This privacy policy explains how Hepro AS collects and processes personal data when you visit our website hepro.no (including subdomains), our online store shop.hepro.no, when you purchase products or services, subscribe to newsletters or events, or contact us via our digital channels.
We are committed to processing your personal data in a secure, lawful, and transparent manner, in accordance with data protection legislation (GDPR and the Norwegian Personal Data Act).
The data controller for the processing of personal data described here is:
Hepro AS
Org. no.: 937 162 103
Address: Tømmerveien 10, N-8250 Rognan, Norway
Email: firmapost@hepro.no
Contact point for privacy: compliance@hepro.no
1. What data do we collect – and why?
We only collect personal data when necessary and do not use the data for purposes other than those stated in this privacy policy. We process the following data:
- When you visit our websites (hepro.no and shop.hepro.no)
- Data: Technical data (e.g. IP address, browser, device, use of the site)
- Purpose: To operate and secure the website, to improve content and user experience, and to tailor marketing and advertising
- Legal basis: Our legitimate interest in operating and securing the website, or your consent to the use of analytics and marketing cookies
- When you purchase products/services
- Data: Name, contact information (email, phone, address), company name and organisation number (where applicable), order and invoice information
- Purpose: To deliver what you have ordered, invoice you, and follow up the customer relationship
- Legal basis: Performance of a contract with you as a customer or legal obligations (accounting legislation, etc.)
- When you subscribe to newsletters
- Data: Name and email address
- Purpose: To send you news, information about events, and other relevant updates about Hepro and our products
- Legal basis: Your consent. You may withdraw your consent at any time by using the unsubscribe link at the bottom of the emails or by contacting us at firmapost@hepro.no.
- When you contact us (contact form/email/phone)
- Data: Name, contact information (email and, if applicable, phone number) and the content of your enquiry
- Purpose: To be able to respond to and follow up your case
- Legal basis: Our legitimate interest in following up enquiries and providing good customer service, or performance of a contract
2. Cookies and analytics
Our website uses cookies. A cookie is a small text file that is stored in your browser when you visit a website.
We use cookies in order to:
- ensure that the website functions technically (necessary cookies)
- obtain anonymised statistics on traffic and usage patterns on the website (analytics cookies)
- show you more relevant ads (remarketing) on other websites, if you consent to this (marketing cookies)
When you visit hepro.no or shop.hepro.no you will see a cookie banner where you can consent to or reject analytics and marketing cookies. You can change or withdraw your consent at any time through your browser settings or by deleting cookies.
More information about the cookies used on our websites:
Our websites may contain links to third-party websites, plug-ins and applications. If you click on these links or activate these connections, third parties may be able to collect or share data about you. We do not control these third-party websites and are not responsible for their privacy policies. When you leave our website, we encourage you to read the privacy policy of every website you visit.
3. Who do we share the data with?
We do not share personal data with anyone other than:
- Our partners (for example providers of website operation, online store and ERP system, analytics tools, newsletter distribution), who process data on our behalf under a data processing agreement.
- Public authorities where we are legally obliged to do so.
4. How long do we store the data?
We only store personal data for as long as necessary for the purpose for which it was collected, or for as long as we are legally obliged to do so. Examples:
- Data related to purchases and invoicing: normally at least 5 years (accounting rules)
- Newsletters: until you unsubscribe or withdraw your consent by using the unsubscribe link at the bottom of the emails or by contacting us at firmapost@hepro.no
- Enquiries via contact form/email: for as long as necessary for follow-up, after which the data is deleted/anonymised
5. Your rights
You have the right to:
- request access to the data we hold about you
- have data rectified or deleted
- request restriction of processing
- object to processing based on our legitimate interest
- withdraw consent (for example for newsletters or cookies)
You can exercise your rights by contacting us at compliance@hepro.no.
You also have the right to lodge a complaint with the Norwegian Data Protection Authority (Datatilsynet) if you believe that we are processing data in violation of the regulations (www.datatilsynet.no).
6. Security
Hepro AS has implemented technical and organisational measures to protect your personal data against unauthorised access, alteration, loss and misuse. All information is subject to a duty of confidentiality and will be treated confidentially and will only be used for the purpose for which it was intended when the data was collected.
7. Changes
We may update this privacy policy, when necessary, for example due to changes in legislation or our services.
Last updated: 19 January 2026