Privacy policy
Last updated: 29 October 2026
Sarerom Nordic AS takes privacy seriously. Here we explain which personal data we process when you visit the website www.sarerom.no, contact us, request a quote or sign up for our newsletter, why we do so, and what rights you have. This statement follows the Personal Data Act (personopplysningsloven) and the EU General Data Protection Regulation (GDPR).
1. Data controller
Sarerom Nordic ASCompany registration number: 938 661 707
Address: Strømsveien 318, 1081 Oslo, Norway
E-mail: fethi@sarerom.no
Telephone: +47 92 22 92 71
You can contact us at the e-mail address above for any questions about privacy. We have not appointed a data protection officer, because we are not required to.
2. Who this statement applies to
This statement applies to visitors to the website, people who contact us or request a quote, people who sign up for the newsletter, and contact persons at customers, suppliers and business partners. Our website and services are aimed at businesses and professional buyers.
3. What data we process, why and for how long
| Situation | Data and purpose | Legal basis | Retention period |
|---|---|---|---|
| Contact form and “Request a quote” | Name, e-mail, telephone (optional), company (optional), message and any selected product. Purpose: to answer your enquiry and prepare a quote. |
Quote requests: GDPR Art. 6(1)(b) (necessary to take steps at your request before entering into a contract). Other enquiries: Art. 6(1)(f) (our legitimate interest in responding to enquiries). |
Up to 24 months after the last contact. If a contract is entered into, the retention period for customer relationships below applies. |
| Newsletter (sign-up) | E-mail address (required), company name (optional), chosen language, time of sign-up and the consent text. Purpose: to send you news about products, offers and campaigns. |
Consent, GDPR Art. 6(1)(a), together with the Electronic Communications Act (ekomloven) and the Marketing Control Act (markedsføringsloven) § 15 on electronic marketing. You can withdraw your consent at any time via the unsubscribe link in the newsletter or by e-mail to fethi@sarerom.no. | Until you withdraw your consent. The data is then deleted, but we may keep a suppression record of your e-mail address in order to honour your opt-out. |
| Consumer sales notification (waiting list) | E-mail address, the product you registered interest in, chosen language, time and the consent text. Purpose: to send you one e-mail when the products become available for purchase by consumers, and to understand which products people are interested in. |
Consent, GDPR Art. 6(1)(a). You can withdraw your consent at any time by e-mail to fethi@sarerom.no. | Until we have sent the notification that sales have opened, or until you withdraw your consent – the data is then deleted. |
| Customer relationships and contracts | Contact persons’ name, position, e-mail, telephone, company, correspondence, quotes, orders and invoices. Purpose: to perform contracts, deliver, invoice and follow up the customer. |
Art. 6(1)(b) and (f) (contact persons at business customers). Bookkeeping: Art. 6(1)(c) (legal obligation). |
For as long as the customer relationship lasts. Accounting records are normally kept for five years after the end of the financial year (the Bookkeeping Act, bokføringsloven). |
| Visits to the website (technical data) | IP address, time, browser and device, and which page was opened. This data is logged by the hosting provider. Purpose: operation, security and troubleshooting. |
Art. 6(1)(f) (our legitimate interest in a secure and functioning website). | A short time, no longer than necessary for operation and security. |
| Local storage in the browser | Two technical items: sarerom-cookie-notice remembers your choice in the information banner, and sarerom-newsletter remembers that the newsletter popup has been closed or that you have subscribed, so it is not shown again. See the Cookies page. |
Exempt from consent because the storage is strictly necessary/functional (Electronic Communications Act § 3-15). | Until you clear your browser data. |
Fields marked with * in the forms must be completed so that we can respond to you. Without this information we cannot process your enquiry. Other fields are optional.
We do not use automated decision-making or profiling. If you sign up for our newsletter, we send marketing only on the basis of your consent, and you can unsubscribe at any time.
4. Where the data comes from
We receive the data from you, for example through forms, e-mail or telephone. If you are a contact person at a customer or supplier, we may also have received the data from your employer or from publicly available sources, for example the Brønnøysund Register Centre or the company’s own website.
5. Who we share the data with
When you submit a form or sign up for the newsletter, the data is processed on our own website server: it is stored in a database at the web hosting provider and forwarded to our e-mail. We do not sell personal data. We share it only where necessary, with these categories of recipients:
- Data processors that provide services to us: the web hosting provider that operates the website and stores form and newsletter data in a database, and the provider of e-mail and other IT systems. They process the data only on our instructions and on the basis of data processing agreements.
- Our suppliers and manufacturers: when necessary to give you a quote, we may share relevant information about the enquiry, for example product, quantity and place of delivery, with the manufacturer of the product in question. Contact details are shared only when necessary.
- Accountants, auditors and other advisers, who are bound by a duty of confidentiality.
- Public authorities, where we have a legal obligation to disclose data.
6. Transfer to countries outside the EEA
Our hosting and e-mail providers may in some cases process data outside the EEA. Such transfers take place only with a valid transfer basis, that is, a European Commission adequacy decision (including the EU–US Data Privacy Framework) or the EU Standard Contractual Clauses (SCCs) with any necessary supplementary measures. You can ask us for information about the safeguards used. Business partners in Romania and Hungary are located in the EU, and transfers there do not require a separate basis.
7. Your rights
You have the following rights under the GDPR:
- Access: you can ask to find out which data we hold about you, and obtain a copy.
- Rectification: you can require that inaccurate or incomplete data be corrected.
- Erasure: you can require that the data be deleted when we no longer have a reason to store it. We must nevertheless keep data we are required to retain, for example accounting records.
- Restriction: you can in certain cases require that the processing be restricted.
- Objection: you can object to processing based on our legitimate interest. We then stop the processing, unless we have compelling grounds to continue.
- Data portability: you can in certain cases receive the data you have provided to us in a machine-readable format.
Send an e-mail to fethi@sarerom.no if you wish to exercise your rights. We respond without undue delay and within one month at the latest. We may ask for information confirming your identity, to avoid disclosing data to the wrong person.
8. Complaints
If you believe that we process personal data in breach of the rules, you can lodge a complaint with the Norwegian Data Protection Authority (Datatilsynet). We would appreciate it if you contact us first, so that we can put things right.
Datatilsynet, Postboks 458 Sentrum, 0105 Oslo, Norway. E-mail: postkasse@datatilsynet.no. Website: www.datatilsynet.no.
9. Security
The website uses an encrypted connection (HTTPS). Access to data is limited to those who need it, and we use data processors that have appropriate security measures. Do not send sensitive data, for example health data, national identity numbers or payment card numbers, via the forms or by e-mail to us.
10. Children
The website is not aimed at children, and we do not knowingly collect personal data about children.
11. Cookies
Information about storage in the browser can be found on the Cookies page.
12. Changes
We may update this statement, for example when the website or services change. The current version is always available on this page, with the date of the last update at the top.
