Privacy Policy

OrenAtlas is operated by Oren Atlas AS in Norway. For the purposes of applicable data-protection law, Oren Atlas AS is the controller of personal data described in this policy unless another role is stated for a specific service.

Privacy questions may be sent to info@orenatlas.com.

• Account and contact details, such as name, business email, company, role, and authentication information.
• Information you submit through forms, requests, support messages, supplier or buyer workflows, and other business interactions.
• Usage and technical data, such as browser type, device information, IP address, pages viewed, events, and diagnostic data.
• Cookie and consent information, including your analytics and advertising consent choices.
• Business information you provide or ask us to work with, where that information contains personal data.

• To provide, secure, maintain, and improve OrenAtlas services.
• To authenticate users and manage access, permissions, and workspaces.
• To respond to inquiries, support requests, and business communications.
• To understand website usage and improve product and user experience where consent or another lawful basis allows it.
• To prevent abuse, investigate security incidents, and protect our users, systems, and legal rights.
• To comply with legal, accounting, and regulatory obligations.

Depending on the activity, we process personal data on the basis of contract, legitimate interests, legal obligations, or consent. Where processing relies on consent, you may withdraw that consent at any time without affecting processing already carried out lawfully.

OrenAtlas uses a consent-management platform to manage cookie choices. Non-essential analytics and advertising-related storage are kept disabled until the relevant consent is provided. Where enabled, OrenAtlas may use services such as Google Analytics, Google Tag Manager, and Microsoft Clarity to understand website performance and user experience. You can change your consent choices using the cookie controls available on the website.

We may use trusted service providers for hosting, authentication, analytics, security, communications, and other operational functions. These providers may process personal data on our behalf and are expected to protect it appropriately. We may also disclose information where required by law, to protect rights or safety, or in connection with a corporate transaction subject to applicable legal safeguards.

Some service providers may process data outside Norway or the European Economic Area. Where applicable, we use recognized safeguards for international transfers, such as adequacy decisions, standard contractual clauses, or other lawful transfer mechanisms.

We keep personal data only for as long as reasonably necessary for the purposes described in this policy, including security, contractual, legal, accounting, and dispute-resolution needs. Retention periods vary by data type and context.

We use technical and organizational measures designed to protect personal data against unauthorized access, loss, misuse, alteration, or disclosure. No system can guarantee absolute security, but we work to reduce risk and respond appropriately when issues are identified.

Subject to applicable law, you may have rights to access, correct, delete, restrict, object to certain processing, request portability, and withdraw consent. You may also have the right to lodge a complaint with the Norwegian Data Protection Authority (Datatilsynet) or another competent supervisory authority.

OrenAtlas is a business service and is not directed to children. We do not knowingly seek to collect personal data from children through the public website.

We may update this policy when our services, vendors, or legal obligations change. The current version will be published on this page with an updated effective date.