1. About Leasi and this policy
Leasi AS (org. no. 929 534 603) is the data controller for personal data processed via our websites, our product and our business processes. This policy explains what data we collect, why we collect it, how we use it, and what rights you have as a registered individual.
If you have questions about this policy or your personal data, contact us at hei@leasi.no.
2. What personal data we process
We process the following categories of personal data:
- Contact information such as name, job title, company, email and phone number - typically from demo requests, contact requests and contracts.
- User account information in the Leasi application, including logins, roles, access rights and audit logs.
- Operational data that technicians and administrators register in connection with work orders, maintenance and operations.
- Technical data such as IP address, browser information and event logs when you use our websites or applications.
- Marketing data such as consents, email open status and usage patterns from any newsletters or campaigns you've opted into.
3. Purposes and legal basis
We process personal data for the following purposes:
- Delivering and improving our product - legal basis is contract (GDPR art. 6(1)(b)) or legitimate interest (art. 6(1)(f)) for improvement purposes.
- Following up sales and contact requests - legitimate interest, possibly consent.
- Sending newsletters and product updates - based on consent (art. 6(1)(a)).
- Meeting legal requirements - legal obligation (art. 6(1)(c)), e.g., bookkeeping and reporting.
- Securing operations and preventing abuse - legitimate interest.
4. Storage and location
Personal data and operational data from the Leasi application are stored in EU/EEA at our data processors (Microsoft Azure and/or Amazon Web Services in European data centers). We do not transfer personal data outside EU/EEA without lawful basis such as standard contractual clauses.
5. Retention
Personal data is retained as long as needed for the purpose. Sales-process contact information is deleted or anonymized after 24 months without activity. User account information is deleted after the customer relationship ends, provided no statutory retention obligation exists. Bookkeeping data is retained per Norwegian law (typically 5 years).
6. Recipients and processors
We share personal data with selected processors that provide infrastructure and tools we use to run the product. This includes cloud, email, CRM, support and analytics providers. All processors have signed a Data Processing Agreement with Leasi.
We never sell personal data to third parties.
7. Your rights
As a registered individual you have the following rights:
- Access to the personal data we hold about you.
- Rectification of inaccurate data.
- Erasure (right to be forgotten) - where the legal basis allows.
- Restriction of processing.
- Data portability - request your data in a machine-readable format.
- Object to processing based on legitimate interest.
- Withdraw consent where processing is based on consent.
Requests can be sent to hei@leasi.no. We typically respond within 30 days. You also have the right to lodge a complaint with the Norwegian Data Protection Authority (Datatilsynet).
8. Cookies
The leasi.io website uses technical cookies necessary for basic operation, plus a minimum of analytics tooling to understand site usage. We don't use third-party advertising cookies.
9. Changes
We may update this policy when our processing of personal data changes. The last-updated date is at the top. For material changes, we notify active customers directly.
10. Contact
Leasi AS
Pilestredet 17, 0164 Oslo, Norway
Org. no. 929 534 603 MVA
Email: hei@leasi.no