How we handle your data
Last updated 13 August 2026
Short version: when you ask for a record, we keep your brand name, your domain and your email so we can build it and send it to you. We do not sell it, share it, add you to a list, or train anything on it. Ask us to delete it and we will.
Recensa is operated by Probioform Norge AS, a company registered in Norway.
| Controller | Probioform Norge AS |
|---|---|
| Organisation number | 918 880 100 |
| Registered address | Huitfeldts gate 11A 0253 Oslo Norway |
| Contact | hello@recensa.org |
Norway is outside the EU but inside the EEA, and the GDPR applies here in full through the EEA Agreement. Your rights below are the same as they would be against an EU-established controller, and the supervisory authority for this controller is the Norwegian Data Protection Authority (Datatilsynet).
| Data | Why | Kept for |
|---|---|---|
| Brand name and store domain | To generate the record you asked for | 24 months, or until you ask us to delete it |
| Email address | To send you the record and reply to you | 24 months, or until you ask us to delete it |
| Review platform (optional) | To know what the record could contain | 24 months, or until you ask us to delete it |
That is the whole list. There is no account, no password, and no payment information on this site. We set no cookies and run no analytics or third-party trackers.
You gave us this information by submitting the form, in order to receive something you asked for. That is consent under Article 6(1)(a) GDPR, and you may withdraw it at any time by emailing us.
If you become a customer, the basis for holding your contact details becomes performance of a contract under Article 6(1)(b), and a separate agreement will cover it.
When you submit the form, our system assembles a record from public information only: your company's entry in the public register, what your own website states about itself, and review counts that are already publicly visible. We do not copy review text from marketplaces or review platforms — §10 of the standard forbids it.
The finished record is emailed to the address you gave us and to nobody else. The page is marked noindex so search engines do not list it, and it states plainly that it was not published by you and is not verified by you. Ask us to take it down and it comes down the same day.
Processors only, each doing one job:
We do not sell, license or share your data with anyone else, and we do not use it to train models. That is not only a policy here — it is §5.6 of the standard, which binds us regardless of what this page says.
Under GDPR you can ask us to show you what we hold, correct it, delete it, or send it to you in a portable form. You can also object to us holding it at all. One email to hello@recensa.org does any of these, and we will act within 30 days.
If you are unhappy with how we have handled it, you may complain to your national data protection authority.
If this policy changes materially, the date at the top changes and the previous version stays available on request.