Privacy policy
Last updated 16 October 2026
Who we are
The website marvatis.com and the Marvatis platform at app.marvatis.com are run by Marvatis AS, Norway. Marvatis AS is the data controller for the personal data collected through both.
This policy describes the website. The platform processes more data, such as profiles, certificates and applications, and therefore has its own full privacy policy, which you can find in the platform.
What we collect
When you contact us or book a demo. We collect what you type into the form:
- your name
- your e-mail address
- your phone number, if you give it
- your message, and what your inquiry is about
When you visit the website, if you accept cookies. We use Google Analytics to see how the website is used. It collects which pages you visit, how long you stay, which page you came from, your approximate location (country and city), and which device and browser you use. We do not use this to identify you, and we do not build advertising profiles. If you decline, no cookies are set. Google Analytics may still receive anonymous signals without cookies, such as that a page was viewed, which cannot be linked to you.
Why we use it
We use your contact details only to reply to your inquiry and to arrange a demo. The legal basis is our legitimate interest in answering people who contact us, and taking steps at your request before a possible agreement (GDPR Article 6(1)(f) and 6(1)(b)).
We use the analytics data to improve the website and understand which pages are useful. The legal basis is your consent (GDPR Article 6(1)(a)). You can withdraw your consent at any time.
We do not sell your data, and we do not use it for advertising.
Who processes it for us
We use Google Forms to receive the contact form, with responses stored in Google Workspace. If you accept cookies, analytics data is processed in Google Analytics. Google processes the data on our behalf as a data processor. The website also loads its fonts from Google Fonts, so your browser connects to Google's servers when you open the page. Google may process data outside the EU/EEA, including in the United States. Such transfers are covered by the EU–U.S. Data Privacy Framework and Google's standard contractual clauses.
How long we keep it
Inquiries are kept for as long as we need them to follow up, and deleted after 24 months at the latest, unless you become a customer. Analytics data in Google Analytics is deleted automatically after 14 months.
Cookies
The first time you visit the website, we ask whether you accept cookies. Only if you accept does Google Analytics set these:
_ga: tells visitors apart, kept for up to 2 years_ga_YVFRC9G4MH: keeps track of the session, kept for up to 2 years
Your choice is stored in your browser, so we do not ask again on every visit. When you send the contact form, Google may set its own cookies as part of receiving it, as described in Google's privacy policy.
Your rights
You have the right to ask for access to the data we hold about you, and to have it corrected or deleted. You can also object to or restrict our use of it, and ask for a copy in a portable format. To use your rights, contact us through the contact form.
If you think we handle your data wrongly, you can complain to the Norwegian Data Protection Authority (Datatilsynet).
Changes
We may update this policy. The date at the top shows when it was last changed.