Privacy notice for Markedsradar

Last updated 24.09.2026.

1. Who is responsible

FullPeiling AS, organisation number 938 341 508, Kokstadvegen 41, 5257 Kokstad, Norway, is the controller for the information described here. This covers information about visitors, users and customers, and about people mentioned in the news in the newspaper. Contact us at hei@fullpeiling.no.

What you add to your organisation, such as the list of users, the watchlist and what each user has read, we process on behalf of your business. Your business is then the controller, and we are the processor. This is governed by the data processing agreement. When we count overall use of the newspaper for our own key figures, we are the controller ourselves, see “Use of the service” in section 2. The same applies to the account each user signs in with, see “Account” in section 2.

2. What we process, why, and on what basis

Draft without an account: the business you looked up, your answers and the draft watchlist, before you signed in. The draft is tied to your browser with a cookie. When a search finds one specific business, and when you make a draft, we store the business and the time with a code for your browser. To prevent misuse, we count how many drafts are made from the same network. For this we store a code made from the IP address with a secret key, not the address itself
PurposeLet you try Markedsradar without an account, find your draft again, and bring it with you when you sign in. Count how often each business is looked up, so we can see which businesses are interested in MarkedsradarLegal basisSteps you ask for before a possible agreement (GDPR Article 6(1)(b)), and our legitimate interest in preventing misuse and in seeing which businesses are interested in the service (Article 6(1)(f))
Account: name, email address, the language of the account, which sign-in provider you use, the identifier the provider gives us, and when you signed in
PurposeSign you in, show who the users are, show the service and send the emails in your language, and send you messages about the serviceLegal basisThe agreement to use the service (Article 6(1)(b))
Use of the service: which stories you have opened or marked as read in the newspaper, and when
PurposeShow what you have and have not read in the newspaper. Count overall use for FullPeiling's key figures: how many organisations start using the newspaper, how many stories are opened, and how many people use the newspaper per week and per month. Only daily totals go on to FullPeiling's own system, never who read whatLegal basisOur legitimate interest in understanding how the service is used, and improving it (Article 6(1)(f)). Showing what you have read in the newspaper is something we do for your business, under the data processing agreement
Your business: organisation number, name, legal form, industry code, number of employees and municipality from the Central Coordinating Register for Legal Entities (Enhetsregisteret), and public information from the business's website, such as description, customers, partners and logo
PurposeSuggest companies that fit your businessLegal basisThe agreement, and our legitimate interest in giving a relevant suggestion before the agreement (Article 6(1)(f)). The information is public
The companies: information from Enhetsregisteret and from the websites of the businesses on the watchlists. If a company is a sole proprietorship, its name may be the owner's name. We also look up who the managing director is in Enhetsregisteret, to see when the managing director changes. We do not store the name, only a code made from the name and date of birth with a secret key
PurposeShow the companies, collect news about them, and tell you when a company gets a new managing directorLegal basisOur legitimate interest in providing the newspaper (Article 6(1)(f)). The information is public
People in the news: name, position and what a news story about a company says about the people it mentions. We store the original headline, a headline and a short summary we write ourselves, the publisher, the date, the link and the image credit
PurposeShow news about the companies our customers followLegal basisOur legitimate interest, and our customers', in keeping up with the market (Article 6(1)(f)). See section 3
Email from the service: which emails we have sent you, when, in which language and with which ID at SendGrid, and whether you have unsubscribed
PurposeSend the three emails during the trial in your language, never send the same email twice, and not send the last two to anyone who has unsubscribed. The email sent when the newspaper is ready includes the most important stories from the newspaper. We send that content on behalf of your business, under the data processing agreement. If you are an administrator, we also send you the emails about the subscription: the reminder before a yearly subscription renews, the confirmation when the subscription is cancelled, the message when a cancellation is undone, and the notice before everything is deleted. The confirmation and the message say which administrator cancelled or undid the cancellation. We keep proof that the reminder before the renewal was sentLegal basisThe agreement (Article 6(1)(b)) for the email sent when the newspaper is ready and the emails about the subscription. Our legitimate interest in helping you get started and offering the subscription (Article 6(1)(f)) for the email after one week and the email before the trial ends. You can unsubscribe from those two with the link in the email. The emails about the subscription are messages about the agreement, and also go to anyone who has unsubscribed. We send the name of the administrator who cancelled or undid the cancellation to the other administrators, based on our and the business's legitimate interest in everyone knowing who changed the agreement (Article 6(1)(f))
Customer follow-up: the business's name and organisation number, the name and web address of the organisation in Markedsradar, legal form, industry, number of employees and municipality from Enhetsregisteret, name and email of the person who created the organisation, whether you got a trial, and an assessment of whether the business is in our target group, based on industry and number of employees
PurposeFullPeiling AS follows up the customer relationship, helps you get started, and offers our own similar servicesLegal basisOur legitimate interest in following up our customers (Article 6(1)(f)). You can opt out, see section 6
Order and invoice: who ordered and when, monthly or yearly invoicing, your reference, invoice email, the EHF address from the Peppol register, and payments. Each renewal and cancellation, with who cancelled, recorded the cancellation or undid it, and who received the reminder before the renewal
PurposeInvoice the subscription and meet our accounting obligations. Document when the subscription was renewed or cancelled, and that the reminder before the renewal was sentLegal basisThe agreement, and the Norwegian Bookkeeping Act for storage (Article 6(1)(b) and (c)). Our legitimate interest in being able to document the agreement (Article 6(1)(f))
Security log: invitations, users being added and removed, role changes, changes to the watchlist, creation and deletion of the organisation, orders, renewals and cancellations, who received the emails about the subscription, and lookups by FullPeiling's administrators. For a change to the watchlist we store who made it, the company or topic and the role, never the reason or the text of the customer's own topic
PurposeKeep the service secure, detect misuse, and document who did whatLegal basisOur legitimate interest in a secure service (Article 6(1)(f)). We log the changes to the watchlist for your business, under the data processing agreement
Website analytics: usage patterns on the marketing pages, collected with Microsoft Clarity
PurposeUnderstand how the website is used, and improve itLegal basisConsent through the consent box (Article 6(1)(a))

Information	Purpose	Legal basis
Draft without an account: the business you looked up, your answers and the draft watchlist, before you signed in. The draft is tied to your browser with a cookie. When a search finds one specific business, and when you make a draft, we store the business and the time with a code for your browser. To prevent misuse, we count how many drafts are made from the same network. For this we store a code made from the IP address with a secret key, not the address itself	Let you try Markedsradar without an account, find your draft again, and bring it with you when you sign in. Count how often each business is looked up, so we can see which businesses are interested in Markedsradar	Steps you ask for before a possible agreement (GDPR Article 6(1)(b)), and our legitimate interest in preventing misuse and in seeing which businesses are interested in the service (Article 6(1)(f))
Account: name, email address, the language of the account, which sign-in provider you use, the identifier the provider gives us, and when you signed in	Sign you in, show who the users are, show the service and send the emails in your language, and send you messages about the service	The agreement to use the service (Article 6(1)(b))
Use of the service: which stories you have opened or marked as read in the newspaper, and when	Show what you have and have not read in the newspaper. Count overall use for FullPeiling's key figures: how many organisations start using the newspaper, how many stories are opened, and how many people use the newspaper per week and per month. Only daily totals go on to FullPeiling's own system, never who read what	Our legitimate interest in understanding how the service is used, and improving it (Article 6(1)(f)). Showing what you have read in the newspaper is something we do for your business, under the data processing agreement
Your business: organisation number, name, legal form, industry code, number of employees and municipality from the Central Coordinating Register for Legal Entities (Enhetsregisteret), and public information from the business's website, such as description, customers, partners and logo	Suggest companies that fit your business	The agreement, and our legitimate interest in giving a relevant suggestion before the agreement (Article 6(1)(f)). The information is public
The companies: information from Enhetsregisteret and from the websites of the businesses on the watchlists. If a company is a sole proprietorship, its name may be the owner's name. We also look up who the managing director is in Enhetsregisteret, to see when the managing director changes. We do not store the name, only a code made from the name and date of birth with a secret key	Show the companies, collect news about them, and tell you when a company gets a new managing director	Our legitimate interest in providing the newspaper (Article 6(1)(f)). The information is public
People in the news: name, position and what a news story about a company says about the people it mentions. We store the original headline, a headline and a short summary we write ourselves, the publisher, the date, the link and the image credit	Show news about the companies our customers follow	Our legitimate interest, and our customers', in keeping up with the market (Article 6(1)(f)). See section 3
Email from the service: which emails we have sent you, when, in which language and with which ID at SendGrid, and whether you have unsubscribed	Send the three emails during the trial in your language, never send the same email twice, and not send the last two to anyone who has unsubscribed. The email sent when the newspaper is ready includes the most important stories from the newspaper. We send that content on behalf of your business, under the data processing agreement. If you are an administrator, we also send you the emails about the subscription: the reminder before a yearly subscription renews, the confirmation when the subscription is cancelled, the message when a cancellation is undone, and the notice before everything is deleted. The confirmation and the message say which administrator cancelled or undid the cancellation. We keep proof that the reminder before the renewal was sent	The agreement (Article 6(1)(b)) for the email sent when the newspaper is ready and the emails about the subscription. Our legitimate interest in helping you get started and offering the subscription (Article 6(1)(f)) for the email after one week and the email before the trial ends. You can unsubscribe from those two with the link in the email. The emails about the subscription are messages about the agreement, and also go to anyone who has unsubscribed. We send the name of the administrator who cancelled or undid the cancellation to the other administrators, based on our and the business's legitimate interest in everyone knowing who changed the agreement (Article 6(1)(f))
Customer follow-up: the business's name and organisation number, the name and web address of the organisation in Markedsradar, legal form, industry, number of employees and municipality from Enhetsregisteret, name and email of the person who created the organisation, whether you got a trial, and an assessment of whether the business is in our target group, based on industry and number of employees	FullPeiling AS follows up the customer relationship, helps you get started, and offers our own similar services	Our legitimate interest in following up our customers (Article 6(1)(f)). You can opt out, see section 6
Order and invoice: who ordered and when, monthly or yearly invoicing, your reference, invoice email, the EHF address from the Peppol register, and payments. Each renewal and cancellation, with who cancelled, recorded the cancellation or undid it, and who received the reminder before the renewal	Invoice the subscription and meet our accounting obligations. Document when the subscription was renewed or cancelled, and that the reminder before the renewal was sent	The agreement, and the Norwegian Bookkeeping Act for storage (Article 6(1)(b) and (c)). Our legitimate interest in being able to document the agreement (Article 6(1)(f))
Security log: invitations, users being added and removed, role changes, changes to the watchlist, creation and deletion of the organisation, orders, renewals and cancellations, who received the emails about the subscription, and lookups by FullPeiling's administrators. For a change to the watchlist we store who made it, the company or topic and the role, never the reason or the text of the customer's own topic	Keep the service secure, detect misuse, and document who did what	Our legitimate interest in a secure service (Article 6(1)(f)). We log the changes to the watchlist for your business, under the data processing agreement
Website analytics: usage patterns on the marketing pages, collected with Microsoft Clarity	Understand how the website is used, and improve it	Consent through the consent box (Article 6(1)(a))

We do not knowingly process special categories of personal data, and we ask you not to add any.

3. People mentioned in the news

The newspaper is about businesses, not people. Even so, many news stories mention people, such as managers, employees and others who are quoted. When we show such a story, we process the personal data in it.

We only show what has already been published, and we link to the story at the publisher.
The newspaper follows businesses and topics, not people. The terms forbid customers to add topics about named private individuals, and we do not build profiles of people.
The search in the newspaper only finds stories about the companies the organisation itself follows. No customer can search stories about companies they do not follow.
Stories saying that a named private individual is suspected, charged, indicted or convicted of a criminal offence are left out when we collect news. If such a story gets through anyway, we remove it when we are told.
Stories are kept for 13 months from when they were published. Then they are deleted.

If you are mentioned in a story in Markedsradar, you have the same rights as everyone else, see section 6. You can object to us showing the story, and ask us to remove your name, the summary or the whole story from Markedsradar. Write to hei@fullpeiling.no and include the link to the story. We cannot change the story at the publisher. You must take that up with the publisher.

We inform you here, instead of contacting each person mentioned in a story. That would take a disproportionate effort (GDPR Article 14(5)(b)).

4. Who receives the information

We do not sell information. These providers process information for us:

Supabase
WhatDatabase and sign-inWhereStockholm, EU
Vercel
WhatHosting of the service and the website. The functions run in StockholmWhereVercel Inc. is a US company. Transfers to the US are based on the EU Standard Contractual Clauses
Twilio SendGrid
WhatSends the emails from the service. Receives the recipient's name and email address, the business's name and the content of the email. The email sent when the newspaper is ready includes the headlines and sources of the most important stories, and the name of the company each story is about, with the company's role for the business, such as customer or competitor. The company can also be a topic the business wrote itself, and a headline can mention a person. The emails about the subscription include the dates of the renewal, the cancellation and the deletion, and the confirmation of a cancellation and the message that it has been undone include the name of the administrator who cancelled or undid it. Open and click tracking is turned offWhereTwilio Inc. is a US company. Transfers to the US are based on the EU Standard Contractual Clauses
OpenAI
WhatSearches for news about the companies, writes the summaries, and suggests companies based on public websites. Receives the names of the companies and the text of stories and websites, no information about you as a userWhereOpenAI is a US company, and the information is processed in the US. Transfers are based on a valid transfer mechanism under Chapter V of the GDPR
xAI
WhatThe same as OpenAIWherexAI is a US company, and the information is processed in the US. Transfers are based on a valid transfer mechanism under Chapter V of the GDPR
Microsoft and Google
WhatSign-in. They are responsible for your account with them, and we receive your name, email address and an identifier from themWhereUnder the provider's own privacy policy
Microsoft Clarity
WhatWebsite analytics, only with consentWhereUnder Microsoft's privacy policy
Fiken
WhatAccounting and invoicing. EHF is sent through the Peppol networkWhereNorway
Brønnøysund Register Centre
WhatWe look up businesses in Enhetsregisteret. The lookup contains no personal data about youWhereNorway

Provider	What	Where
Supabase	Database and sign-in	Stockholm, EU
Vercel	Hosting of the service and the website. The functions run in Stockholm	Vercel Inc. is a US company. Transfers to the US are based on the EU Standard Contractual Clauses
Twilio SendGrid	Sends the emails from the service. Receives the recipient's name and email address, the business's name and the content of the email. The email sent when the newspaper is ready includes the headlines and sources of the most important stories, and the name of the company each story is about, with the company's role for the business, such as customer or competitor. The company can also be a topic the business wrote itself, and a headline can mention a person. The emails about the subscription include the dates of the renewal, the cancellation and the deletion, and the confirmation of a cancellation and the message that it has been undone include the name of the administrator who cancelled or undid it. Open and click tracking is turned off	Twilio Inc. is a US company. Transfers to the US are based on the EU Standard Contractual Clauses
OpenAI	Searches for news about the companies, writes the summaries, and suggests companies based on public websites. Receives the names of the companies and the text of stories and websites, no information about you as a user	OpenAI is a US company, and the information is processed in the US. Transfers are based on a valid transfer mechanism under Chapter V of the GDPR
xAI	The same as OpenAI	xAI is a US company, and the information is processed in the US. Transfers are based on a valid transfer mechanism under Chapter V of the GDPR
Microsoft and Google	Sign-in. They are responsible for your account with them, and we receive your name, email address and an identifier from them	Under the provider's own privacy policy
Microsoft Clarity	Website analytics, only with consent	Under Microsoft's privacy policy
Fiken	Accounting and invoicing. EHF is sent through the Peppol network	Norway
Brønnøysund Register Centre	We look up businesses in Enhetsregisteret. The lookup contains no personal data about you	Norway

The Supabase and Vercel accounts are currently owned by Appit AS, which operates them for FullPeiling AS.

Customer follow-up takes place in FullPeiling's own customer system.

The images in the newspaper are shown directly from the publisher's website. When you open the newspaper, your browser fetches the image from the publisher, and the publisher then sees your IP address, just as when you visit their website.

We disclose information to public authorities when the law requires it.

5. How long we keep it

Draft without an account
KeptFor 30 days. Then the draft is deleted automatically. The businesses you looked up, with the code for your browser, are also deleted after 30 days. Only the number per business and day is then left, with nothing about who searched, and it is kept for 12 months. The count used against misuse is deleted when the time window it applies to is over
Account
KeptUntil you ask us to delete it. If you do not belong to any organisation, it is deleted once 30 days have passed without an organisation and without you being signed in. It is kept as long as you have an open invitation, or an order that has not been invoiced
Your business and the watchlist
KeptAs long as you use the service. When the trial ends without an order, the newspaper is locked, and everything is deleted after 30 days. The same applies when the subscription ends
The companies
KeptAs long as at least one customer has the company on its watchlist. The code for the managing director is replaced when the managing director changes. The morning after no customer has the company active on its watchlist, we delete the code and what we have gathered about the company. If the company is not on any watchlist or in any draft, it is deleted completely. If it has only been removed from the watchlists, we keep the name and organisation number from Enhetsregisteret, so it is not suggested again. A short extract of the code is kept in the story about a new managing director, and is deleted with the story
The news
KeptFor 13 months from when the story was published
Use of the service
KeptAs long as you belong to the organisation. When you no longer belong to it, or the organisation is deleted, what you have read is deleted too, and the same happens when the story is deleted. The daily totals do not say who, and are kept in FullPeiling's own system
Email from the service
KeptUntil the organisation or your account is deleted. If you unsubscribe, that applies to your account, and is kept until the account is deleted. The proof that the reminder before the renewal was sent is kept with the renewal, see “Renewals and cancellations”
Customer follow-up
KeptAs long as the customer relationship lasts, and 12 months after
Order and invoice
KeptAs long as the organisation exists, and then five years after the end of the financial year in which the subscription was last invoiced or ended, as the Norwegian Bookkeeping Act requires. We then remove the invoice email, your reference and who ordered. Amounts, dates and the organisation number remain. Who ordered is kept in the order until then, also when the account has been deleted. An order that was withdrawn before the subscription started is deleted with the organisation
Renewals and cancellations
KeptUntil the organisation is deleted. A renewal that has not been invoiced by then is kept without who received the reminder until it has been invoiced, and is then deleted. If your account is deleted before that, we remove the link to you
Security log
KeptNo longer than 12 months. When the organisation is deleted, the changes to the watchlist and who received the emails about the subscription are deleted. The rest is kept without the organisation, with the organisation number, until it is 12 months old
Organisation numbers that have had a trial
KeptAs long as the service exists, so each business gets one trial. Stored with them is when an organisation was deleted, without any content
Website analytics
KeptUnder Microsoft Clarity's retention periods

Information	Kept
Draft without an account	For 30 days. Then the draft is deleted automatically. The businesses you looked up, with the code for your browser, are also deleted after 30 days. Only the number per business and day is then left, with nothing about who searched, and it is kept for 12 months. The count used against misuse is deleted when the time window it applies to is over
Account	Until you ask us to delete it. If you do not belong to any organisation, it is deleted once 30 days have passed without an organisation and without you being signed in. It is kept as long as you have an open invitation, or an order that has not been invoiced
Your business and the watchlist	As long as you use the service. When the trial ends without an order, the newspaper is locked, and everything is deleted after 30 days. The same applies when the subscription ends
The companies	As long as at least one customer has the company on its watchlist. The code for the managing director is replaced when the managing director changes. The morning after no customer has the company active on its watchlist, we delete the code and what we have gathered about the company. If the company is not on any watchlist or in any draft, it is deleted completely. If it has only been removed from the watchlists, we keep the name and organisation number from Enhetsregisteret, so it is not suggested again. A short extract of the code is kept in the story about a new managing director, and is deleted with the story
The news	For 13 months from when the story was published
Use of the service	As long as you belong to the organisation. When you no longer belong to it, or the organisation is deleted, what you have read is deleted too, and the same happens when the story is deleted. The daily totals do not say who, and are kept in FullPeiling's own system
Email from the service	Until the organisation or your account is deleted. If you unsubscribe, that applies to your account, and is kept until the account is deleted. The proof that the reminder before the renewal was sent is kept with the renewal, see “Renewals and cancellations”
Customer follow-up	As long as the customer relationship lasts, and 12 months after
Order and invoice	As long as the organisation exists, and then five years after the end of the financial year in which the subscription was last invoiced or ended, as the Norwegian Bookkeeping Act requires. We then remove the invoice email, your reference and who ordered. Amounts, dates and the organisation number remain. Who ordered is kept in the order until then, also when the account has been deleted. An order that was withdrawn before the subscription started is deleted with the organisation
Renewals and cancellations	Until the organisation is deleted. A renewal that has not been invoiced by then is kept without who received the reminder until it has been invoiced, and is then deleted. If your account is deleted before that, we remove the link to you
Security log	No longer than 12 months. When the organisation is deleted, the changes to the watchlist and who received the emails about the subscription are deleted. The rest is kept without the organisation, with the organisation number, until it is 12 months old
Organisation numbers that have had a trial	As long as the service exists, so each business gets one trial. Stored with them is when an organisation was deleted, without any content
Website analytics	Under Microsoft Clarity's retention periods

6. Your rights

You can ask for access to the information we hold about you, have it corrected or deleted, have the processing restricted, and receive information you have given us yourself in a common format. You can object to processing based on legitimate interest, and withdraw consent at any time.

You can opt out of messages about our own services easily and free of charge by writing to hei@fullpeiling.no, and every such message tells you how. The unsubscribe link in the emails from the service only applies to the emails during the trial.

Write to hei@fullpeiling.no. We reply within one month.

If you believe we process information in breach of the law, you can complain to the Norwegian Data Protection Authority (Datatilsynet).

7. Cookies

The service itself only uses the cookies needed to keep you signed in, remember your language and find your draft again.

Your language is remembered in the cookie “mr-spraak”. It only contains “nb” or “en”, and is set when you choose a language and when you sign in. It lasts for one year, and stays when you sign out, because it is a choice of language and not part of the sign-in. If several people share a computer, the next person sees the language you chose, and can change it. It is set without consent, because it is needed to show the pages in the language you have chosen. When you are signed in, the language of your account applies. It also decides the language of the emails we send you.

On the marketing pages, analytics from Microsoft Clarity is only set when you have said yes in the consent box, and your choice is only stored in your browser, not with us. You can change your choice at any time at the bottom of the page.

8. Security

Each organisation's information is kept separate from others' in the database, and access is controlled by your role. No customer can see which companies other customers follow. All transfers are encrypted, and the information is stored encrypted at Supabase. We store no passwords. Lookups by FullPeiling's own administrators are limited to what is needed for operations and support, and are logged.

9. Changes

We update this notice when the processing changes. The date at the top shows the last change. We announce significant changes in the service or by email.

This notice is available in Norwegian and English. The Norwegian text is binding.

10. Contact

FullPeiling AS, Kokstadvegen 41, 5257 Kokstad, Norway, hei@fullpeiling.no.