Privacy
Last updated: 18 September 2026
When you visit our websites, receive services from us or are in contact with us in other ways, Intility may process personal data about you. This privacy policy describes which personal data we process, where the data comes from, the purposes and legal bases on which the processing is founded, with whom the data may be shared, how long it is retained, and what rights you have.
Intility AS is the data controller for the processing of personal data described in this policy, unless it is stated that we process the data on behalf of a customer. When Intility acts as a data processor, the customer is the data controller, and the processing takes place in accordance with the customer's instructions and the agreement between the customer and Intility.
Intility processes personal data in accordance with applicable data protection legislation. We limit the processing to what is necessary for the stated purposes, protect the data through appropriate technical and organisational measures, and delete or anonymise the data when there is no longer a purpose or other legal basis for continued retention.
Enquiries regarding Intility's processing of personal data or the exercise of data protection rights may be directed to:
Intility AS
Organisation number: 981 967 070
Schweigaards gate 39
0191 Oslo, Norway
Email: [email protected]
Telephone: +47 24 10 33 00
This privacy policy was last updated on 18 September 2026. We may update the policy when our processing or applicable legislation changes. The current version will always be available on our websites.
When you visit www.intility.com, we may process data about how the website is used. The purpose is to ensure that the website works as intended, analyse usage patterns and improve the content and user experience.
We use necessary cookies and similar technologies to ensure basic functionality and security on the website. These cannot be opted out of through our consent tool, but you can restrict the use of cookies through your browser settings. This may cause certain parts of the website not to work as intended.
If you consent to it, we also use cookies and similar technologies for analysis and improvement of the website. This processing is based on your consent. You can change or withdraw your consent at any time through the cookie settings on the website. You will find the settings under “Manage your consent”. Withdrawing your consent does not affect the lawfulness of the processing that took place before the consent was withdrawn.
We use Fathom Analytics to obtain general statistics about the use of the website. Fathom Analytics does not use cookies. The solution is configured to limit the collection of data and provides us with aggregated information, for example about page views and which pages are visited. The data is processed on servers in the EU.
If you have consented to analytics, we also use Hotjar to map general usage patterns on our websites. We have disabled features that are not necessary for this purpose and configured the solution to limit the collection of personal data, including data about precise location and content that users enter on the website.
Hotjar provides us with aggregated information about, among other things, which pages visitors navigate between, which buttons are used, and how far down the pages visitors scroll. Intility does not use the data to identify individual visitors. Hotjar uses cookies and similar technologies to collect the data. You can read more about how Hotjar handles privacy here.
Name | Service | Function | Duration | Type |
|---|---|---|---|---|
__cf_bm | Cloudflare | Supports Cloudflare Bot Management and helps the website block traffic from scraping or automated bots | 30 min | Necessary |
lb_session | Intility | Load balancer that keeps the visitor on the same pod in Kubernetes while using the website | Session | Necessary |
_hjSession | Hotjar | Used to analyse how the website is used | 30 min | Analytics |
_hjSessionUser | Hotjar | Used to analyse how the website is used | 24 hours | Analytics |
Intility processes personal data on behalf of our customers in connection with the delivery of agreed services. When Intility processes personal data in accordance with the customer's instructions, the customer is the data controller and Intility is the data processor. The processing is governed by the agreement and the data processing agreement between the customer and Intility. The customer is responsible for having a valid legal basis for the processing and for providing the necessary information to the data subjects.
If you are a user at one of our customers, Intility may receive personal data about you directly from you or from the customer, normally your employer. This may include name, contact details, employer, job title, user identifiers and other data necessary to deliver the services. The data may be processed to create and manage user accounts, manage access rights, provide user support and provide information about the security and functionality of the services.
Intility may also process contact and user data for its own purposes, for example to manage the customer relationship, communicate with the customer's contact persons and follow up the delivery. For such processing, Intility is the data controller. The processing is based on our legitimate interest in managing the customer relationship and the delivery, cf. Article 6(1)(f) of the General Data Protection Regulation (GDPR).
If you take part in a project organised by Intility, for example an onboarding or operations project, Intility may process personal data about you as a data controller. We use collaboration and project tools for this purpose. The processing is described in more detail in section 4.3.
Intility sends out user surveys to users at our customers in order to gather feedback and improve the services we deliver. The processing is based on our legitimate interest in evaluating and improving our services, cf. Article 6(1)(f) of the GDPR. Participation in the surveys is voluntary.
We use Questback AS as our supplier for this purpose. If you respond to a survey, data such as email address, IP address, employer and, where applicable, name may be processed together with your responses. If a survey is anonymous, this will be stated in the invitation, and the responses cannot be linked to you. The personal data is stored at Questback AS for up to four years before it is deleted automatically.
If you are involved in a project with or a delivery to a customer of Intility, contact information such as name, employer/company, email address and telephone number will be registered for use in the project or delivery. The data is collected on request in the planning and collaboration tools used by Intility. The information is necessary for collaboration between the parties involved, including the preparation of project plans and the assignment and follow-up of tasks.
The processing is based on our legitimate interest in managing and performing the agreement with the customer, including planning, coordinating and documenting the project or delivery, cf. Article 6(1)(f) of the GDPR.
The personal data is deleted when the purpose of the processing has been fulfilled, normally 12 months after the project or delivery has been completed.
To complete a purchase in our webshop, we process name, mobile number, email address, company name and delivery address. The data is necessary to process and deliver the order, keep you updated on the order status and contact you if needed. When ordering a mobile subscription, we also register your date of birth when this is necessary to set up the subscription.
When you order on behalf of your employer, the processing is based on our legitimate interest in managing and completing the order and performing the agreement with your employer, cf. Article 6(1)(f) of the GDPR.
We work with several suppliers to deliver the webshop service. When necessary to complete the order, we may share personal data with relevant suppliers. For example, we may share name, delivery address and telephone number with a carrier so that the goods can be delivered to you or your employer. The supplier may be a data processor for Intility or an independent data controller, depending on the service and the purpose of the processing.
If you are a customer or an employee of a customer, we may in certain cases share personal data about you with others. We use sub-processors in connection with the delivery of certain services. When Intility acts as a data processor, such sharing takes place in accordance with the customer's instructions and the data processing agreement between the customer and Intility.
We also work with suppliers whose services we provide as an intermediary. If, for example, your organisation wishes to lease equipment and you place the order on behalf of the organisation, we share the necessary contact and order information with the leasing company. The same may apply to external broadband providers, telecom operators, carriers and courier services. These suppliers will normally be independent data controllers for the data they receive.
When Intility is the data controller, the sharing is based on the same legal basis as the underlying processing. This will normally be our legitimate interest in managing the customer relationship and delivering or providing the requested service, cf. Article 6(1)(f) of the GDPR.
When we receive and send invoices, we process necessary personal data such as name, contact details and payment information. The purpose of the processing is to manage customer and supplier relationships, fulfil payment obligations and comply with applicable requirements for bookkeeping, accounting and auditing.
The processing of contact details to manage customer and supplier relationships and follow up payments is based on our legitimate interest, cf. Article 6(1)(f) of the GDPR. Processing and retention necessary to comply with statutory requirements for bookkeeping, accounting and auditing is based on a legal obligation, cf. Article 6(1)(c).
We process name, email address, telephone number, job title and industry affiliation in connection with registration for courses and seminars. The data is used to manage the registration and the running of the event, compile statistics and improve our courses and seminars. We may also contact participants to gather feedback.
The processing is necessary to manage and run the event you have registered for, cf. Article 6(1)(b) of the GDPR. Processing for statistics, evaluation and improvement is based on our legitimate interest in evaluating and developing our events, cf. Article 6(1)(f).
If we use your contact details for marketing, this is done in accordance with applicable rules on electronic marketing.
When you visit our head office at Schweigaards gate 39 in Oslo, you must register with your full name and telephone number and state who at Intility you have an appointment with. The registration is confirmed by SMS. The purpose is to notify the person you are meeting, manage the visit and maintain security on the premises. The processing is based on our legitimate interest in managing visits and maintaining physical security, cf. Article 6(1)(f) of the GDPR. The data is deleted when it is no longer necessary for these purposes.
As a security measure, we use camera surveillance at the entrance door, the security gate, the reception, the façade by the loading dock, the garage ramp and inside the garage at our head office. We also use camera surveillance at our premises at Kværnerveien 1, Schweigaards gate 42 and Schweigaards gate 46. The purpose is to prevent and investigate security incidents and protect people, premises and assets, and the installation has been carried out in accordance with the guidelines of the Norwegian Data Protection Authority (Datatilsynet). The processing is based on our legitimate interest in maintaining physical security, cf. Article 6(1)(f) of the GDPR. As a general rule, recordings are deleted after seven days, unless it is necessary to retain a specific recording for longer in order to investigate or follow up an incident.
When you contact us via the contact form or email, we process your contact details and the information you provide in order to respond to and follow up your enquiry. The legal basis depends on the enquiry. The processing may be necessary in order to take steps prior to entering into an agreement, cf. Article 6(1)(b), or be based on our legitimate interest in handling enquiries, cf. Article 6(1)(f).
Intility uses a dedicated recruitment solution provided by Teamtailor for processing and handling job applications. When you submit an application, you will receive separate information about the processing of personal data and the use of cookies in the recruitment solution.
If you apply as part of a group, for example in connection with a bachelor's thesis, Intility processes personal data about all members of the group. This may include name, address, telephone number, email address, CV, application and other relevant information. We may also store relevant email correspondence. The data is received from you or another member of the group and is processed to manage and assess the group's application. The processing is necessary in order to take steps prior to the possible conclusion of an agreement, cf. Article 6(1)(b) of the GDPR.
The personal data may be made available to employees of Intility AS and our subsidiaries who need it to assess the application. This will primarily be HR staff and relevant managers.
We retain the data for as long as necessary to complete the recruitment process, and the data in the recruitment tool is deleted no later than 12 months after the application date. If the group is to write its bachelor's thesis with us, the necessary data may be transferred to Intility's HR system and processed in accordance with our privacy policy for employees and other affiliated persons.
When you sign up for our newsletter, we process your name and email address in order to send you newsletters and relevant invitations. The processing is based on your consent, cf. Article 6(1)(a) of the GDPR.
You can withdraw your consent at any time by using the unsubscribe function in the mailing or by contacting us at [email protected]. When you unsubscribe, your contact details are removed from the active recipient list. Withdrawing your consent does not affect the lawfulness of the processing that took place before the consent was withdrawn.
Which rights apply depends on the processing and the legal basis. You may request access to, rectification of or erasure of the personal data we process about you. You may also request restriction of the processing, object to the processing and, where the conditions are met, have your personal data provided to you or transferred to another data controller. You can read more about these rights on the website of the Norwegian Data Protection Authority (Datatilsynet).
You can exercise your rights by sending an email to [email protected]. We will respond to your enquiry without undue delay.
Where the processing is based on consent, you can withdraw your consent at any time. The withdrawal does not affect the lawfulness of the processing that took place before the consent was withdrawn.
Intility works continuously on internal control and information security to protect your personal data. Among other things, this means that we carry out risk assessments, evaluate relevant controls, map processing activities and follow up suppliers.
We use appropriate technical and organisational measures to protect personal data against unauthorised or unlawful processing and against accidental loss, destruction, alteration or damage. The security measures are assessed and updated in line with the risk and technological developments.
Personal data is stored for as long as necessary for the purpose for which it was collected. The retention period is determined on the basis of the purpose of the processing, statutory retention requirements, the need to document contractual and customer relationships, and relevant limitation periods. When the data is no longer necessary, it is deleted or anonymised.
If you believe that we are processing your personal data in breach of data protection legislation, you can contact us at [email protected].
You may also lodge a complaint with the Norwegian Data Protection Authority (Datatilsynet). Information on how to contact Datatilsynet is available at www.datatilsynet.no. You may also have the right to lodge a complaint with the data protection authority in the country where you live or work.
***
Policy Approval
Andreas Hisdal
Chief Executive Officer
Intility AS
Intility is committed to maintaining an open culture of communication with high ethical standards. We aim to promote sustainability, ethics, and social responsibility among our employees and other stakeholders.
The whistleblowing service enables employees, customers, business partners, and other stakeholders to confidentially report any critical concerns or behaviors that contravene Intility’s ethical guidelines, the law, or other unethical practices: https://report.whistleb.com/intility-external
This service acts as both an early warning system to mitigate risks and a mechanism to address actual incidents. We believe it is an important tool for promoting ethical business practices and maintaining the trust of our customers and the public. All reports are treated confidentially.
For questions or additional contact options, please reach out via email at [email protected].
The reporting channel is provided by an external partner, WhistleB Whistleblowing Centre, to ensure the anonymity of those who report. The whistleblowing process is encrypted and password-protected.
