Privacy Policy.

Ability FM AS (“Ability”, “we”, “us”) is the data controller for personal data processed via ability.no and our digital services. This policy explains what data we collect, why we collect it, how we use it, and your rights.

1. Data Controller

Ability FM AS
Damsgårdsveien 165, 5160 Laksevåg, Norway
Org. no.: 911 463 830
Email: [email protected]
Phone: +47 417 81 000

2. What We Collect

Contact Form

When you submit our contact form, we process:

• Contact person name
• Company name
• Email address
• Phone number (optional)
• Service of interest
• Optional message

Legal basis: your consent (GDPR art. 6(1)(a)) and legitimate interest in responding to your inquiry (GDPR art. 6(1)(f)).

Website Usage

We use analytics tools to understand how visitors interact with the site. This data is anonymised and cannot be linked back to you personally without your consent.

Cookies

See our cookie policy for details on the cookies we use.

3. How We Use the Data

• Respond to inquiries and quote requests
• Deliver and administer our services
• Improve the website and user experience
• Comply with legal obligations (accounting law, transparency act, etc.)

4. Retention

We retain personal data only for as long as necessary:

• Contact inquiries: Up to 24 months, then deleted
• Customer data: Duration of customer relationship + 5 years (accounting law)
• Marketing: Until consent is withdrawn

5. Sharing with Third Parties

We do not share your data with third parties without your consent, except:

• Service providers: Hosting (Vercel Inc., USA), email delivery (Resend, USA), error tracking (Sentry, USA). All have signed data processing agreements with GDPR-equivalent safeguards.
• Public authorities: When legally required.

For transfers outside the EU/EEA, we use EU Standard Contractual Clauses (SCCs).

6. Your Rights

You have the right to:

• Access the data we hold about you
• Correct inaccurate data
• Erasure (“right to be forgotten”)
• Restrict processing
• Receive your data in a structured format (data portability)
• Object to processing based on legitimate interest
• Withdraw consent at any time
• Lodge a complaint with the Norwegian Data Protection Authority (datatilsynet.no)

To exercise your rights, contact us at [email protected].

7. Security

We implement technical and organisational measures to protect personal data against unauthorised access, loss, alteration and disclosure — including encryption in transit (HTTPS/TLS), access controls, logging and regular security reviews.

8. Changes

We may update this policy as needed. Material changes will be communicated clearly on the website.

9. Contact

Questions about this policy? Get in touch:
Email: [email protected]
Phone: +47 417 81 000