Privacy
Privacy notice & your data rights
This notice explains how Geo4 Dynamics AS processes personal data when you use our project screening, NDA, and contact tools, in line with the EU General Data Protection Regulation (GDPR) and the Norwegian Personal Data Act.
1. Who we are
Geo4 Dynamics AS is the data controller for personal data processed via this site. Contact our privacy office at cc@geo4.com.
2. What we collect
- Contact details you submit (name, role, company, email, phone, country).
- Screening responses describing your project, feedstock, site, and commercial parameters.
- NDA records including signatory name, title, company, IP address, and the signed PDF.
- Operational metadata (timestamps, IP, user agent) needed to secure and audit the platform.
3. Why we process it (lawful basis)
- Legitimate interest (Art. 6(1)(f)) — to evaluate project fit, contact you about opportunities, and operate our CRM.
- Contract / pre-contract (Art. 6(1)(b)) — to negotiate and execute NDAs and commercial agreements.
- Legal obligation (Art. 6(1)(c)) — bookkeeping, KYC, and statutory record retention where applicable.
4. Who can see your data
Access is limited to Geo4 staff with a business need. We do not sell or rent personal data. Our hosting sub-processor (Lovable Cloud, with data stored in EU/Frankfurt) processes data on our behalf under a Data Processing Agreement. Where we email you via Microsoft Outlook, Microsoft acts as our sub-processor for that correspondence.
5. How long we keep it
- Screening submissions and lead records: up to 36 months from last activity.
- NDA records: for the term agreed in the NDA, plus any statutory period.
- Audit logs: 12 months.
6. Where your data is processed
All primary storage and processing happens in the European Union (Frankfurt). Any transfer outside the EU/EEA is covered by Standard Contractual Clauses or an equivalent safeguard under Chapter V of the GDPR.
7. Your rights
Under the GDPR you have the right to:
- access the personal data we hold about you (Art. 15);
- have inaccurate data corrected (Art. 16);
- have your data erased where applicable (Art. 17);
- restrict or object to processing (Art. 18 & 21);
- receive your data in a portable format (Art. 20);
- withdraw any consent you have given (Art. 7);
- lodge a complaint with the Norwegian Data Protection Authority (Datatilsynet) or your local supervisory authority.
We respond within 30 days (Art. 12(3)). To protect you, we verify your identity before disclosing or erasing any data — typically by replying from the email address we have on file.
File a data subject request
Submit the form below. We’ll verify your identity before fulfilling the request, so use the email address you provided to us. We never export or delete data based solely on this form — every request is reviewed by our privacy team.
Requests are logged with timestamp, IP, and user agent for audit purposes (GDPR Art. 5(2) accountability).
Questions? Email cc@geo4.com. You can also return to the homepage.
Norwegian supervisory authority: Datatilsynet.
