Privacy Policy
Abyss is committed to protecting and respecting your privacy. Our Privacy Policy outlines how we comply with
the requirements of the Personal Data Act and the General Data Protection Regulation (GDPR 2016/679). The
Managing Director is responsible for all personal data processing within Abyss.
Collection and Use of Personal Data
From our website, www.abyss.no, we collect only the information you voluntarily provide via our sponsorship
application form. This information is used solely to contact you or provide the requested information.
Contact details of representatives from customers, partners, and suppliers (such as name, phone number, and
email address) are stored in our CRM system. This data is essential for fulfilling the requests of the individuals
concerned.
Disclosure of Personal Data
We do not disclose personal data to third parties. Sharing data with our processors is not considered
disclosure. Abyss does not use processors located outside the EU/EEA area.
Protection of Personal Data
We continuously work to safeguard personal and confidential information.
Our security measures include physical, technical, and administrative safeguards, such as:
Protecting personnel, information, and IT infrastructure
Securing internal and public networks
Maintaining office facilities and technical equipment
We have established routines for regular evaluation and improvement of our security practices.
Data Processors
External data processors assist us with operating and improving our technical systems. We always enter into
data processing agreements to ensure compliance with privacy regulations and our requirements for personal
data handling. The use of data processors is not considered a disclosure of personal information.
Data Retention
We delete or anonymize personal data when the purpose for its processing has been fulfilled unless laws or
regulations require or allow extended retention. For instance, personal data processed based on your consent
will be deleted if you withdraw your consent.
Your Rights
You have the right to request access, correction, or deletion of the personal data we process about you.
Additionally, you can request restricted processing, object to data processing, and request data portability. For
further information on these rights, visit the Norwegian Data Protection Authority (Datatilsynet) website.