Privacy policy

Rubic AS (org. no. 913 574 788) is the data controller for the personal data described here. We are located at Bryggerigata 1, 2609 Lillehammer, and are part of ECIT.

Send questions about privacy to post@rubic.no, or call 400 02 292.

Organisations that use Rubic are themselves data controllers for the member data they enter. Rubic is then the data processor, and the processing follows the data processing agreement. If you are a member and want access or rectification, it is your organisation you should contact first.

How the Rubic apps on web and mobile process personal data is set out in the privacy policy for the Rubic applications.

When you fill in a form on the website — to request a quote, start a trial or receive the newsletter — we record your first name, surname, e-mail address, telephone number and, where applicable, the organisation you represent.

When you book a meeting in the calendar, your name, e-mail address and the time are recorded. When you contact support, your enquiry and the replies are stored in the support system.

For customers, we record contact persons, agreements and invoicing information. If you apply for a job with us, we process the information you send in your application.

If you have consented to it, we also record how you use the website. What this involves is described on the page about cookies.

Responding to enquiries and providing quotes. The legal basis is that you have requested it, or our legitimate interest in following up someone who may become a customer.

Delivering the service and following up the customer relationship. The legal basis is the agreement with the customer.

Sending newsletters and marketing by e-mail. The legal basis is consent, which you can withdraw at any time via the link at the bottom of the e-mail.

Measuring traffic and ads on the website. The legal basis is the consent you give in the cookie banner.

Fulfilling accounting and bookkeeping obligations. The legal basis is a legal obligation.

We do not sell personal data. These suppliers process information on our behalf: HubSpot (customer follow-up, forms, e-mail and meeting booking), Zendesk (customer support), Google Analytics and Microsoft Clarity (statistics, only after consent) and Kompani Kvam AS (operation and development of the website).

If you have consented to marketing, Meta, LinkedIn and Google receive information about your visit for ad measurement. They also use the information for their own purposes and are themselves responsible for this — see their privacy policies.

The suppliers used in the Rubic service itself are listed in the data processing agreement.

Several of the suppliers are US companies. When information is transferred outside the EEA, this takes place on the basis of the EU–US Data Privacy Framework where the supplier is certified, or the EU’s standard contractual clauses.

We store the information for as long as is necessary for the purpose. Enquiries that do not lead to a customer relationship are deleted when they are no longer relevant to follow up.

Accounting records are kept for five years, as required by bokføringsloven (the Norwegian Bookkeeping Act). When a customer terminates its agreement with Rubic, the customer’s data in the service is deleted 30 days after termination, as described in the service agreement.

How long cookies stay in your browser is set out on the page about cookies.

You can request access to the information we hold about you, and ask to have it rectified, erased or provided in a machine-readable format. You can object to processing based on legitimate interest and withdraw consent at any time.

Send your request to post@rubic.no. We will respond within one month.

If you believe that we are processing your information in breach of the regulations, you can lodge a complaint with the Norwegian Data Protection Authority (Datatilsynet).

We update this policy when the processing changes. This version is effective from 14 October 2026.