Privacy policy

This policy gives you the information you are entitled to under Article 13 of the General Data Protection Regulation (Regulation (EU) 2016/679, “GDPR”), as it applies in Norway through the Norwegian Personal Data Act. It applies to the website sensa.no and its subpages.

1. Controller

Sensa AS, organisation number 931 193 031, c/o DNB Bank ASA, Solheimsgaten 7C, 5058 Bergen, is the controller for the processing of personal data described here.

Enquiries about privacy can be sent to sales@sensa.no or to the postal address c/o DNB Bank ASA, Postboks 7100, 5020 Bergen. Mark your enquiry “Personvern” (privacy).

2. What data we process, why, and on what legal basis

2.1 Delivering the website

When you visit the website, the hosting platform processes technical data such as your IP address, the time, the page requested and the browser’s technical description of itself. This is necessary to deliver the pages to you and to protect the service against misuse and attacks.

Legal basis: GDPR Article 6(1)(f). Our legitimate interest is being able to deliver a secure and functioning website.

2.2 The chat (“Ask Sensa”)

The chat on the front page and at the top of the pages answers questions from pre-written answers. If we have not written an answer to your question, the chat can generate an answer with artificial intelligence from the content of the website. When you ask a question, we record:

• the text you wrote, or the suggestion you clicked
• the time, and the answer you got as it was shown, with the link and the pages under it
• when the answer was generated with artificial intelligence: which model generated it, how long it took, and whether our check stopped it
• the page you asked the question from, where on the page it was asked, and the page’s language
• the IP address the request came from
• the address of the page you came from (without any parameters), and campaign codes (“utm”) in the link
• the browser’s technical description of itself and its preferred language, time zone, window size and pixel density, whether you use a mouse or touch, and whether the page is shown in light or dark mode
• how long you had been on the page and how far down you had read
• a random code that exists only while the page is open, and that links questions asked during the same page view

If we have not written an answer, the question and the page’s language are sent to Anthropic, which generates the answer on our behalf. Your IP address and the other data in the list above are not sent there.

Purpose: to answer your question, to find out which questions visitors have that we have not answered, to improve the answers and the content of the website, to understand which businesses and industries show interest in our services, and to detect and prevent misuse of the chat. The IP address is used to determine which business or network provider the visit came from.

Legal basis: GDPR Article 6(1)(f). Our legitimate interests are improving the website, marketing and selling to businesses, and securing the service. The data is not used to map you as an individual, and we do not combine it with other information about you in order to identify you. You can object to the processing at any time, see section 6.

The chat is not intended for personal data. We ask you not to write names, phone numbers, e-mail addresses or other information about yourself or others in the chat. If you have done so anyway, we will delete the data when you ask us to. If you would like us to contact you, please use the contact form.

2.3 Contact form and e-mail

When you submit the contact form or write to us, we process your name, e-mail address, the content of the message and the page the form was sent from.

Messages from the contact form are sent as e-mail to Sensa from our own e-mail in Microsoft 365. The information in the message is not recorded in the website’s logs.

If you choose a meeting time, your name, your e-mail address and what you have written are sent by e-mail to the person you want to meet. To show available times, the website reads only when that person is busy, not what is in their calendar. If the time suits them, you receive a Teams invitation. If it does not, you receive a reply by e-mail.

Purpose: to answer and follow up the enquiry, including arranging a demonstration.

Legal basis: GDPR Article 6(1)(b), where the enquiry concerns steps taken prior to entering into a possible contract, and otherwise Article 6(1)(f). Our legitimate interest is being able to answer enquiries and follow up customers and potential customers.

2.4 Cookies and local storage

The website stores a small amount of data locally in your browser. This data is either strictly necessary to provide the service you have asked for, or stores a choice you have made yourself. Such storage does not require consent under the Norwegian Electronic Communications Act (ekomloven). None of it is sent to us.

• sensa-consent: your answer to the question about cookies, stored until you change it
• sensa-theme: whether you have chosen light or dark mode
• sensa-ro: whether you have pressed “Turn off animations” at the bottom of the page, stored until you press “Turn on animations”
• sensa-design: an older view of the website that no longer exists. If the website finds it, it deletes it
• sensa-hjem: that you clicked the logo to go to the front page, so it can fade in. Deleted as soon as the front page has loaded
• sensa-intro: that the intro has already been shown, deleted when the tab is closed
• sensa-meny: that you switched language from the menu on your phone, so the menu stays open in the new language. Deleted as soon as the page has loaded
• sensa-utkast: what you have written in the contact form before you send it, and whether the form is open, so that it follows you when you go to another page. Deleted when the tab is closed
• sensa-sprak: whether you have pressed NO, EN or ES, stored until you press another one. Without such a choice, the front page chooses Norwegian, English or Spanish from your browser's language and time zone and the website you came from. This happens in the browser and is not sent to us
• sensa-lagret: what you have saved for later (answers, the system list and results), until it is added to your message. Deleted when the tab is closed or when it is in the message

2.5 Analytics and consent

Analytics tools that store or read information in your browser load only if you have consented to this in the consent banner. The legal basis is then consent, cf. GDPR Article 6(1)(a) and the Electronic Communications Act. You can change or withdraw your consent at any time, without affecting the lawfulness of processing before the withdrawal. The website does not currently use analytics tools. If they are introduced, we will update this policy with the provider and purpose before that happens.

3. Recipients and processors

We do not sell personal data and do not disclose it to others, unless we are required to do so by law. The website and the data from the chat are hosted on Microsoft Azure, and messages from the contact form are sent with Microsoft 365. Microsoft processes the data on our behalf as a processor, under a data processing agreement pursuant to GDPR Article 28. Questions that the chat answers with artificial intelligence are sent to Anthropic Ireland, Limited, which processes them on our behalf as a processor, under the data processing addendum in Anthropic’s commercial terms. Anthropic does not use them to train its models.

4. Transfers to countries outside the EEA

Anthropic generates the answers and stores the questions in the United States. The data processing addendum with Anthropic is based on the European Commission’s standard contractual clauses. If another processor processes data outside the EEA, this happens only on a valid transfer basis under Chapter V of the GDPR, such as a European Commission adequacy decision (including the EU–US Data Privacy Framework) or the European Commission’s standard contractual clauses.

5. Retention periods

• Data from the chat, including the IP address, is deleted automatically 24 months after the question was asked.
• Questions sent to Anthropic are deleted there within 30 days. If Anthropic’s safety systems flag a question as a breach of its usage policy, it may be kept there for up to 2 years.
• Enquiries via the contact form and e-mail are kept for as long as necessary to follow up the enquiry and any customer relationship, and are then deleted.
• Technical data held by the hosting platform is kept for as long as necessary for operations and security.
• Data may be kept for longer if we are required to do so by law, or if it is necessary to establish, exercise or defend a legal claim.

6. Your rights

Within the limits of the GDPR, you have the right to:

• access the data we process about you (Article 15)
• rectification of inaccurate data (Article 16)
• erasure (Article 17)
• restriction of processing (Article 18)
• data portability, where the processing is based on consent or a contract (Article 20)
• object to processing based on our legitimate interest (Article 21). If you object to processing for marketing purposes, we will stop it.
• withdraw your consent at any time

Send your request to sales@sensa.no. We will reply without undue delay and within one month at the latest. Because the chat does not record names, we may ask you for information that makes it possible to find your records, for example the time and the text you wrote.

7. Complaints

If you believe the processing breaches the rules, you can complain to the Norwegian Data Protection Authority (Datatilsynet), datatilsynet.no. We would appreciate it if you contact us first, so that we have the chance to put things right.

8. Automated decision-making

We do not make any decisions about you that are based solely on automated processing, including profiling, cf. GDPR Article 22.

9. Changes

We may change this policy when the processing changes. The current version is always available on this page.

Last updated 6 October 2026.