Øverbygg AS
Privacy policy
Last updated: 31 May 2026
This privacy policy explains how Øverbygg AS ("Øverbygg", "we", "us") collects and processes personal data when you visit our website and get in touch with us. We process your personal data in accordance with the General Data Protection Regulation (GDPR) and the Norwegian Personal Data Act.
1. Data controller
Øverbygg AS (company reg. no. 914 063 701) is the data controller for the personal data processed via the website. If you have questions about privacy, contact us at salg@overbygg.no or by phone on +47 61 27 30 00. Visiting address: Industriveien 42, 2636 Øyer.
2. What personal data we process
We process the data you provide yourself, along with certain technical data:
- Contact form: name, email address, phone number and the content of your message.
- Cabin catalogue download: name, email address and phone number.
- Technical data: anonymised, cookieless usage statistics, and IP address processed on a technical basis to deliver the website and the map.
3. Purpose and legal basis
We process personal data in order to:
- respond to enquiries and follow up on dialogue – legitimate interest and, where relevant, steps prior to entering into a contract (GDPR Art. 6(1)(b) and (f)),
- send the cabin catalogue and information you have requested – consent (Art. 6(1)(a)), which can be withdrawn,
- marketing you have consented to, such as newsletters and other marketing – consent (Art. 6(1)(a)),
- relevant marketing to existing customers and prospects, where our legitimate interest is balanced against your rights – balancing of interests (Art. 6(1)(f)), and you can opt out,
- mandatory and transactional information necessary to fulfil a contract, such as order and delivery confirmations – contract (Art. 6(1)(b)),
- operate, secure and improve the website – legitimate interest (Art. 6(1)(f)).
Our marketing is based on three legal grounds in line with Faun Gruppen's consent framework: consent to other marketing (Art. 6(1)(a)), legitimate marketing based on a balancing of interests (Art. 6(1)(f)), and mandatory/transactional information under a contract (Art. 6(1)(b)). Consent can be withdrawn, and you can opt out of marketing, by contacting us at salg@overbygg.no.
4. Who we share data with
We never sell personal data and do not share it with unauthorised parties. We use data processors who process data on our behalf under a data processing agreement:
- Vercel – operations/hosting and anonymous, cookieless visitor statistics,
- Sanity – content platform (CMS),
- Mapbox – the map on the "Cabin plots" page,
- Microsoft – marketing analytics and web tracking (Dynamics 365 Customer Insights),
- a provider for form and email handling – to receive and respond to enquiries.
Enquiries may be passed on to the right sales adviser or region at Øverbygg for appropriate follow-up.
5. Transfers outside the EEA
Some providers may process data outside the EEA (for example in the USA). Such transfers only take place on a lawful basis, such as the EU Standard Contractual Clauses (SCC) and/or the EU–US Data Privacy Framework, with appropriate safeguards.
6. How long we store data
We store personal data for as long as it is necessary for the purpose. Enquiries are kept for as long as it is necessary to follow up with you, and are deleted when they are no longer relevant. Data relating to contracts is kept for as long as the accounting rules require. Consent-based communication ends when you withdraw your consent.
7. Your rights
You have the right to:
- access the data we process about you,
- have inaccurate data corrected,
- have data deleted,
- request restriction of the processing,
- object to processing based on legitimate interest,
- request data portability, and
- withdraw a consent.
To exercise your rights, contact us at salg@overbygg.no. We will respond as quickly as possible, and within 30 days at the latest.
8. Complaints to the Norwegian Data Protection Authority
If you believe that we are processing personal data in breach of the regulations, you can complain to the Norwegian Data Protection Authority (Datatilsynet). We would appreciate it if you contacted us first. More information at www.datatilsynet.no.
9. Security
We have implemented appropriate technical and organisational measures to protect personal data against unauthorised access, alteration, deletion and loss.
10. Changes
We may update this policy in the event of changes to the service or the regulations. The current version is always available on this page, with the date of the latest update at the top.
11. Contact
Questions about privacy? Contact us at salg@overbygg.no or by phone on +47 61 27 30 00.