This is an English translation for convenience. The Norwegian version is the legally binding one.
1. Who we are
GetDriv AS is a creative agency focused on content production, social media advertising and digital strategy. We are the data controller for personal data collected through our website and our services.
Contact information:
GetDriv AS
Company reg. no.: 937 452 985
Slettaveien 21, 1553 Son
Email: hei@driv.no
2. What personal data we collect
We may collect the following types of personal data:
- Contact information: Name, email address and phone number when you contact us
- Technical information: IP address, browser type, operating system and similar technical data
- Usage data: Information about how you use our website
- Communication: The content of emails and other enquiries you send us
3. How we use personal data
We use your personal data for the following purposes:
- Responding to enquiries and communicating with you
- Delivering our services and fulfilling agreements
- Improving the website and the user experience
- Sending relevant information about our services (only with your consent)
- Complying with legal obligations
4. Legal basis
We process personal data on the following legal bases:
- Consent: When you have actively given us your permission
- Contract: When the processing is necessary to perform a contract with you
- Legitimate interest: When we have a legitimate interest that does not come at the expense of your rights
5. Cookies and tracking
Without your consent, the website uses only necessary cookies. Analytics and marketing tools that use cookies are loaded only once you have chosen “Accept all” in the consent banner. You can change your choice at any time via the “Cookies” link at the bottom of the page.
With your consent, we use:
- Analytics: Google Analytics and Microsoft Clarity, to understand how the website is used
- Marketing: Google Ads, Meta Pixel and Meta Conversions API, as well as Snapchat Conversions API, to measure the effectiveness of our ads
Without consent, we count visits with Vercel Web Analytics. The tool uses no cookies and stores nothing in your browser, and we cannot see who you are. It only records which pages are visited, where the visit comes from, the country, and the type of device and browser. The legal basis is our legitimate interest in understanding how the website is used.
Google Analytics and Google Ads use Google Consent Mode. Without consent, they neither set nor read cookies, but send anonymous signals without cookies (for example that a page was viewed or a form submitted) to Google. Google uses them only to estimate aggregate numbers of visits and conversions and cannot link them to you. The legal basis is our legitimate interest in measuring the effectiveness of the website and our ads.
Embedded videos from YouTube and TikTok are loaded only when you click on them yourself. The map on the contact page is loaded from Google Maps, so Google receives your IP address when you visit that page.
6. The contact form and “Be a guest”
When you submit the contact form or the form to be a guest on our podcast Bak Drivet, we store what you fill in and choose in the form: your name, your email address and anything else you provide, such as your company, phone number, website, LinkedIn profile, what you need help with and what you write about your project or topic. We also store which page and language the form was sent from, and where you came from (for example an ad). We use this information to reply to you and follow up on your enquiry. The legal basis is our legitimate interest in responding to enquiries. If you ask for a quote, the processing is also necessary to take steps towards an agreement with you.
The information is stored with Supabase in the EU (Frankfurt), and only Driv’s employees have access to it. We keep it for up to three years after our last contact with you, or until you ask us to delete it.
The website and its forms are hosted by Vercel, and what you submit is processed on Vercel’s servers in the EU (Frankfurt). Our team receives your enquiry by email, sent with Resend from the US. Vercel and Resend are US companies and are certified under the EU–US Data Privacy Framework.
7. Driv Score
When you take Driv Score at driv.no/score, we store your name, company, email address and phone number from the form, your answers, how long you spent on each question and where you came from (for example an ad). We use this information to give you your result and to contact you about it. The legal basis is the consent you give when you submit the form.
Your result gets its own link, which works for 12 months. Anyone with the link can see the result, so only share it with people you want to see it. We record when and how many times the link is opened.
The information is stored with Supabase in the EU (Frankfurt), and only Driv’s employees have access to it. We keep it for up to three years after our last contact with you, or until you ask us to delete it.
Your answers are processed in the same way as the forms in section 6: on Vercel’s servers in the EU (Frankfurt), and our team is notified of new answers by email, sent with Resend from the US.
If you pick your company from the list in the form, we fetch public information about it from the Brønnøysund Register Centre: the organisation number, industry, number of employees, website and last year’s revenue. We use it to suggest answers to the questions about industry and revenue, and store it together with your answers.
While you answer the questions, we also look at what the company itself has made public: its website and which social media accounts it links to. We only use the website when we are sure it belongs to the company: it is listed in the Brønnøysund Register Centre, or the organisation number appears on the website at the domain in your email address (for example firma.no). We only look at the company’s own pages, we do not fetch anything from its social media accounts, and we do not look for information about you or other people. A language model from OpenAI reads the text on the website to say briefly what the company offers and to whom. The findings are stored together with your answers.
The assessment, the texts on Berører, Treffer and Leverer and the actions on the result page are written by a language model from OpenAI, based on your answers and what we found about the company. The model receives your answers, including what you write yourself about your challenge, and the findings about the company, but never the contact details you enter in the form (name, email and phone number). The answers, the findings and the text from the website are sent via Vercel AI Gateway, and neither Vercel nor OpenAI keeps them after the text has been written or uses them to train models. Vercel and OpenAI are US companies. The text is stored together with your result.
Before our team contacts you, the same language model suggests three questions the team can ask you, based on your answers (including what you wrote about your challenge) and the findings about the company, on the same terms as above (never your contact details, and nothing kept by Vercel or OpenAI), and the suggestions are stored together with your answers.
8. Surveys
When you answer a survey from us on driv.no (for example about a client portal), we store your answers, when you answered, how long you took and where you got the link from (for example email or LinkedIn). You answer anonymously: we do not ask who you are, and we do not store your IP address. We use the answers only for what the survey is about.
If you agree that we may contact you, we also store your name, email address, phone number and, if you provide it, your company, and use them only to arrange a chat about the topic of the survey. Our team is notified by email, sent with Resend from the US. The legal basis for the answers is our legitimate interest in developing our services, and for your contact details your consent, which you can withdraw at any time.
The answers are stored with Supabase in the EU (Frankfurt) and processed on Vercel’s servers in the EU (Frankfurt), like the forms in section 6. Only Driv’s employees have access to them. We keep the answers for up to 12 months. If you left your contact details, you can ask us at any time to delete them and your answers.
9. The client portal
If you are a contact person at one of our clients and have been given access to the client portal at kunde.driv.no, we store your name, your email address, which company you belong to and your role in the portal. We also store who at Driv invited you and when, when you first logged in and when you last visited, and which productions you have opened and when. We use this to give you access, and to see that what we publish reaches you. The legal basis is our legitimate interest in giving our clients’ contact persons insight into what we deliver, as part of the agreement with your company.
You log in with a one-time code that we send to your email address, so we do not store a password. The portal uses only the cookies needed for logging in, and no analytics or marketing tools. To prevent misuse of the login, we store for up to 24 hours an encoded version of the email address and IP address that requested a code. It cannot be turned back into the addresses.
In the portal you see what concerns your company: the productions with their status and files, weekly reports, the agreement and the invoices. We fetch the status from our project tool (Notion) and the invoices from our accounting system (Tripletex). The films are hosted by Frame.io, and the links in the portal take you there. We send you emails with login codes and the invitation, and with weekly reports and notice that a production has been delivered when your company receives those. You can turn the weekly report email off and on yourself in the portal, and we store your choice.
The data is stored with Supabase in the EU (Frankfurt), and the portal is hosted by Vercel on servers in the EU (Frankfurt). The emails are sent with Resend from the US. Vercel and Resend are US companies and are certified under the EU–US Data Privacy Framework. Only Driv’s employees can see the data about you. What is in the portal for your company can only be seen by those of you who have been given access, and the agreement and the invoices only by those with the owner role.
You or your company can ask us at any time to remove your access and delete the data about you. In any case, we delete it no later than 12 months after the client relationship has ended. We keep the invoices in our accounts for as long as the Norwegian Bookkeeping Act requires.
10. Sharing of personal data
We do not sell your personal data. We may share information with:
- Service providers who help us operate the website
- Partners who perform services on our behalf
- Public authorities when required by law
11. Your rights
Under the GDPR, you have the following rights:
- Access: You can request a copy of the personal data we hold about you
- Rectification: You can request that inaccurate data be corrected
- Erasure: You can request that your data be erased
- Restriction: You can request that the processing be restricted
- Data portability: You can request to receive your data
- Objection: You can object to certain types of processing
To exercise these rights, contact us at hei@driv.no.
12. Security
We take the security of your personal data seriously and have implemented appropriate technical and organisational measures to protect the data against unauthorised access, alteration, disclosure or deletion.
13. Retention
We retain personal data only for as long as is necessary for the purpose for which it was collected, or for as long as we are required to by law.
14. Changes
We may update this privacy policy from time to time. Material changes will be communicated on our website.
15. Contact and complaints
If you have any questions about how we process personal data, contact us at hei@driv.no.
You also have the right to lodge a complaint with the Norwegian Data Protection Authority (Datatilsynet) if you believe that the processing of your personal data does not comply with the applicable rules. You can find more information at datatilsynet.no.