Privacy Policy

Introduction

PowerNesti AS ("we", "our", or "us") is committed to protecting and respecting your privacy. This Privacy Policy explains how we collect, use, disclose, and safeguard your personal information when you visit our website powernesti.top or use our defensive finance services. Please read this privacy policy carefully to understand our views and practices regarding your personal data and how we will treat it.

Data Controller Information

PowerNesti AS is the data controller for the personal information we collect about you. We are a company registered in Norway with registration number 289463576, VAT number NO289465379MVA, and our registered office is located at Dronningens gate 84, 3044 Drammen, Viken, Norway.

Data We Collect

We may collect, use, store and transfer different kinds of personal data about you which we have grouped together as follows:

• Identity Data: First name, last name, title, and other identifying information
• Contact Data: Email address, telephone numbers, and postal address
• Financial Data: Information about your financial situation, assets, and investment portfolio (only when you engage our services)
• Technical Data: Internet protocol (IP) address, browser type and version, time zone setting, browser plug-in types and versions, operating system and platform
• Usage Data: Information about how you use our website and services
• Marketing and Communications Data: Your preferences in receiving marketing from us and third parties and your communication preferences

How We Use Your Information

We will only use your personal data when the law allows us to. Most commonly, we use your personal data in the following circumstances:

• To provide and maintain our defensive finance services
• To process and respond to your enquiries and consultation requests
• To communicate with you about our services and provide customer support
• To comply with legal and regulatory obligations
• To improve our website and services through analytics
• To send you marketing communications (with your consent where required)
• To protect against fraud and ensure the security of our services

Legal Basis for Processing

Under the General Data Protection Regulation (GDPR), we process your personal data under the following legal bases: legitimate interests (to provide our services and improve our business), performance of a contract (when you engage our services), legal obligation (compliance with financial regulations), and consent (for marketing communications and certain cookies).

Cookies and Tracking Technologies

We may use cookies and tracking technologies for analytics, advertising, and remarketing purposes, including Google Ads. These technologies help us measure campaign effectiveness, deliver relevant advertisements, and improve our services. You can manage your cookie preferences at any time through our cookie consent banner. For detailed information about our use of cookies, please see our Cookie Policy.

Data Sharing and Disclosure

We do not sell, trade, or rent your personal information to third parties. We may share your information only in the following circumstances: with service providers who assist us in operating our business (under strict confidentiality agreements), when required by law or to comply with legal proceedings, to protect our rights, property, or safety, or with your explicit consent.

Data Retention

We will only retain your personal data for as long as necessary to fulfil the purposes we collected it for, including for the purposes of satisfying any legal, accounting, or reporting requirements. For client data, we typically retain records for seven years after the end of our business relationship, or as required by Norwegian financial regulations. Website analytics data is retained for 26 months, and marketing data is kept until you withdraw consent.

International Data Transfers

Your personal data may be transferred to and processed in countries outside the European Economic Area (EEA), particularly when using services like Google Analytics and Google Ads. We ensure that such transfers are protected by appropriate safeguards, including adequacy decisions by the European Commission or standard contractual clauses.

Your Rights

Under data protection law, you have rights including:

• Right of access: You can request a copy of your personal data
• Right to rectification: You can request correction of inaccurate data
• Right to erasure: You can request deletion of your personal data in certain circumstances
• Right to restrict processing: You can request that we limit how we use your data
• Right to data portability: You can request transfer of your data to another organisation
• Right to object: You can object to certain types of processing, including marketing
• Right to withdraw consent: You can withdraw consent where we rely on it as our legal basis

Data Security

We have put in place appropriate security measures to prevent your personal data from being accidentally lost, used, or accessed in an unauthorised way. We use industry-standard encryption, secure servers, and access controls to protect your information. However, no method of transmission over the internet is 100% secure, and we cannot guarantee absolute security.

Third-Party Services

Our website may use third-party services including Google Analytics for website analytics, Google Ads for advertising and remarketing, and Google Fonts for typography. These services may collect information about your use of our website. Please refer to their respective privacy policies for information about their data practices.

Children's Privacy

Our services are not intended for individuals under the age of 18. We do not knowingly collect personal information from children under 18. If you are a parent or guardian and believe your child has provided us with personal information, please contact us immediately.

Changes to This Privacy Policy

We may update this Privacy Policy from time to time to reflect changes in our practices or for other operational, legal, or regulatory reasons. We will notify you of any material changes by posting the new Privacy Policy on our website and updating the "Last updated" date.

Contact Information

If you have any questions about this Privacy Policy, wish to exercise your rights, or have concerns about how we handle your personal data, please contact us:

Supervisory Authority

You have the right to make a complaint to the Norwegian Data Protection Authority (Datatilsynet) if you believe we have not handled your personal data in accordance with data protection law. You can contact them at datatilsynet.no or by phone at +47 22 39 69 00.