Last updated: 09.06.2026

At Submara, we take your privacy seriously. This privacy policy explains how we collect, use, and protect your personal data when you visit our websites, use our services, or communicate with us.

We process all personal data in accordance with applicable privacy legislation, including the EU General Data Protection Regulation (GDPR).

1. What information we collect

We only collect data necessary to provide our services and give you the best possible user experience. This includes:

Information you provide directly to us

When you fill out a contact form, sign up for newsletters, or contact us via email, we typically collect your name, email address, phone number, company name, and the content of your message.

Technical information and usage data

When you use our website, we automatically collect information about your IP address, browser type, operating system, and how you navigate the site.

‍

2. Purpose of data collection

We use the information we collect for the following purposes, and we always process data based on a lawful legal basis:

‍

3. Use of third-party tools and cookies

To operate the website and analyze traffic, we use selected third-party solutions. These tools may place cookies in your browser:

Cookie Consent Pro (Finsweet)

To obtain and manage your consent for the use of cookies, we use Cookie Consent Pro, developed by Finsweet. This tool displays the cookie banner when you visit the website and stores your choice so that you are not asked repeatedly. No third-party scripts are loaded until you have given explicit consent. Cookie Consent Pro only stores necessary functionality data and does not collect personal data on behalf of Submara.

HubSpot

We use HubSpot as our CRM system and for handling contact forms. Data you enter into forms is securely stored in HubSpot so that we can follow up on your inquiry. HubSpot also uses cookies to personalize content and remember your preferences.

Google Tag Manager and Google Analytics

We use Google Tag Manager (container ID: GTM-54GQNXQG) to manage and load third-party scripts, including Google Analytics. Google Analytics collects anonymized statistics on how the website is used – for example, which pages are visited and for how long. This helps us understand which parts of the website are most relevant, so we can continuously improve the user experience. None of these tools are loaded until you have actively consented to analytical purposes via our consent solution.

Webflow Analytics

The website is built on Webflow, which collects basic technical statistics about page traffic. This information is used solely to monitor that the website is functioning correctly.

‍

4. Data Sharing and Retention Period

Submara never sells your personal data to third parties. We only share information with our trusted sub-processors (data processors) who provide systems for IT, CRM, and marketing. All our data processors are subject to strict data processing agreements that ensure your information is handled in accordance with GDPR.

Our main data processors:

• HubSpot, Inc. – CRM and form management (USA, with EU data processing agreement)
• Google LLC – Google Analytics and Google Tag Manager (USA, with EU data processing agreement)
• Webflow, Inc. – Website platform and hosting (USA, with EU data processing agreement)

Retention Period

We do not store personal data longer than necessary for the purpose for which it was collected:

• Contact forms and inquiries: up to 2 years after last contact
• Customer data related to active projects: for the duration of the contract plus 5 years (accounting obligation)
• Analytical data (Google Analytics): 14 months (anonymized)
• Marketing / newsletters: until consent is withdrawn

‍

5. Your rights

You have the right to control your own personal data. You can at any time request:• Access to the information we have stored about you.• Correction of inaccurate information.• Deletion of your data ("the right to be forgotten"), provided that we do not have a legal obligation to retain it longer.• Restriction of the processing of your information.• Data portability – to receive your information in a machine-readable format.• To withdraw consent for marketing communications, without affecting the lawfulness of processing before the withdrawal.

Right to complain

If you believe that we are not processing your personal data in accordance with applicable legislation, you have the right to lodge a complaint with Datatilsynet – the Norwegian Data Protection Authority.

• Website: datatilsynet.no
• Phone: 22 39 69 00

‍

6. Contact us

If you have questions about how we process your personal data, or wish to exercise your rights, you can contact us:

• Email: personvern@submara.no
• Phone: +47 XX XX XX XX
• Address: [Submaras Hovedkontor Adresse]