
Material Requests
When you request materials (e-books, guides, etc.), we collect information such as name, email, and what you have downloaded. We collect this information to send you the material and understand what visitors are interested in.
Legal basis: Consent.
Support Inquiries
When you contact us for support or questions, we collect information such as name, email, employer, and the content of your inquiry. We collect this information to answer your questions.
Legal basis: Legitimate interest in order to assist you.
Social Media Interactions
When you interact with us on social media, we collect information such as name, photo, "likes," and comments that are publicly available. We collect this information to communicate and increase our online presence.
Legal basis: Legitimate interest.
Event Attendance
When you attend our events (physical or digital), we collect information such as name, email, job title, and employer. We collect this information to administer the event, send confirmations, and request feedback.
Legal basis: Legitimate interest in conducting the event.
We may take photos or videos from events for marketing purposes. This is done based on legitimate interest (overview/crowd shots) or consent (close-ups). You can opt out of this by contacting us.
Website Visits
When you visit our website or show interest in our services, we collect information about your browser, clicked links, location, and browsing behaviour (see our Cookie Policy for more information). We collect this information to understand visitor behaviour and display relevant content.
Legal basis: Consent (via the web browser).
Suppliers
When you are a supplier to us, we collect information such as contact details for contact persons and invoicing information. We collect this information to manage the supplier relationship.
Legal basis: Performance of a contract or legitimate interest.
Customers, Leads, and Partners
When you are involved in a sales process, are a contact person for a customer/lead, or are a partner, we collect information such as name, email address, phone number, contact details, job title, user role (if applicable), customer relationship history, information from recordings of calls/meetings, and employer. We collect this information to streamline the sales process with potential customers, better manage relationships with you, gather feedback, and offer additional products suitable for the customer.
Legal basis: Legitimate interest in streamlining the process with potential customers, providing customer and partner follow-up, and managing internal risk.
Marketing
For marketing purposes, we collect information such as name, email address, and other contact information. We collect this information to increase our visibility and showcase success stories.
Legal basis: Consent.
4. How Long Do We Store Your Personal Data?
We do not store your personal data longer than necessary to fulfil the purpose of the processing. However, this does not apply if retention is required by law for a longer period than our purpose dictates.
This means, for example, that personal data we process based on your consent will be deleted when consent is withdrawn. If the legal basis is our legitimate interest, the personal data will be deleted when such legitimate interest no longer exists. Information stored in accordance with statutory obligations is deleted when the obligation ceases. A typical example of this is the retention requirement for accounting information under the Bookkeeping Act.
5. Who Do We Share Personal Data With?
In some cases, we share personal data with other companies that perform services on our behalf. This implies that these third parties process information about you on our behalf.
Information is disclosed to the extent necessary to perform the services, or to data processors who provide services regarding operations, maintenance, and other technical solutions to us.
International Transfers
Our use of data processors may involve your personal data being transferred to data processors located in countries outside the EU/EEA. This means that personal data may be transferred to a country with regulations that do not provide the same level of protection for personal data as the rules in Norway. To ensure your privacy, such transfer will only take place in accordance with the applicable privacy legislation at any given time, for example via contractual arrangements approved under the GDPR.
6. What Rights Do You Have?
Privacy regulations grant certain rights related to the personal data we process about you. These rights include that you can:
- Request access. You have the right to access the personal data we have registered about you, insofar legal conditions do not prevent this. To ensure that personal data is disclosed to the right person, we may require that requests for access be made in writing or that you identify yourself in another way.
- Request rectification or erasure. You can ask us to correct errors in the information we have about you or ask us to delete personal data. We will, as far as possible, comply with a request to delete personal data, but we cannot do this if there are legitimate reasons not to delete, for example, if we have a duty or legal basis to document the information.
- Request restriction. In some situations, you can also ask us to restrict the processing of information about you.
- Object. If we process information about you based on our tasks or based on a balancing of interests, you have the right to object to our processing of information about you.
- Request data portability. In some cases, you may be able to ask to receive personal data you have provided to us in order to have it transferred in a machine-readable format to another provider.
- Exercise other rights. You also have the right to object to the processing of personal data, profiling, and automated decisions where relevant.
Rights may be limited by law. Please contact us at legal@teamalfred.ai if you wish to exercise your rights or want information about which limitations apply. We will answer your inquiry as soon as possible, and generally within one month.
7. How Do We Secure Your Personal Data?
We use appropriate security measures to protect personal data against unauthorized access, alteration, or deletion.
We have established routines and measures to ensure that unauthorized persons do not gain access to your personal data and that all processing of the data otherwise occurs in accordance with applicable law.
We have established procedures to ensure confidentiality, integrity, and availability. The measures are of both a technical and organizational nature. They include encryption, authentication solutions, and routines for verifying access and rectification requests.
We conduct regular assessments of the security in all central systems used for handling personal data, and agreements have been entered into that require suppliers of such systems to ensure satisfactory information security.
Access to personal data is limited to personnel who need access to perform their work tasks.
We have adopted internal IT guidelines, and we regularly train employees regarding security and the use of IT systems.
8. Changes to This Policy
We may periodically update or change the privacy policy. You will always find the latest version on our website.
9. Contact Us
If you have questions about our privacy policy or our use of personal data, please feel free to contact us at legal@teamalfred.ai.
10. Supervisory Authority
If you disagree with the way we process your personal data, you can submit a complaint to the Norwegian Data Protection Authority:
Datatilsynet
Postboks 458 Sentrum
0105 Oslo, Norway
www.datatilsynet.no