Last updated: 16 September 2026
This policy explains what personal data NorBAN – Norwegian Business Angel Network processes, why, on what legal basis, who else processes it, and what rights you have.
Who is responsible
The data controller is NorBAN – Norwegian Business Angel Network, organisation number 917 081 581.
Questions about privacy, and all requests to exercise your rights: [email protected]
What we process and why
Members
Data: name, email, mobile phone, postal address, LinkedIn profile, investor type, company or investment vehicle, job title, other angel network memberships, gender (optional), username and password, membership level, membership dates and payment status.
Legal basis: the membership agreement between you and NorBAN (GDPR Art. 6(1)(b)).
Purpose: to administer your membership, communicate with you as a member, handle payments, and give you access to member services such as events, including members-only events.
Newsletter: as a member you receive our newsletter about NorBAN’s activities and membership benefits. This is based on our legitimate interest in keeping members informed (Art. 6(1)(f)). Every newsletter has an unsubscribe link.
Slack: members may receive an optional invitation to NorBAN’s Slack workspace. To send it, we give Slack your name and email. If you accept, you register directly with Slack, Slack’s own privacy policy applies to your Slack account, and other members in the workspace can see your profile and messages. NorBAN decides who has access to the workspace.
When your membership ends: we keep your name, email and membership history, and you keep receiving our newsletter, until you unsubscribe or ask us to delete your data. This is based on our legitimate interest in keeping former members informed about the network. You can object at any time. Payment records are kept for as long as Norwegian accounting law requires.
Knowledge base readers
Data: name, email, and when you registered.
Legal basis: our agreement to give you access to the knowledge base (Art. 6(1)(b)).
Purpose: to give you access to knowledge base articles and to manage your registration.
Newsletter: if you tick the newsletter box when registering, we send you our newsletter based on your consent (Art. 6(1)(a)). This is optional. You get the same access to articles whether or not you tick it, and you can unsubscribe at any time without losing access.
Retention: we keep your registration until you ask us to delete it.
Startups and other form submissions
Data: contact person’s name, email, phone, role, company, and the business information you provide.
Legal basis: your consent, given in the form (Art. 6(1)(a)). For submissions by email, our legitimate interest in answering you (Art. 6(1)(f)).
Purpose: to assess your company and present it to funding opportunities, dealflow sessions and other relevant services. Your submission is shared with NorBAN’s investor members and partners, who may contact you by phone or email about opportunities relevant to your submission.
Form service in the USA: our startup submission form runs on Fillout, a form service provided by Restly, Inc. in the United States. Answers are stored on Fillout’s servers in the USA. NorBAN has no data processing agreement with Fillout, and the United States does not offer the same level of data protection as Norway and the EU/EEA. US authorities may be able to access the data, and your rights may be harder to enforce there. Your data is stored there only if you explicitly consent to this in the form (Art. 49(1)(a)). If you prefer not to, you can email your submission to [email protected] instead, and we will handle it without Fillout.
Newsletter: if you tick the newsletter box in the form, we send you our newsletter based on your consent. You can unsubscribe at any time.
Retention: we keep your submission until you withdraw your consent or ask us to delete it, so that we can present relevant opportunities to you. When you ask, we also delete it from Fillout.
Enquiries
Data: name, email, phone and anything else included in your enquiry.
Legal basis: our legitimate interest in answering you (Art. 6(1)(f)).
Retention: for as long as we need to handle the enquiry.
Use of our website
We use only the cookies needed for the website to work: keeping you logged in, controlling access to member content, remembering that you have registered for the knowledge base, and protecting the site against misuse. These cookies are strictly necessary, so they are used without asking for consent (Electronic Communications Act § 3-15). We do not use cookies for analytics, advertising or tracking.
Our website is delivered through Cloudflare, which processes your IP address and the requests your browser sends in order to deliver pages securely.
Who processes your data
We use the following service providers. Each processes only the data needed for its task.
| Service | What for | Data | Role | Location and safeguard |
|---|---|---|---|---|
| Webhuset (hosting our website, including MemberPress) | Website, membership registration and access | Membership and reader data, form submissions made on our website | Processor | Norway |
| Stripe | Membership payments | Name, email, payment data | Processor | Stripe Payments Europe Ltd, Ireland. Transfers within the Stripe group: EU–US Data Privacy Framework and Standard Contractual Clauses |
| HubSpot | Register of members, former members, knowledge base readers, subscribers and contacts; newsletters | Name, email, phone, company, membership status and history, newsletter status | Processor | Stored in the EU. HubSpot, Inc. (USA): EU–US Data Privacy Framework and Standard Contractual Clauses |
| Luma | Event registration, including members-only events | Name, email, member status | Processor | USA. Standard Contractual Clauses |
| Slack | Members’ workspace, invitation only and optional | Name and email for the invitation; profile and messages if you join | Processor for NorBAN’s workspace; Slack is responsible for your own Slack account | USA. EU–US Data Privacy Framework and Standard Contractual Clauses |
| Fillout | Startup submission form | Everything you enter in the form | Service provider | USA (Restly, Inc.). No data processing agreement or EU transfer safeguard. Used only with your explicit consent; you can email your submission instead |
| Cloudflare | Website security and delivery | IP address, browser data and requests to the website | Processor | Global network; Cloudflare, Inc. (USA). EU–US Data Privacy Framework and Standard Contractual Clauses |
| Google Workspace | NorBAN’s email, documents and administration | Anything you send to NorBAN or that we store about you | Processor | Google Cloud EMEA Ltd, Ireland. EU–US Data Privacy Framework and Standard Contractual Clauses |
Transfers outside the EU/EEA. Some providers are established in the USA. Except for Fillout, where we rely on your explicit consent, these transfers are covered by the EU–US Data Privacy Framework or the European Commission’s Standard Contractual Clauses. You can ask us for information about the safeguards that apply.
We do not sell your data, and we do not share it with anyone other than the recipients described in this policy unless the law requires us to.
Your rights
You have the right to access, correct and delete your personal data, to restrict or object to its processing, and to data portability. Where processing is based on consent, you can withdraw it at any time. This does not affect processing that took place before you withdrew it.
When you ask us to delete your data, we also delete it from the services listed above, unless the law requires us to keep it.
Send requests to [email protected]. We may ask you to confirm your identity first, so that we only give your data to you. We reply without undue delay and within one month at the latest.
Read more about your rights at datatilsynet.no.
Complaints
If you believe we process your personal data in breach of this policy or the law, you can complain to the Norwegian Data Protection Authority (Datatilsynet). Contact details are at datatilsynet.no.
Changes
We update this policy when our services or the rules change. The date at the top shows the latest version. If we have your contact details and the change is significant, we will let you know.