Privacy Policy

This Privacy Policy explains how Mazeppa Group ("Mazeppa", "we", "us") collects and processes personal data when you visit mazeppagroup.com, contact us through our forms, or otherwise interact with us. We are committed to handling your data lawfully, transparently, and in line with the EU General Data Protection Regulation (GDPR) and the Norwegian Personal Data Act (personopplysningsloven).

1. Who is responsible for your data
The data controller for the personal data processed through this website is:
Mazeppa Norge AS [Registered address] Org. no.: 913245113 Email: post@mazeppagroup.com
If you have questions about this policy or how we process your data, contact us at the email address above.

2. What personal data we collect
Information you give us directly. When you submit a form on our site (for example, a contact or "start a conversation" request), we collect the details you provide. This typically includes:

Your name
Your work email address
Your organisation
Any message or information you choose to include
Information collected automatically. When you browse the site, we and our analytics providers collect technical and usage data, such as:

IP address (often truncated or anonymised by our analytics tools)
Device, browser, and operating system information
Pages visited, links clicked, time on page, and referring source
Approximate location derived from IP address
We do not knowingly collect special categories of personal data (such as health or political data) through this website, and we ask that you do not submit such information through our forms.

3. How we use your data and our legal basis
PurposePersonal dataLegal basis (GDPR)Responding to your inquiries and contact requestsName, email, organisation, messageLegitimate interest (Art. 6(1)(f)); or steps prior to entering a contract (Art. 6(1)(b)) where relevantManaging leads and sales follow-up in our CRMName, email, organisation, messageLegitimate interest (Art. 6(1)(f))Understanding and improving how the site is used (analytics)Usage and device dataConsent (Art. 6(1)(a))Maintaining the security and integrity of the siteTechnical dataLegitimate interest (Art. 6(1)(f))
Where we rely on consent — for example, for non-essential analytics cookies — you can withdraw it at any time (see Section 8).

4. Cookies and analytics
We use cookies and similar technologies to operate the site and, with your consent, to measure how it is used. You can manage your preferences through our cookie banner and your browser settings. Declining non-essential cookies will not affect your ability to use the site.
We use the following analytics tools:

Google Analytics 4 (GA4) — provided by Google. GA4 helps us understand site traffic and visitor behaviour in aggregate. IP addresses are not stored by GA4 in identifiable form. See Google's privacy information at policies.google.com/privacy.
Analytics tools are loaded only after you have given consent for analytics cookies.

5. Who we share your data with
We do not sell your personal data. We share it only with service providers ("data processors") that help us run our business, and only as needed to provide their services to us under a data processing agreement. These include:

Pipedrive — our customer relationship management (CRM) system, where form submissions and lead information are stored and managed.
Google (Google Analytics) — for website analytics.
[Team Tailor] — for recruitment, if you apply for a position via our careers section. (Include only if applicable.)
[Hosting / website provider] — which stores site data on our behalf.
We may also disclose data where required by law or to protect our legal rights.

6. International transfers
Some of our service providers may process data outside the European Economic Area (EEA), for example in the United States. Where this happens, we rely on appropriate safeguards under the GDPR, such as the EU–U.S. Data Privacy Framework and/or the European Commission's Standard Contractual Clauses, to ensure your data is adequately protected.

To verify before publishing: confirm where each provider stores your data (e.g. Pipedrive's data region; Google's transfer mechanism) and state the specific safeguard that applies.
7. How long we keep your data
We keep personal data only as long as necessary for the purposes described above:

Form submissions and lead data in our CRM: [e.g. up to 24 months after last contact, then reviewed]
Analytics data: retained according to our analytics providers' settings
GA4: 14 months
Data we are required to keep by law: for the legally mandated period
After these periods, data is deleted or anonymised.

8. Your rights
Under the GDPR, you have the right to:

Access the personal data we hold about you
Request correction of inaccurate data
Request deletion of your data ("right to be forgotten")
Restrict or object to certain processing
Receive your data in a portable format (data portability)
Withdraw consent at any time, where processing is based on consent
To exercise any of these rights, contact us at post@mazeppagroup.com. We will respond within the timeframes required by law.
You also have the right to lodge a complaint with a supervisory authority. In Norway this is the Norwegian Data Protection Authority (Datatilsynet, datatilsynet.no). If you are based in Denmark, the Czech Republic, or Poland, you may contact your national data protection authority instead.

9. Security
We take appropriate technical and organisational measures to protect personal data against unauthorised access, loss, or misuse. While no system can be guaranteed completely secure, we work to keep our safeguards current.

10. Changes to this policy
We may update this Privacy Policy from time to time. The current version is always available on this page, with the "Last updated" date at the top reflecting the most recent revision.

11. Contact
For any questions about this policy or your personal data:
Mazeppa Group Email: post@mazeppagroup.com