Privacy Policy

1. Who is responsible

Gravityrock AS, organisation number 937 920 482, Kydnahagen 1, 4310 Hommersåk, Norway, is the controller of your personal data. Contact: support@jobsnorway.no.

2. What we collect

• Contact and order data: name, email address, payment confirmation. Card and PayPal details are handled by the payment providers and are not stored by us.
• Assessment data: citizenship(s), country of residence, current legal status and permits, education, work experience, languages, employment goals, and documents you upload, such as your CV and diploma.
• Communication: messages between you and us.
• Technical data: limited data needed to run and secure the website.

We collect only what is necessary. We do not routinely ask for your home address, passport copies or other identity documents. Information about citizenship and residence status can indirectly reveal sensitive information. We treat it with particular care and use it only to produce your assessment.

3. Why we use your data, and our legal basis

• To deliver the assessment you ordered (performance of a contract).
• To meet legal obligations such as bookkeeping and tax rules.
• To keep the service secure, prevent fraud and handle complaints (legitimate interests).
• Where the law requires it, for example for sensitive information, with your explicit consent.

We do not use your data for marketing to employers, and we never sell it.

4. Who receives your data

Only service providers that help us run the service, under data processing agreements: payment providers (Stripe, PayPal), our questionnaire and file-upload provider (Tally), hosting, email, and software or AI vendors. AI vendors may not train their models on your data. We never share, sell or forward your profile to employers, recruiters or other intermediaries. We disclose data to authorities only when required by law.

5. Transfers outside the EEA

If a provider processes data outside the EEA, we ensure a valid transfer mechanism and appropriate safeguards.

6. How long we keep your data

CVs, uploaded documents and your questionnaire answers are deleted 30 days after we deliver your report. This applies to all copies we hold, including with our service providers. The 30 days give you time to ask follow-up questions or report an error in the report. If a complaint or legal claim is open, we keep the data only for as long as that requires.

Transaction and accounting records (such as payment confirmations and invoices) are kept for the period required by law, and are not deleted after 30 days. You may ask us to delete your data earlier, see section 7.

7. Your rights

You may request access to, correction or deletion of your data, restriction or objection to processing, and a copy of your data. Where processing is based on consent, you may withdraw it at any time. Contact us at support@jobsnorway.no. You may also complain to the Norwegian Data Protection Authority (Datatilsynet) or to the authority in your country.

8. Security

We use secure upload, limit access to those who need it, and minimise the data we collect.

9. Changes

We may update this policy and will state the date of the latest update above.