Privacy
Privacy statement for TradeWpower AS
How we collect, use and protect personal data when you visit tradewpower.no, contact us, or use DIANA at app.tradewpower.no. Version 3.0, 20 October 2026.
1. Who is responsible
TradeWpower AS (org. no. 919 948 000), Holsjordet 88, 2613 Lillehammer, Norway, is the data controller for the processing described here.
Privacy contact: Ivan Føre Svegaarden, CEO · post@tradewpower.no · +47 92 84 62 76. We are a small company and are not required to appoint a data protection officer; questions about privacy go to the privacy contact.
2. What we collect, why, and on what legal basis
|
Who and what
|
Why we use it
|
Legal basis (GDPR art. 6)
|
|
Enquiries: name, company, e-mail, phone and your message, from our contact forms, e-mail or phone
|
To answer you and, if you ask, to offer DIANA
|
Legitimate interest (f), or steps before a contract at your request (b)
|
|
Client users of DIANA: name, work e-mail, role, company, log-in data and use of the app (pages opened, time of use)
|
To deliver DIANA, manage licences, give support and keep the app secure
|
Contract (b); legitimate interest in security (f)
|
|
Billing: company, contact person, invoice address and e-mail, VAT number, invoices and payments
|
To invoice and keep accounts
|
Contract (b); legal obligation under the Bookkeeping Act (c)
|
|
Ask DIANA: the questions you type in the app’s chat and the answers
|
To answer your question from the data in the published DIANA reports
|
Contract (b)
|
|
Webinars and discussion meetings: names and e-mail of participants; recordings of webinars
|
To hold the sessions and let clients watch recordings
|
Contract (b); legitimate interest (f)
|
|
Subscribers with an account on tradewpower.no: name, e-mail, account and membership history
|
To give access to subscriber content
|
Contract (b)
|
|
Website visitors: IP address, browser, device and pages viewed
|
Security and spam protection; with your consent, statistics on how the site is used
|
Legitimate interest (f); consent (a) for analytics cookies
|
|
Business contacts: name, company, role and e-mail
|
To send relevant information about DIANA and the energy markets
|
Legitimate interest (f). You can say no at any time
|
We do not use personal data for automated decisions that have legal or similarly significant effects on you, and we do not sell personal data.
3. Clients’ own data in DIANA
With DIANA 3, a client can bring its own data sources into DIANA. That data belongs to the client and is shown only to the client’s own users. If it contains personal data, TradeWpower processes it on the client’s behalf as data processor, and we sign a data processing agreement with the client first (GDPR art. 28).
4. Who processes data for us
We use the service providers below. They process data only on our instructions and under data protection agreements.
|
Provider
|
What for
|
Where
|
|
ProISP AS
|
Hosting of tradewpower.no and e-mail (webmail)
|
Norway
|
|
Google
|
Gmail, Google Analytics (only with your consent) and reCAPTCHA spam protection on forms
|
EU and USA
|
|
Vercel
|
Hosting of the DIANA app, app.tradewpower.no
|
USA and EU
|
|
Supabase
|
Database and log-in for the DIANA app
|
USA and EU
|
|
GitHub (Microsoft)
|
Program code and automated data jobs for DIANA; not used to store client users’ personal data
|
USA
|
|
Anthropic
|
The AI model behind Ask DIANA, which answers from the published report data
|
USA
|
|
Vimeo
|
Webinar videos and recordings
|
USA
|
|
TradeWpower’s own computers
|
Running DIANA’s models and data processing
|
Norway
|
We also share data with our accountant and auditor, with lawyers when needed, and with public authorities when the law requires it. If the client agreement is transferred to a company in our group, such as Adaptive Energy Investments in the United Kingdom, the data that belongs to the agreement goes with it, under the same terms.
5. Transfers outside the EEA
Some providers are in the USA. Transfers to them are based on the EU–US Data Privacy Framework where the provider is certified, and otherwise on the EU’s standard contractual clauses. Transfers to the United Kingdom are based on the EU’s adequacy decision for the UK. You can ask us for more information about the safeguards.
6. How long we keep data
|
Data
|
How long
|
|
Enquiries that do not lead to an agreement
|
12 months after the last contact
|
|
Client users’ accounts and app use
|
For the term of the agreement, and deleted within 30 days after it ends, unless the law requires otherwise
|
|
Agreements and correspondence about them
|
For the term of the agreement and 3 years after it ends, the limitation period for claims
|
|
Ask DIANA questions and answers
|
Not stored by TradeWpower. The conversation exists only in your browser and ends when you close the page. To answer, the question and the conversation are sent to our AI provider, Anthropic, which deletes them within 30 days (up to 2 years if flagged under its usage policy). Technical logs of which report data an answer read are kept by our hosting provider for up to 30 days.
|
|
Invoices and accounting records
|
5 years after the end of the financial year, as the Bookkeeping Act requires
|
|
Website statistics (Google Analytics, only with your consent)
|
2 months
|
|
Business contacts for information e-mails
|
Until you say no; we then keep only what is needed to respect your choice
|
7. Cookies
→ Necessary cookies make the site and the subscriber log-in work. They do not need consent.
→ Analytics cookies (Google Analytics) are used only if you accept them in the cookie banner.
→ reCAPTCHA protects our forms against spam, and Vimeo sets cookies when you play a video.
→ You can change your choice at any time through the cookie banner’s settings, and you can delete cookies in your browser.
8. How we protect data
Data is sent encrypted (HTTPS). Access is limited to the people who need it for their work, and our providers are bound by data protection agreements. If a breach puts your rights at risk, we notify Datatilsynet within 72 hours and tell you without undue delay when the risk is high.
9. Your rights
You can ask for access to your data, correction, deletion, restriction of processing and a copy in a portable format. You can object to processing based on legitimate interest, and to information e-mails at any time. Where we rely on consent, you can withdraw it at any time.
Write to post@tradewpower.no or to TradeWpower AS, Holsjordet 88, 2613 Lillehammer. We answer within one month. If you think we process your data unlawfully, you can complain to Datatilsynet, the Norwegian Data Protection Authority (www.datatilsynet.no).
10. Changes
We update this statement when our services or the law change. The date and version at the top show the current version.