Last updated: 10 September 2026.
Privacy Policy
1. Who we are
Fortytwo Technologies AS (organisation number 991 450 068, Edvard Griegs vei 1, 5059 Bergen, Norway) is the data controller for the personal data described in this policy. Questions about privacy can be sent to oi.owtytrof@ycavirp
2. What personal data we process, and why
Contact forms and content downloads on fortytwo.io
When you submit a contact form, request a demo, or download a guide or workbook, we process the details you enter: name, work email address, company, job title, and any message you write. We use this to respond to your request, send you the content you asked for, and follow up on your interest in our services. Legal basis: steps taken at your request prior to entering into a contract (GDPR Article 6(1)(b)) and our legitimate interest in following up business enquiries (Article 6(1)(f)).
LinkedIn Lead Gen Forms
When you unlock a document or submit a form in one of our LinkedIn advertisements, LinkedIn shares the form fields you approve with us, typically name, email address, company, and job title, prefilled from your LinkedIn profile. We use this data for the same purposes and on the same legal basis as forms on our website. LinkedIn is an independent controller for its own processing; see the LinkedIn Privacy Policy.
Email and other correspondence
When you email us or communicate with us in meetings, we keep the correspondence and contact details needed to handle the matter. Legal basis: legitimate interest (Article 6(1)(f)) or performance of a contract (Article 6(1)(b)).
Customers and suppliers
For customers, partners, and suppliers we process the contact details of the people we work with in order to deliver and administer the agreement, including invoicing. Legal basis: performance of a contract (Article 6(1)(b)) and legal obligations such as bookkeeping (Article 6(1)(c)).
Website analytics and advertising
We use Google Analytics 4 and Google Ads tags to understand how the website is used and to measure our advertising. These tools set cookies and process your IP address, device information, and pages visited. Legal basis: our legitimate interest in understanding and improving the website (Article 6(1)(f)). You can block these cookies in your browser settings or with the Google Analytics opt-out add-on.
3. Who we share data with
We do not sell personal data. We share data only with processors that help us run our business, under data processing agreements:
- Microsoft (Microsoft 365: email, documents, and collaboration)
- Google (Google Analytics, Google Ads)
- LinkedIn (advertising and Lead Gen Forms)
- SureContact and SureForms (website forms and email)
- Hostinger (website hosting, data centre in the EU)
- NOXX AS (website operations and digital marketing on our behalf)
Some of these providers process data outside the EEA. Where this happens, transfers are protected by the EU Standard Contractual Clauses or the EU-US Data Privacy Framework.
4. How long we keep data
- Enquiries and downloaded-content leads: up to 24 months after our last contact with you, unless you become a customer
- Customer and supplier data: for the duration of the agreement, and thereafter as required by the Norwegian Bookkeeping Act (five years for accounting records)
- Analytics data: according to the retention period set in Google Analytics (14 months)
5. Your rights
You have the right to access the personal data we hold about you, to have it corrected or deleted, to restrict or object to our processing, and to receive the data you have provided in a portable format. Where processing is based on consent, you may withdraw it at any time. To exercise your rights, email oi.owtytrof@ycavirp. You may also lodge a complaint with the Norwegian Data Protection Authority (Datatilsynet), datatilsynet.no.
6. Security
We protect personal data with access control, encryption in transit, and the security practices we apply to our own Microsoft cloud environment. Access is limited to the people who need it to do their job.
7. Changes to this policy
We may update this policy when our services or legal requirements change. The date at the top of the page shows when it was last revised.