How we handle your data

The data controller is Flyin AS, a company registered in Norway, operating the GroundRook platform. We are responsible for deciding how and why personal data submitted through our website is processed.

For any privacy-related questions or requests, you can contact us at web@salesup.no.

We collect personal data only when you actively submit it through a contact or application form on our website. The fields we collect are:

• Name
• Email address
• Company name
• Website URL

We do not collect any additional personal data, and we do not use advertising networks, behavioral tracking pixels, or user-level analytics that are shared with third parties. We do not build profiles of individual visitors.

We use the data you submit for two purposes:

• Responding to inquiries — when you contact us through a general contact form. The legal basis is our legitimate interest in responding to messages directed to us (GDPR Art. 6(1)(f)).
• Processing Trust Source applications — when you apply to join the GroundRook Trust Network. The legal basis is performance of a contract or pre-contractual steps at your request (GDPR Art. 6(1)(b)).

We do not use your data for marketing without your explicit consent, and we do not sell or share it with third parties for their own commercial purposes.

We retain your personal data for 12 months after our last contact, unless you request deletion earlier. If an application process leads to an ongoing business relationship, we retain the relevant data for as long as that relationship continues and as required by applicable law.

You can request deletion of your data at any time by contacting us at web@salesup.no. We will process your request within 30 days.

Under the General Data Protection Regulation (GDPR), you have the following rights in relation to your personal data:

• Access — you can request a copy of the personal data we hold about you.
• Rectification — you can ask us to correct inaccurate or incomplete data.
• Erasure — you can ask us to delete your personal data, subject to certain legal exceptions.
• Restriction — you can ask us to restrict processing of your data in certain circumstances.
• Portability — you can request your data in a structured, machine-readable format where technically feasible.
• Object to processing — you can object to processing based on legitimate interest; we will stop unless we have compelling legitimate grounds.

To exercise any of these rights, contact us at web@salesup.no. If you are not satisfied with our response, you have the right to lodge a complaint with your national data protection authority — for example, the ICO in the United Kingdom, or the supervisory authority in your EU member state. In Norway, the relevant authority is Datatilsynet (datatilsynet.no).

Our infrastructure is hosted in the European Union. Personal data submitted through this website is stored and processed within the EU/EEA and is not transferred to countries outside this region.

Where we use third-party service providers (for example, for email delivery or infrastructure), we ensure appropriate data processing agreements are in place. These agreements are available on request by contacting us at web@salesup.no.

We may update this privacy policy from time to time to reflect changes in our practices or applicable law. For material changes — those that affect how we use your data or your rights — we will notify you by email if we have your contact details, or by displaying a notice on our website before the changes take effect.

We encourage you to review this page periodically. Continued use of our website after changes are published constitutes acceptance of the updated policy.