Who we are

Norna AB (organization number 559157-0857) is the data controller for the processing of personal data described in this Privacy Policy.

Registered address:
Eriksbergsgatan 44, 114 30 Stockholm

Email: info@norna.ai

Website: https://norna.ai

Cookies

We use cookies and similar technologies on our website to ensure proper functionality, analyze website usage, and manage marketing and communication activities.

Cookies are small text files stored on your device when you visit our website.

Categories of cookies we use

Necessary cookies
These cookies are required for the website to function properly and cannot be switched off in our systems. They enable core functionality such as security and accessibility.

Analytics cookies
We use Google Analytics (GA4) to collect information about how visitors use our website. This may include anonymized IP address, device information, browser type, pages visited, and time spent on the website. This data helps us improve website performance and user experience.

The legal basis for processing analytics data is your consent (Article 6(1)(a) GDPR).

Google Analytics is provided by Google LLC. Personal data may be transferred outside the EU/EEA. Such transfers are safeguarded in accordance with GDPR through appropriate legal mechanisms such as Standard Contractual Clauses.

Marketing and communication cookies
We use HubSpot to manage forms, communication, and marketing activities. HubSpot may use cookies to track interactions with our website and marketing content.

The legal basis for this processing is your consent (Article 6(1)(a) GDPR).

HubSpot may process personal data outside the EU/EEA. Appropriate safeguards are implemented in accordance with GDPR.

Managing your cookie preferences

We use Cookiebot to manage user consent for cookies. When you visit our website, you are presented with a cookie banner where you can accept, reject, or customize your cookie preferences.

You can withdraw or change your consent at any time through the cookie settings available on our website. You can also configure your browser to block or delete cookies.

Embedded content from other websites

Articles on this website may include embedded content such as videos, images, or other media from third-party websites. Embedded content behaves in the same way as if you had visited the third-party website directly.

These third-party websites may collect data about you, use cookies, implement additional tracking technologies, and monitor your interaction with the embedded content.

The legal basis for processing personal data in connection with embedded content is your consent where required (Article 6(1)(a) GDPR).

We recommend reviewing the privacy policies of the respective third-party providers for more information about how they process personal data.

Who we share your data with

We do not sell your personal data.

We may share personal data with trusted third-party service providers that support the operation of our website and services. These providers may include:

  • Google (Google Analytics)

  • HubSpot (marketing, communication, and form management)

  • Cookiebot (consent management)

These providers process personal data on our behalf and in accordance with data processing agreements that comply with GDPR.

If you request a password reset (where applicable), your IP address may be included in the reset email for security purposes.

Personal data may be transferred outside the EU/EEA where necessary. In such cases, appropriate safeguards are implemented in accordance with GDPR, such as Standard Contractual Clauses.

How long we retain your data

We retain personal data only for as long as necessary to fulfill the purposes for which it was collected, including for legal, accounting, or reporting requirements.

Personal data submitted through contact forms or marketing forms (via HubSpot) is retained for as long as we maintain an active business relationship with you or until you request deletion.

Analytics data collected through Google Analytics is retained in accordance with our configured retention settings and is automatically deleted after the defined retention period.

If you leave a comment on the website (where applicable), the comment and its metadata may be retained to facilitate moderation and follow-up discussions.

You may request deletion of your personal data at any time, subject to any legal obligations requiring us to retain certain information.

Your rights

Under the General Data Protection Regulation (GDPR), you have the following rights regarding your personal data:

  • The right to access the personal data we hold about you

  • The right to request correction of inaccurate or incomplete data

  • The right to request deletion of your personal data

  • The right to restrict processing of your personal data

  • The right to object to processing based on legitimate interest

  • The right to data portability, where applicable

  • The right to withdraw consent at any time where processing is based on consent

To exercise any of these rights, please contact us using the contact details provided in this Privacy Policy.

Please note that we may retain certain information where required by law or for legitimate business purposes.

If you believe your personal data is being processed unlawfully, you have the right to lodge a complaint with the Swedish Authority for Privacy Protection (Integritetsskyddsmyndigheten).

Where your data is sent

Personal data collected through this website may be processed by trusted third-party service providers that support our website operations, analytics, and communication activities.

We use services such as Google Analytics (Google LLC) and HubSpot to analyze website usage and manage communication and marketing activities. These providers may process personal data outside the EU/EEA.

When personal data is transferred outside the EU/EEA, we ensure that appropriate safeguards are in place in accordance with GDPR, such as Standard Contractual Clauses or other legally approved transfer mechanisms.

We only transfer personal data where necessary for the purposes described in this Privacy Policy and under applicable data protection laws.