This policy applies to the locally installed software AquaSim, the website aquasim.no, and any services directly connected to AquaSim and related products.
AquaSim
AquaSim requires us to register and store user information relevant to billing (name, email, company, company registration number, and other applicable data). We also store the necessary information to supply users with the correct licenses, including hardware identification, End User data, access logs where relevant, IP, addresses, and information about versions and updates.
Personal correspondence and other information submitted willingly either through the website, email, telephone, or other contact is stored and processed internally in Aquastructures AS. When you contact us through any channel, we will process your contact details and the content of your communication in order to respond to your inquiry. This processing is based on our legitimate interests in handling inbound communication (GDPR Article 6(1)(f)).
Our digital offerings, including AquaSim and aquasim.no, log user access for security purposes, including IP, page and time of access.
Our contact us forms store the applicable user data (name, company, email, location of user, IP, time, and corresponding messages).
Controller
The data controller is Aquastructures AS, Trondheim, Norway. Contact: gdpr@aquastructures.no.
Third parties
We may share limited information (name, company, nature of relationship) with 3rd parties (CRM software, accounting software, reseller partners) for the purpose of helping sales and / or support.
Telemetry
Telemetry is submitted anonymously. Each session is assigned a randomly generated ID that changes between sessions, allowing us to identify usage patterns without identifying individual users. No IP addresses or other identifying information are retained by our telemetry server.
Cookies
This website does not use any cookies or identifiable information on the clients systems.
Additions to the policy
This policy does not override any additions made in the Terms and Conditions, nor other agreements made with our customers.
Data
| Activity | Data | Legal basis | Retention |
|---|---|---|---|
| Billing | Name, email, company, reg. no. | Contract (Art. 6(1)(b)) | Duration of customer relationship + 5 years |
| Contact forms | Name, email, message, IP | Legitimate interests (Art. 6(1)(f)) | 2 years |
| Access logs | IP, page, timestamp | Legitimate interests (Art. 6(1)(f)) | 30 days |
| Telemetry | Anonymous session data | Legitimate interests (Art. 6(1)(f)) | 2 years |
Privacy concerns
As a data subject under the GDPR, you have the following rights regarding your personal data held by Aquastructures:
Access - you may request a copy of the personal data we hold about you.
Rectification - you may request that we correct inaccurate or incomplete data.
Erasure - you may request that we delete your personal data, subject to our legal obligations and legitimate interests (such as active license or billing records).
Portability - you may request that we provide your personal data in a structured, commonly used, machine-readable format.
Objection - you may object to processing based on legitimate interests.
Withdrawal of consent - where processing is based on consent, you may withdraw it at any time without affecting the lawfulness of prior processing.
To exercise any of these rights, please contact us via our contact form. We will respond within 30 days.
If you believe your rights have not been respected, you have the right to lodge a complaint with Datatilsynet, the Norwegian data protection authority.