( privacy policy )
Privacy Policy
Last updated: 11 November 2026
This policy explains how MEWB AS (“MEWB”, “we”) collects and uses personal data when you visit our website, contact us, are a customer or supplier, or apply for a job with us. We process personal data in accordance with this policy, the Norwegian Personal Data Act and the General Data Protection Regulation (GDPR).
1. Data controller
MEWB AS, org. no. 922 432 554, Torggata 38, 0182 Oslo, Norway. You can reach us at hi@mewb.no.
2. What personal data we process
We process the following categories of personal data:
- When you contact us or request a quote: name, role, email address, phone number and company information, as well as whatever you write in your enquiry.
- When you are a customer or supplier: name, role, email address and phone number of contact persons, and company name, address and organisation number. We need this to administer the agreement and to invoice and receive payment.
- When you apply for a job through our website: name, contact details, CV, cover letter and other information you choose to provide. Please do not send us sensitive information, such as health data, that is not necessary for the application.
- When you visit our website: information about the device you use, your approximate geographic area and how you use the website, for example which pages you visit and how often. See section 6.
The information comes mainly directly from you. Providing it is voluntary, but without certain information we cannot answer your enquiry, process your application, or enter into or fulfil an agreement with you.
3. Why we use the data, legal basis and retention period
We use personal data to deliver our services, fulfil our obligations to you and comply with legal and contractual requirements. The table shows the purpose, the legal basis and how long we keep the data.
| Purpose | Legal basis | Retention period |
|---|---|---|
| Administering customer and supplier relationships, including ordering, invoicing and payment | Contract and legal obligation (GDPR Art. 6(1)(b) and (c)) | 5 years after the end of the financial year, in accordance with the Norwegian Bookkeeping Act |
| Answering your enquiries | Legitimate interest (Art. 6(1)(f)). Contract (Art. 6(1)(b)) if the enquiry concerns a customer relationship | For as long as necessary to help you |
| Improving the website and understanding how it is used (cookies) | Consent (Art. 6(1)(a)) | 6 months after the visit |
| Processing job applications | Legitimate interest (Art. 6(1)(f)). Consent (Art. 6(1)(a)) if we wish to keep the application for longer | Until the position is filled. Longer only if you have consented |
When the purpose has been fulfilled, we delete the data, unless we are required to keep it, for example under the Bookkeeping Act.
4. Sharing personal data
We share personal data with selected data processors when necessary to deliver our services, for example for accounting, IT operations, hosting and collaboration tools. Data processors may only use the data for the purpose we have given them and are bound by a data processing agreement. We take all reasonable legal, technical and organisational measures to ensure that your personal data is processed securely and with adequate protection.
Some of the data processors we share personal data with may be located outside the EU/EEA (in a third country). Depending on which parts of our services you use, your personal data may be transferred to a third country. When this happens, we protect your data and follow applicable data protection rules. We assess the possible risks and put the necessary safeguards in place, for example the European Commission’s Standard Contractual Clauses (SCCs). Data may also be shared with a data processor in a third country that the European Commission has decided provides an adequate level of protection under the GDPR.
We also disclose data to public authorities when required by law. If our business is sold or transferred, data may be transferred to the new owner. We do not sell personal data.
5. Customer data in consulting engagements
When our consultants work for a customer, the customer’s data is processed under the data processing agreement or the instructions in the engagement. This policy does not apply to such processing.
6. Cookies
Our website does not use cookies for tracking, analytics or marketing, and we have no analytics tools that collect how you use the website. For that reason we do not show a consent banner either.
When you load the site, your browser fetches fonts from Google Fonts, and Google then receives your IP address. The information you submit through the contact form is processed by our form service Web3Forms, see section 4. If we later start using cookies or analytics tools, we will update this policy and ask for your consent first.
7. Your rights
You have the right to:
- access the personal data we hold about you
- have inaccurate or incomplete data corrected
- have your data deleted, unless we have another valid basis for keeping it
- restrict the processing
- data portability, that is, to receive the data you have given us in a machine-readable format
- object to processing based on legitimate interest
- withdraw consent at any time. Withdrawal does not affect the lawfulness of processing carried out before you withdrew it.
Contact us at hi@mewb.no if you want to exercise your rights. We will respond within one month at the latest. If you believe we are processing personal data in breach of the rules, you can first contact us. You also have the right to lodge a complaint with the Norwegian Data Protection Authority, Datatilsynet (datatilsynet.no).
8. Security
We use technical and organisational measures to protect personal data against misuse, loss, unauthorised access and accidental alteration. Only employees and partners who need access to do their jobs have access to the data.
9. Changes to this policy
We may update this policy. The latest version is always available on this page, with the date of the last update at the top. In the event of material changes, we will notify you on the website or in another suitable way.
10. Contact
MEWB AS
Org. no. 922 432 554
Torggata 38, 0182 Oslo, Norway
Email: hi@mewb.no