R. STAHL TRANBERG AS (“R. STAHL TRANBERG”, “we”, “us” or “our”) is committed to protecting your personal data and respecting your privacy. This Privacy Policy explains how we collect, use, share and protect personal data when you visit stahl-tranberg.com (the “Website”) or contact us, and it describes your rights under the EU/EEA General Data Protection Regulation (GDPR) and the Norwegian Personal Data Act (personopplysningsloven).
1. Data controller
The data controller responsible for your personal data is:
R. STAHL TRANBERG AS
Organisation number: 986 926 909
Strandsvingen 6, 4032 Stavanger, Norway
Telephone: +47 51 57 89 00
For all questions about data protection and to exercise your rights, you can reach our data protection contact at data.protection@r-stahl.com.
R. STAHL TRANBERG AS is part of the R. STAHL group. Where relevant, personal data may be shared within the group (see Section 5).
2. What personal data we collect
We collect personal data that you provide to us directly and data that is generated automatically when you use the Website.
Data you provide to us
- Contact and enquiry data — when you use our contact form or contact a sales representative or a specific person, we collect the information you submit, such as your name, company/organisation, email address, telephone number, country, and the content of your message.
- Business relationship data — information exchanged when you are, or represent, a customer, supplier or business partner, such as contact details, role and correspondence.
Data collected automatically
- Technical and usage data — such as IP address, browser type and version, device information, operating system, referring URLs, pages viewed, and date/time of access, collected through server logs and cookies or similar technologies.
- Analytics data — collected through Google Analytics (see Section 4), with your consent.
We do not intentionally collect special categories of personal data (e.g. health, religion, political opinions) through the Website.
3. Purposes and legal bases for processing
We process personal data for the following purposes, relying on the corresponding legal bases under GDPR Article 6(1):
| Purpose | Legal basis |
|---|---|
| Respond to enquiries and contact requests | Our legitimate interest in answering you, or taking steps at your request prior to entering into a contract — Art. 6(1)(f) / (b) |
| Manage and perform our business relationships, orders and contracts | Performance of a contract — Art. 6(1)(b) — and our legitimate interest in managing the relationship — Art. 6(1)(f) |
| Operate, secure and maintain the Website | Our legitimate interest in a functional, secure website — Art. 6(1)(f) |
| Analyse website use via Google Analytics | Your consent — Art. 6(1)(a) — which you may withdraw at any time |
| Comply with legal, accounting and regulatory obligations | Compliance with a legal obligation — Art. 6(1)(c) |
Where we rely on legitimate interests, we have assessed that these interests are not overridden by your rights and freedoms. You can ask us for more information about this assessment.
4. Cookies and Google Analytics
The Website uses cookies and similar technologies to function correctly and, with your consent, to analyse how the Website is used.
- Strictly necessary cookies are required for the Website to operate (e.g. security and to remember your cookie choices). These do not require consent.
- Analytics cookies (Google Analytics) are set only after you give consent via our cookie banner. We use Google Analytics, provided by Google, to understand how visitors use the Website and to improve it. Google Analytics collects data such as your IP address (truncated/anonymised), pages visited, time on site, and approximate location and device information.
You can withdraw or change your consent at any time via the cookie banner, and you can also manage cookies through your browser settings. Blocking some cookies may affect how the Website works.
Typical Google Analytics cookies:
| Cookie | Provider | Purpose | Typical duration |
|---|---|---|---|
_ga | Distinguishes users | Up to 2 years | |
_ga_<container-id> | Persists session state (GA4) | Up to 2 years |
Google acts as our data processor for analytics. For information on how Google processes data, see Google’s privacy policy. Analytics data may involve a transfer to Google in the United States — see Section 6.
5. Who we share personal data with
We share personal data only as necessary and with appropriate safeguards, with the following categories of recipients:
- R. STAHL group companies — including our parent companies (R. Stahl Norge AS and, ultimately, R. STAHL AG, Germany), where needed to handle your enquiry, manage the business relationship, or for internal administration.
- Service providers (processors) acting on our behalf under data processing agreements — including providers of website hosting, IT and security, email, and Google (Google Analytics).
- Professional advisers and authorities — such as auditors, legal advisers, courts or public authorities, where required by law or to establish, exercise or defend legal claims.
We do not sell your personal data.
6. International transfers
R. STAHL TRANBERG AS is located in Norway (EEA), and personal data is generally processed within the EU/EEA.
When you consent to Google Analytics, personal data may be transferred to Google LLC in the United States. Such transfers are protected by appropriate safeguards: Google is certified under the EU–U.S. Data Privacy Framework, and we rely on the European Commission’s Standard Contractual Clauses together with supplementary measures where required. You may request a copy of the relevant safeguards by contacting us.
7. How long we keep personal data
We retain personal data only for as long as necessary for the purposes described in this Policy, including to satisfy legal, accounting or reporting requirements.
- Contact-form and enquiry data: kept for as long as needed to handle your request and for a reasonable period thereafter up to 24 months after our last contact, unless a business relationship requires longer retention.
- Business relationship and contract data: retained for the duration of the relationship and the periods required by applicable law, including Norwegian bookkeeping requirements (generally up to 5 years).
- Website server logs: default up to 12 months
- Google Analytics data: retained according to the retention period configured in Google Analytics (commonly up to 14 months).
When personal data is no longer needed, we securely delete or anonymise it.
8. Your rights
Subject to the conditions in the GDPR, you have the right to:
- Access the personal data we hold about you;
- Rectify inaccurate or incomplete data;
- Erase your data (“right to be forgotten”);
- Restrict processing in certain circumstances;
- Object to processing based on our legitimate interests;
- Data portability — receive certain data in a structured, commonly used, machine-readable format;
- Withdraw consent at any time, where processing is based on consent (without affecting the lawfulness of processing before withdrawal).
To exercise any of these rights, contact us at data.protection@r-stahl.com. We will respond within the timeframes required by law and may need to verify your identity before acting on a request.
9. Right to lodge a complaint
If you believe our processing of your personal data infringes data protection law, you have the right to lodge a complaint with a supervisory authority. The competent authority for R. STAHL TRANBERG AS is:
Datatilsynet (The Norwegian Data Protection Authority)
P.O. Box 458 Sentrum, 0105 Oslo, Norway
www.datatilsynet.no
You may also contact the supervisory authority in your country of residence within the EU/EEA.
10. Data security
We implement appropriate technical and organisational measures to protect personal data against unauthorised access, alteration, disclosure, loss or destruction. While we strive to protect your data, no transmission over the internet can be guaranteed to be completely secure.
11. Children
The Website is intended for a business audience and is not directed at children. We do not knowingly collect personal data from children.
12. Changes to this Privacy Policy
We may update this Privacy Policy from time to time to reflect changes in our practices or legal requirements. The current version, with the “Last updated” date above, will always be available on this page. Material changes will be communicated where appropriate.
13. Contact us
For any questions about this Privacy Policy or how we handle your personal data, please contact:
R. STAHL TRANBERG AS
Strandsvingen 6, 4032 Stavanger, Norway
Telephone: +47 51 57 89 00
Email: data.protection@r-stahl.com
