Privacy Policy

2. What personal data we collect

We only collect personal data that you provide to us directly, or that is generated automatically through the technical operation of the website.

2.1 Data you submit through our contact form

When you fill in the contact form on our website, we collect:

• Your name
• Your email address
• Your phone number, if you choose to provide it
• The service you are interested in, as selected from the form
• The content of your message

This data is sent by email to our team via our SMTP mail provider (MyDevil.net) so that we can respond to your enquiry. Submitted messages are not published or stored in any public database.

2.2 Data collected automatically

Our web hosting provider (MyDevil.net) may automatically record standard technical information for security and server-administration purposes, such as your IP address, browser type, device type, and access timestamps, in server log files. We do not use this data to personally identify visitors, and we do not combine it with contact-form submissions.

We do not use analytics tools, advertising cookies, or visitor-tracking scripts on this website. The only third-party service that assesses visitor behaviour is Google reCAPTCHA, described below, which we use solely to protect the contact form from spam and automated abuse.

3. Why we process your data (legal basis)

For individuals covered by the GDPR (including visitors from Norway, Poland, and other EEA countries), we process personal data submitted through the contact form on the following legal bases under Article 6(1) GDPR:

• Consent (Art. 6(1)(a)): by voluntarily submitting the contact form, you consent to us processing the data you provided in order to respond to you.
• Pre-contractual measures (Art. 6(1)(b)): where your enquiry concerns a potential project or service, we process your data to take steps at your request prior to entering into a contract.
• Legitimate interest (Art. 6(1)(f)): we have a legitimate interest in maintaining the security of our website and preventing spam or abuse of the contact form (for example, through the hidden anti-spam field built into the form).

4. Third-party services used on this website

To operate the website, we rely on a small number of external services. When your browser loads our pages, it connects to these providers, which may process your IP address as part of standard web delivery:

• Google Fonts (fonts.googleapis.com, fonts.gstatic.com) — used to load the typefaces on this site. Google may process your IP address when these fonts are loaded. See Google's Privacy Policy.
• Tailwind CSS (CDN) — used to load styling for this site from a public content delivery network.
• Google reCAPTCHA — used on the contact form to detect and block automated spam submissions. reCAPTCHA analyzes signals such as your IP address, browser and device information, and interaction patterns to generate a risk score, and may set cookies as part of this process. This data is processed by Google in accordance with its Privacy Policy and Terms of Service. This processing is based on our legitimate interest (Art. 6(1)(f) GDPR) in keeping the contact form secure and free of spam.
• MyDevil.net — used to host the website and deliver emails sent through the contact form.

We do not share the content of your contact-form submissions with any of these providers beyond what is technically necessary to deliver the email to us.

5. How long we keep your data

We retain personal data submitted through the contact form for as long as necessary to respond to your enquiry and, where a business relationship develops, for the duration of that relationship plus any period required by applicable Norwegian accounting or legal retention obligations. Enquiries that do not lead to a business relationship are retained for no longer than 12 months, after which they are deleted.

6. Who has access to your data

Access to personal data submitted through this website is limited to:

• Authorized members of the Potega IT team who need it to respond to your enquiry
• Our email and hosting providers, acting strictly as data processors on our behalf

We do not sell, rent, or trade your personal data to any third party for marketing purposes.

7. International data transfers

Potega IT operates from Norway, a member of the European Economic Area (EEA), and the GDPR applies to our processing activities. Data submitted by visitors from other countries, including the United States, is processed in Norway and at the location of our hosting provider: MyDevil.net.

Some third-party providers described in section 4 (Google) may process data, including IP addresses, outside the EEA, in particular in the United States. Such transfers rely on the mechanisms provided for in the GDPR, such as the European Commission's adequacy decision for the EU–US Data Privacy Framework or Standard Contractual Clauses approved by the European Commission.

8. How we protect your data

We use reasonable technical and organizational measures to protect the personal data we process, including encrypted transmission (HTTPS) of website traffic, authenticated SMTP for outgoing email, and a hidden anti-spam field to reduce automated abuse of the contact form. No method of transmission or storage is completely secure, but we work to keep your data protected at every stage we control.

9. Your rights (GDPR — Norway, Poland, and other EEA countries)

Under the GDPR, you have the right to:

• Access the personal data we hold about you
• Rectify inaccurate or incomplete data
• Erase your data ("right to be forgotten"), where applicable
• Restrict or object to certain processing of your data
• Data portability, i.e. receive your data in a structured, commonly used format
• Withdraw consent at any time, without affecting the lawfulness of processing before withdrawal
• Lodge a complaint with a supervisory authority — in Norway, this is Datatilsynet (the Norwegian Data Protection Authority), and in Poland, the President of the Personal Data Protection Office (UODO). You may also complain to the supervisory authority in the country where you usually live.

To exercise any of these rights, please contact us at contact@potegait.com. We will respond to your request within the timeframe required by applicable law.

10. Information for visitors from the United States

If you visit our website from the United States, the following supplements the rest of this policy, to the extent that state privacy laws (for example in California, Virginia, or Colorado) apply to us:

• What we collect: identifiers and contact details (name, email address, phone number), the content of the message you send, and technical data such as your IP address, as described in sections 2 and 4. We use it only to respond to enquiries and to keep the website secure.
• We do not sell your data: we do not sell your personal information, and we do not share it for cross-context behavioral advertising. We do not use advertising cookies or tracking scripts.
• Your rights: depending on your state of residence, you may have the right to know what personal information we process and to access it, to have it corrected or deleted, and not to be discriminated against for exercising these rights. We handle such requests from all visitors, wherever they are located. Email us at contact@potegait.com. We may ask for information needed to verify your identity.
• Children: we do not knowingly collect personal information from children under 13 (or under 16 in EEA countries).

11. Automated decision-making

We do not use automated decision-making or profiling that produces legal or similarly significant effects on individuals based on data collected through this website.

12. Children's privacy

Our website and services are directed at businesses and professionals. We do not knowingly collect personal data from individuals under the age of 16. If you believe a minor has provided us with personal data, please contact us so we can delete it.

13. Changes to this policy

We may update this Privacy Policy from time to time to reflect changes in our practices, technology, or legal requirements. Any updates will be posted on this page with a revised "Last updated" date. We encourage you to review this page periodically.

14. Contact us

If you have questions, concerns, or requests regarding this Privacy Policy or your personal data, please contact:

Potega IT
Business operated in Norway by an individual
Email: contact@potegait.com