Privacy Policy

Norstat AS, Fridtjof Nansens plass 5, 0160 Oslo, Norway, is responsible for the processing of your personal information, and for keeping it safe. We naturally take appropriate technical and organisational measures to safeguard your personal data, such as using firewalls, encryption and access control to our premises and files.

For users of this website

What data we collect when you use this website, and how it is used:

We collect and process your personal data based on your consent, in the following ways:

  • We collect personal data about you that you submit through our contact form (name and e-mail address), for the purpose of contacting you.
  • Information you submit to us when downloading materials from our website (name, e-mail address, name of your Company) will be used to e-mail you the requested media, and may also be used to send you updates we think you will find relevant.
  • Personal information that you submit to subscribe to our newsletter (name and e-mail address), will be used to send you our newsletter.
  • We will never share your personal information with a third party without asking your explicit consent in advance.

Cookie policy

A cookie is a small text file which stores information on your computer. It is used on many websites to give you as visitor access to various features like logging in and remembering what you did the last time you visited the site. On this website, we are using cookies to improve your user experience. You can disable cookies by adjusting the settings of your browser.

Google Analytics

This website uses Google Analytics, a web analytics service provided by Google, Inc. (“Google”). Google Analytics uses “cookies”, which are text files placed on your computer, to help the website analyze how users use the site. The information generated by the cookie about your use of the website will be transmitted to and stored by Google on servers in the United States.

In case IP-anonymization is activated on this website, your IP address will be truncated within the area of Member States of the European Union or other parties to the Agreement on the European Economic Area. Only in exceptional cases the whole IP address will be first transferred to a Google server in the USA and truncated there. The IP-anonymization is active on this website.

Google will use this information on behalf of the operator of this website for the purpose of evaluating your use of the website, compiling reports on website activity for website operators and providing them other services relating to website activity and internet usage.

The IP-address, that your Browser conveys within the scope of Google Analytics, will not be associated with any other data held by Google. You may refuse the use of cookies by selecting the appropriate settings on your browser, however please note that if you do this you may not be able to use the full functionality of this website. You can also opt-out from being tracked by Google Analytics with effect for the future by downloading and installing Google Analytics Opt-out Browser Add-on for your current web browser:

For survey respondents

Types of personally identifiable information being processed

Whenever we at Norstat approach people regarding a survey, we process some personal information (such as e-mail address or phone number, name, age and zip code). The personal information we use to get in touch with respondent is normally either publicly available data from public registers, or lists of customers or users from the client we are collecting the survey data on behalf of – for instance when we are doing customer or employee satisfaction surveys or user experience research.

For members of the Norstatpanel, separate terms and conditions and privacy policy applies.

Purpose of the processing

We process your contact information in order to be able to approach you for participation in the surveys and opinion polls we conduct. Information you give us as part of responding to the survey, will be combined with answers from other respondents, and conveyed to our clients in aggregate form only, for statistical use.

Basis of the data processing

Contact information is used to be able to get in touch with you for survey participation purposes. Market and opinion polls are a legitimate interest, because the data collected is an important basis for decision making for our clients, which range from government bodies, institutions and organizations of all kinds.

While we contact you based on a legitimate interest, participation in our surveys is always voluntary, and data collected from you in our surveys is collected on the basis of consent. You have the right to withdraw consent for processing your personal data at any time.

Sharing information with third parties

Norstat will never share, sell, transfer or in other ways exchange your personally identifiable information with a third party without collecting your explicit consent for this beforehand.

Deletion of data

Information that we process in connection with our surveys is stored in our systems for six months after the data collection is completed. After that, all personally identifiable information will automatically be deleted.

Information security

We always safeguard your personal information using both physical and virtual access control, and encrypting sensitive parts of any information you give us. Norstat AS has an internal control system for IT security that has been approved according to the ISAE3000 assurance standard.

We also comply with the Esomar International Code on Market, Opinion and Social Research and Data Analytics, and are certified on the ISO9001:2015 quality standard.

Your rights as a data subject

We process your personal information in accordance with applicable privacy legislation and the GDPR. You have the right to see what personal data we have stored about you, to have your information amended or deleted, and to withdraw your consent to the processing of your personal information, at any time.

Data Protection Officer

Norstat has a Data Protection Officer, who is responsible for ensuring that the legislation is being followed. They can be contacted at dpo[at] with any questions or concerns you may have.