Privacy notice · version 0.1
How we handle personal data
Who is responsible
Bridge Energy and Maritime Investment Partner AS, organisation number 938 234 582, Stord, Norway. Contact for privacy questions: steven@bridgeemip.com.
What we collect, and from where
- From you, when you enquire: name, business email, organisation, port or terminal, your key question and, optionally, your role and a short message.
- From invited client users: name, email and sign-in details needed to give secure workspace access.
- Business contact details your colleagues share with us in the course of a project.
- For abuse prevention: a short-lived pseudonymous value derived from your connection, deleted within about a day. Our hosting providers may also process technical connection and security logs, such as IP addresses.
We don’t ask for sensitive personal data, and the enquiry form doesn’t accept files.
Why we use it, and our legal basis
- Replying to your enquiry and discussing a possible engagement — our legitimate interest in responding to business contacts. No consent is needed for us to reply.
- Delivering an agreed engagement and client workspace — our legitimate interest in working with your organisation's named contacts. Performance of a contract applies only where you are personally a party to that contract.
- Security, record-keeping and legal obligations — legitimate interest and legal obligation.
- Occasional updates — only if you separately tick the optional box. You can withdraw at any time. Updates are not currently being sent.
Port and project data is different
Operational and design datasets can contain personal data. Where Bridge determines its use, this notice applies to that personal data; where Bridge processes it on a customer's instructions, the engagement's data-processing terms apply. Confidentiality, ownership and any commercial reuse of project datasets are set separately in the engagement agreement. In outline:
- Port operational data is used to produce your organisation’s reports.
- Vessel energy data is used for your analysis, and to improve the accuracy of our general model only where the agreement and the data rights allow it.
- Port design information is used for your project work.
This notice does not grant us any right to reuse your organisation’s data or to use it in marketing.
Who receives it
Authorised BRIDGE staff only. Service providers process data on our behalf to host the website, database and sign-in, and to store project files. We plan to use Microsoft 365 for project file storage. We don’t sell data or use advertising or analytics networks. Provider details are being finalised and will be listed here.
Transfers outside the EEA
Our main database is hosted in the EU (Stockholm). Some providers may process limited data, such as security logs, outside the EEA. Service-specific locations and applicable transfer safeguards remain under review; this notice does not confirm that all processing stays in the EEA. Provider and transfer details will be updated when confirmed.
How long we keep it
Only as long as needed for the purpose: enquiries while a conversation is active, and then reviewed periodically; client contacts for the engagement and any follow-up period the agreement requires; records we must keep by law for the legal period. Abuse-prevention values are deleted within about a day. We review stored records regularly and delete what is no longer needed.
Your rights
You can ask for access, a copy, correction or deletion, and you can object to or restrict our use of your data. Email steven@bridgeemip.com. You can also complain to Datatilsynet, the Norwegian Data Protection Authority (datatilsynet.no).
Cookies
No tracking or advertising cookies. See the cookies page.