Legal

Privacy policy

This notice explains what personal data we collect when you visit aiutotech.ai, why we collect it, and what you can ask us to do about it. It is written to be read by anyone, not only by lawyers.

Last updated: 16 August 2026

This notice covers this website only. The AIUTO platform's processing of patient health data will be governed by a separate, more detailed notice published at launch.

1. Who is responsible for your data

AIUTO Tech AS (org. nr. 938046859), Norway, is the data controller for personal data processed through this website. You can reach us at erik@aiutotech.ai. A data protection officer is to be appointed; until then, privacy enquiries go to the same address.

2. What we collect, and why

  • Contact enquiries. If you email us or submit a contact form, we process your name, email address and whatever you write to us. Legal basis: our legitimate interest in responding to enquiries (GDPR Art. 6(1)(f)), or steps prior to entering a contract (Art. 6(1)(b)).
  • Analytics. With your consent we use analytics cookies to understand which pages are read. Legal basis: consent (Art. 6(1)(a)), which you may withdraw at any time via our cookie policy.
  • Security and delivery logs. Our hosting and CDN providers process IP addresses and request metadata to serve the site and block abuse. Legal basis: legitimate interest in a secure, available website (Art. 6(1)(f)).

We do not collect special categories of data (including health data) through this website.

3. How long we keep it

  • Contact enquiries: up to 24 months after the last message, unless a business relationship continues.
  • Analytics data: up to 14 months in aggregated form.
  • Security and delivery logs: typically up to 30 days, as set by our providers.

4. Who else sees it

We share data only with processors acting on our instructions: our website hosting and CDN provider, our email provider, and our analytics provider. They may not use your data for their own purposes. We do not sell personal data.

5. Transfers outside the EEA

Some providers may process data outside the EEA. Where that happens we rely on the European Commission's Standard Contractual Clauses or an adequacy decision, together with supplementary technical measures. You can ask us for a copy of the relevant safeguards.

6. Your rights

Under GDPR Articles 15–22 you have the right to:

  • Access the personal data we hold about you (Art. 15).
  • Have inaccurate data corrected (Art. 16).
  • Have data erased (Art. 17).
  • Restrict processing (Art. 18).
  • Be told when we correct or erase data we shared (Art. 19).
  • Receive your data in a portable, machine-readable format (Art. 20).
  • Object to processing based on legitimate interest (Art. 21).
  • Not be subject to solely automated decisions with legal effect (Art. 22). We make none.

To exercise any of these, email erik@aiutotech.ai. We answer within one month.

7. Complaints

If you believe we have handled your data wrongly, you can complain to the Norwegian Data Protection Authority: Datatilsynet, Postboks 458 Sentrum, 0105 Oslo, Norway · postkasse@datatilsynet.no · +47 22 39 69 00 · datatilsynet.no.