Privacy Policy

How we handle your data.

Draft v1.0 — Last updated: 19 May 2026

⚠️ Draft. Pending review by OTD's legal counsel before production launch. The visitor-registration system on this site processes data according to the principles below; exact wording, retention periods, and processor list will be finalised in v1.0 final.

OTD AS ("we", "us") is the data controller for personal data processed in connection with OTD TechDays 2026 and the offshoredays.com website. This policy describes what data we collect, why, and your rights under the Norwegian Personal Data Act (personopplysningsloven) and the GDPR.

For privacy enquiries: personvern@otdenergy.com.

1. What data we collect

Visitor registration: first name, last name, work email, company name, job title, and your involvement in purchasing decisions.

Badge usage: when an exhibitor scans your QR code at the event, we record that scan event (which exhibitor, when).

Account activity: when you last logged in or interacted with your badge page.

Marketing consent: if you opt in, we record that consent with timestamp.

Booking and enquiry data: name, email, phone, company, enquiry details (only when you submit a form).

Website analytics: standard analytics (pages viewed, referrer, approximate location from IP). No personal identification unless you log in.

2. Why we process it (lawful basis)

  • Event access (badge): GDPR Art. 6(1)(b) Contract
  • Exhibitor lead scanning: Art. 6(1)(f) Legitimate interest — see §3
  • Marketing emails about future events: Art. 6(1)(a) Consent (separate opt-in)
  • Accounting (paid add-ons): Art. 6(1)(c) Legal obligation (Norwegian Bookkeeping Act §13)
  • Audit log: Art. 6(1)(c) Legal obligation

3. Lead scanning at the event

Your badge contains a QR code with your contact information. When an exhibitor at OTD TechDays scans your badge, your name, email, and company are shared with that exhibitor. This is how leads are exchanged at B2B events — it is how the event works.

You can opt out at any time: on your badge page, toggle "Exhibitor scan-sharing" off. After that, exhibitors who scan your badge see "Anonymous visitor" instead of your contact info. Leads collected before you opted out remain with the exhibitor (they had lawful basis at the moment of the scan).

4. Who we share data with (processors)

  • Supabase — database, authentication, edge functions. EU-hosted (Stockholm).
  • Resend — transactional email delivery. EU region.
  • Vercel — web hosting.
  • Tripletex — invoicing (only for paid add-ons).
  • HubSpot — CRM (only for OTD's internal sales pipeline).

All processors are bound by data processing agreements. We do not sell or rent your data.

Exhibitors who scan your badge become independent data controllers for the personal data they receive. Their processing of your data after the event is governed by their own privacy policies.

5. How long we keep it

  • Visitor profile: retained while your account is active. After 18 months of inactivity we send a reminder email; if you don't respond within 30 days, the account is automatically anonymised.
  • Lead data: 36 months after the event, then automatically anonymised.
  • Marketing consent records: until you withdraw consent.
  • Audit log: 7 years.
  • Financial records (invoices): 5 years per the Norwegian Bookkeeping Act §13.

6. Your rights

Under GDPR you have the right to:

  • Access your data — "Download my data (JSON)" button on your badge page
  • Rectification — edit your profile on your badge page
  • Erasure — "Delete my account" button on your badge page
  • Restrict processing — toggle scan-sharing off
  • Portability — JSON export covers this
  • Object to processing — email personvern@otdenergy.com
  • Withdraw consent for marketing — toggle on badge page
  • Lodge a complaint with Datatilsynet (the Norwegian Data Protection Authority)

7. Age limit

This is a B2B event. We do not knowingly process data for users under 16 years of age. If you believe a minor has registered, contact us at personvern@otdenergy.com.

8. International data transfers

Most of your data is stored in the EU (Supabase Stockholm). HubSpot is US-based — transfers to the US are protected under Standard Contractual Clauses (SCCs).

9. How to contact us

For privacy enquiries, email personvern@otdenergy.com or write to OTD AS, Stavanger, Norway.

10. Changes to this policy

We may update this policy. The "Last updated" date in the header reflects the most recent change. Material changes will be communicated by email to registered visitors.