Last updated: 06.07.2026

1. Data Controller

ExAC AS ("we", "us", "ExAC"), registration number 922904391, Tomteveien 33c, 1618 Fredrikstad is the data controller for the personal data described in this Privacy Policy. This policy also applies to our Swedish subsidiary Continentia Medical Solutions. Contact: post@exac.no, telefon: +47 47401015.

2. Information We Collect

We may collect and process the following categories of personal data:

Contact information: name, email address, phone number, job title, employer/organization, and organization number
Inquiry and sales information: content of inquiries, quotes, order history, and communication related to sales and service agreements
Technical information: IP address, browser information, and usage data from our website (via cookies, see Section 8)

We do not normally collect sensitive personal data through our website or order forms.

3. Purpose of Processing

We process personal data to:

Respond to inquiries and prepare quotes
Enter into and follow up on agreements (purchases, service, and maintenance agreements)
Manage customer and supplier relationships
Comply with accounting and bookkeeping obligations
Improve and develop our products and services
Marketing, where a separate legal basis applies (see Section 4)

4. Legal Basis for Processing

We process personal data on the following legal bases under Article 6 of the GDPR:

Consent (Art. 6(1)(a)) – e.g., when submitting a contact form or accepting the cookie banner
Performance of a contract (Art. 6(1)(b)) – for purchases or service agreements
Legitimate interest (Art. 6(1)(f)) – e.g., following up on sales processes and customer relationships
Legal obligation (Art. 6(1)(c)) – e.g., under Norwegian bookkeeping regulations

5. Retention Period

We retain personal data only as long as necessary for the purpose it was collected for:

Inquiries and quotes not resulting in a sale: normally up to 24 months after last contact
Customer and contract information: for the duration of the customer relationship, and thereafter in accordance with statutory retention requirements (including Norwegian bookkeeping law, normally 5 years for accounting records)
Marketing consents: until consent is withdrawn
Cookie consents: in accordance with the retention period specified in the cookie banner (see Section 8)

6. Who We Share Data With

We share data with:

Our Swedish subsidiary, [company name], as part of the group's sales and administrative operations
Data processors providing technical services on our behalf, including Wix (website platform, forms, and CMS), Usercentrics for Wix (consent management), and Dropbox (data storage)
Public authorities where legally required

We do not sell personal data to third parties. Transfers to data processors outside the EU/EEA occur only where a valid transfer mechanism is in place (e.g., EU Standard Contractual Clauses).

7. Your Rights

You have the right to:

Request access to the information we hold about you
Request correction of inaccurate information
Request deletion of your data (“right to be forgotten”)
Request restriction of processing
Object to processing based on legitimate interest
Request data portability
Withdraw consent at any time, including cookie consent via the banner

To exercise these rights, contact us at : post@exac.no. You also have the right to lodge a complaint with the Norwegian Data Protection Authority (Datatilsynet, www.datatilsynet.no).

8. Cookies

Our website uses the following categories of cookies. Necessary cookies are set automatically and do not require consent. All other cookies are only set once you have given consent via the cookie banner on the website.

You can change or withdraw your cookie consent at any time via the consent banner at the bottom of the website. Please note that Google Maps and YouTube are third-party services, and Google may process personal data (e.g., IP address) in accordance with its own privacy terms when these elements are loaded.

9. Changes to This Policy

We may update this policy from time to time. Material changes will be communicate