Our privacy policy

Last Updated On 28.09.2026
Effective Date 12.10.2026

This Privacy Policy explains how UniSea AS (org. no. 979273177), Postvegen 25B, 4280 Skudeneshavn, Norway, email: contact@unisea.no, phone: +47 52 84 44 10 ("UniSea", "we", "us") collects, uses and shares personal data when you visit our website (unisea.no), contact us, request content or a tour, subscribe to our newsletter, use our support portal, or are a contact person at one of our customers, prospects, partners or suppliers. UniSea AS is the controller for this processing.

UniSea software: When our customers use UniSea software (for example UniSea Start, HSE, Crew, Maintenance, Procurement or UniSea Remote), the customer decides what personal data is processed, and UniSea processes it on the customer's behalf as a data processor under a data processing agreement. This policy does not cover that data. Please contact your employer or the company using UniSea with questions about it.

We may update this Privacy Policy when our processing changes. The date at the top shows the current version. If we make material changes, we will highlight them on this page before they take effect.

1. Information We Collect:

   Depending on how you interact with us, we collect the following personal data:

   1. Contact details: name, email, phone/mobile, job title and company name
   2. The content of your enquiries, form submissions and support cases (including vessel and company information you provide)
   3. Newsletter preferences and whether you open or click our emails
   4. Technical data from website visits: IP address, browser and device type, pages visited, and cookie identifiers (see our Cookie Policy)
   5. Records of our business relationship with you or your employer, such as contracts, orders and invoices

   We collect this data directly from you, from your use of our website, or from your employer when you are their contact person for us. We do not ask for sensitive personal data.

2. How We Use Your Information and Our Legal Basis:

   We use personal data only for the purposes below. Each purpose has a legal basis under the EU General Data Protection Regulation (GDPR), as applied in Norway by the Personal Data Act (personopplysningsloven):

   1. Answering enquiries, tour requests and content requests (such as case studies and brochures), and following up on them – our legitimate interest in responding to you (GDPR Art. 6(1)(f)), or steps you request before entering a contract (Art. 6(1)(b)).
   2. Newsletters and marketing emails – your consent (Art. 6(1)(a)). For existing customers, we may send information about similar products based on our legitimate interest, where marketing law allows. You can unsubscribe at any time.
   3. Website analytics and targeted advertising – your consent via our cookie banner (Art. 6(1)(a)).
   4. Managing customer, supplier and partner relationships, including support cases and forms such as vessel registration – performance of a contract (Art. 6(1)(b)) and our legitimate interest in managing the relationship (Art. 6(1)(f)).
   5. Operating and securing our website and systems, including logging and incident handling – our legitimate interest in keeping our services secure (Art. 6(1)(f)).
   6. Meeting legal obligations, such as bookkeeping and responding to authorities – legal obligation (Art. 6(1)(c)).

   Where we rely on legitimate interest, we have balanced our interest against your rights and freedoms. You can ask us for more information about this assessment. If we want to use your data for a new purpose that is not compatible with the original one, we will inform you and, where required, ask for your consent first.

3. How We Share Your Information:

   We do not sell your personal data. We share it only with:

   1. Service providers (data processors) that host or operate services for us, such as website hosting and cookie consent management, CRM and marketing automation, email delivery, analytics, Microsoft 365 and our support system. They may only use the data on our instructions and under a data processing agreement. A list of our service providers is available on request.
   2. Advertising and analytics providers such as Google and LinkedIn, only if you have accepted the relevant cookies. For their own purposes, they act as independent controllers under their own privacy policies.
   3. Other UniSea offices, including our office in Manila, Philippines, which provides support and operations.
   4. Authorities, courts and professional advisers, when required by law or needed to establish, exercise or defend legal claims.
   5. A buyer or successor, if all or part of our business is merged, sold or transferred. Your data will then remain protected under this policy or an equivalent one.

4. Transfers Outside the EU/EEA:

   Some personal data is processed outside the EU/EEA, including by our office in the Philippines and by service providers in the United States. We only make such transfers with appropriate safeguards, such as the EU Commission's Standard Contractual Clauses together with a transfer impact assessment, or the EU–US Data Privacy Framework where the recipient is certified. You can ask us for a copy of the relevant safeguards.

5. Retention Of Your Information:

   We keep personal data only as long as needed for the purpose it was collected for:

   1. Enquiries and content requests with no ongoing relationship: 24 months after our last contact
   2. Newsletter subscriptions: until you unsubscribe. We then keep a minimal record so that we respect your choice.
   3. Customer, partner and supplier contact data: for the duration of the relationship and 3 years after it ends
   4. Support cases: for the duration of the relationship and 3 years after it ends
   5. Accounting records: 5 years, or up to 10 years for primary documentation, as required by the Norwegian Bookkeeping Act
   6. Cookie data: as stated in our Cookie Policy

   Data may be kept longer when needed to comply with the law or to establish, exercise or defend legal claims. When data is no longer needed, we delete or anonymise it.

6. Your Rights:

   Under the GDPR you have the right to:

   1. access the personal data we hold about you and receive a copy
   2. have inaccurate data corrected
   3. have your data erased
   4. restrict our processing
   5. receive your data in a portable format (data portability)
   6. object to processing based on our legitimate interest, and always object to direct marketing, including related profiling
   7. withdraw your consent at any time, without affecting processing that took place before the withdrawal

   To exercise these rights, contact us at privacy@unisea.no. We will respond within one month, and may ask you to verify your identity first. You can unsubscribe from marketing emails at any time using the link in each email.

   You also have the right to lodge a complaint with the Norwegian Data Protection Authority (Datatilsynet), www.datatilsynet.no. We would appreciate the chance to address your concern first.

   You are not required to give us your personal data. However, without the necessary contact details we may not be able to answer your enquiry or deliver the service you requested.

7. Cookies Etc.

   We use strictly necessary cookies to run our website. We only set analytics and marketing cookies if you consent in our cookie banner. You can change or withdraw your consent at any time via Cookie Settings. For details of the cookies we use, see our Cookie Policy.

8. Security:

   We protect personal data with appropriate technical and organisational measures, including access control, encryption, logging and monitoring, supplier management and staff training. These measures are part of an information security management system aligned with ISO/IEC 27001 and CIS Critical Security Controls v8.1. If a personal data breach is likely to put your rights at risk, we will notify Datatilsynet within 72 hours and inform you where required.

9. Third Party Links:

   Our website may contain links to websites we do not operate, such as social media. This Privacy Policy does not cover those websites. Please read the privacy policy of each site you visit.

10. Automated Decisions and Children:

    We do not make decisions with legal or similarly significant effects based solely on automated processing. Our website and services are aimed at businesses, and we do not knowingly collect personal data from children.

11. Privacy Contact:

    If you have questions about this Privacy Policy or how we process your personal data, contact our privacy contact at privacy@unisea.no.