Privacy policy.

Who we are

Skarya Tech (“we”) operates skarya.tech and is the data controller for personal data collected through this website. You can reach us at support@skarya.tech.

What we collect

• Contact form: when you submit the form we store your name, email address, optional company name, chosen topic, your message, your IP address and browser identifier (for abuse prevention), and the time of submission. The same information is sent to our inbox.
• Server logs: our web server keeps standard access logs (IP address, requested URL, time, browser identifier) for security and troubleshooting. Logs are rotated and deleted automatically.
• Statistics and ad measurement: with your consent, this site uses Google Analytics 4 (usage statistics), the TikTok pixel and Microsoft Advertising UET (measuring whether ads lead to visits and purchases). Which cookies they set, and how you choose, is described under "Cookies and consent" below.

Cookies and consent

The first time you visit skarya.tech you get a choice at the bottom of the page: "Accept all" or "Only necessary". Your choice is stored in the cookie skarya_consent for 12 months. You can change it at any time via the "Cookies" link at the bottom of every page.

Necessary cookies do not require consent. We use them for sign-in, the shopping cart, language choice and abuse prevention. They are set by us and not shared with anyone.

If you choose "Accept all", these are set as well:

• Google Analytics 4: _ga and _ga_* (distinguishes visitors, up to 2 years). Used for usage statistics.
• TikTok pixel: _ttp and _tt_enable_cookie (up to 13 months). Used to measure whether ads on TikTok lead to visits and purchases.
• Microsoft Advertising (UET): _uetsid (1 day), _uetvid (13 months) and _uetmsclkid (90 days). Used to measure whether ads on Bing lead to visits and purchases. The UET tag also loads Microsoft Clarity (_clck for 12 months and _clsk for 1 day), which gives us anonymised statistics on how the pages are used.

What happens without consent

If you choose "Only necessary", none of the cookies above are set. The scripts run in consent mode: Google Analytics and Microsoft Advertising set no cookies and receive only anonymous, aggregated signals, and the TikTok pixel is held back entirely. Events such as purchases and submitted contact forms are then sent without any data that can be linked to you.

The legal basis for statistics and advertising cookies is your consent (the Norwegian Electronic Communications Act section 3-15 and GDPR article 6(1)(a)). You withdraw it by choosing "Only necessary".

Signing in with Vipps

When you sign in with Vipps, we receive your name, email address and phone number from Vipps, along with a persistent identifier that lets us recognise you on later sign-ins. We never ask for your national identity number.

We use this only to connect your sign-in to your customer relationship and to show you your own services. It is not shared further.

If you withdraw your consent in Vipps, we automatically disconnect the sign-in and delete the data we received from them. Your customer relationship and billing details remain, as we are required to keep those.

The legal basis is our contract with you (GDPR article 6(1)(b)).

What we don't do

• We never sell or share personal data with third parties for marketing.
• We don't profile you or make automated decisions.
• We use no statistics or advertising cookies until you have accepted them in the choice at the bottom of the page.

Why we process your data

Contact form data is processed to answer your enquiry and follow up on potential orders (GDPR Art. 6(1)(b) and (f)). Server logs are processed for security (Art. 6(1)(f)). Usage statistics and ad measurement are processed on the basis of your consent (Art. 6(1)(a)), see the section on cookies.

How long we keep it

Contact form messages are kept for up to 24 months after the dialogue ends, then deleted. If you become a customer, relevant correspondence is kept as part of the customer relationship and accounting records for as long as the law requires.

Where your data lives

Form data and logs are stored on our own servers in EU data centres and do not leave the EU/EEA. Statistics and advertising data is processed by Google, TikTok and Microsoft under their terms, and may be transferred outside the EEA on the basis of the EU standard contractual clauses or equivalent safeguards.

Your rights

Under the GDPR you can request access to, correction of, or deletion of your personal data, and object to or restrict our processing. Email support@skarya.tech and we'll sort it out, normally within a few days. You also have the right to complain to the Norwegian Data Protection Authority (Datatilsynet).

Changes

If we change this policy, for example if we adopt new tools, we will update this page and the date above before the change takes effect.