Privacy Policy
How Handelsavisen AS handles personal data, under the GDPR and the Norwegian Personal Data Act. This is a draft for legal review.
1 · Controller
Art. 4(7)Handelsavisen AS, org. no. 932 297 922, Langes gate 7, 0165 Oslo, Norway, privacy@handelsavisen.no (data protection contact). For paid-data services the controller is Cerestral AS; inter-company roles are defined in a data-sharing agreement.
2 · Data domains we keep separate
| Reader data | account, newsletter, billing — consent / contract / legitimate interest |
| Editorial data | named persons, sources, claims, corrections — journalistic purposes (Art. 85 exemption) |
| B2B-customer data | paid-data accounts, usage logs — contract |
| Product / usage analytics | on-site behaviour — consent (non-essential) |
3 · Purposes & legal bases
Each purpose is mapped to an Art. 6 basis; special categories are avoided in ad targeting.
4 · Cookies & tracking
At launch we use only strictly-necessary cookies and no third-party analytics or advertising, so no consent banner is required (ePrivacy Art. 5(3)). Any non-essential cookies or trackers would fire only after consent.
5 · Advertising
Ads are labelled; there is no sensitive-category or child-directed targeting, and a “why am I seeing this ad” explanation is available.
6 · Sharing & processors
Processors act under Art. 28 data-processing agreements. International transfers rely on Standard Contractual Clauses / Chapter V safeguards.
7 · Retention
Data is kept per our retention schedule (articles, logs, user data, payment data, source material, takedown cases).
8 · Your rights
You have the rights of access, rectification, erasure, restriction, portability and objection, and you may complain to the Norwegian Data Protection Authority (Datatilsynet). For editorial content the journalistic exemption may limit some rights.
9 · Security
Access control, MFA, encryption and immutable audit logs.
10 · Data protection impact assessments
Completed for advertising, profiling, tracking, AI scoring, and person/analyst databases.
11 · Contact & changes
privacy@handelsavisen.no. Material changes are notified.
People we report on
Art. 14We publish information about named individuals in their public or professional capacity — for example company directors and officers, executives who make public statements about their company, and public officials whose financial disclosures are published by law. We do not collect this information from the individuals themselves. It comes from public sources: official company registries (such as Brønnøysundregistrene), securities filings (such as SEC filings and congressional financial disclosures), and public statements made in earnings calls and company reports.
Our legal basis is legitimate interests (GDPR Art. 6(1)(f)) — specifically financial-market transparency and public-interest journalism — reinforced, for our newspapers, by the journalistic exemption in GDPR Art. 85 and personopplysningsloven § 3. We have carried out and documented a legitimate-interests assessment.
We limit ourselves to information about people’s official roles and conduct: we do not publish private-life information, home addresses, national identity numbers or dates of birth, and we do not build personal profiles of individuals — information about a person appears in the context of a company or an event.
Because we obtain this information from public sources rather than from you, we rely on the exemptions in Art. 14(5) (information already public; disproportionate effort) together with the journalistic exemption, and provide this notice instead of contacting each person individually.
Your rights. You may ask us what we hold about you, ask us to correct inaccurate information, or object to our processing. Where the information concerns published journalism, your request is assessed by our responsible editor together with legal — not automatically — balancing your rights against freedom of expression and the public interest. We correct inaccuracies promptly, and you may request a right of reply where we have published an assessment of your professional conduct. Contact: privacy@handelsavisen.no · editor@handelsavisen.no.