Privacy Policy for Literally AS

Updated 20.03.2025

1. About this privacy policy

Literally AS is a Norwegian firm delivering consulting and business development services within technical documentation and technology development.

This privacy policy describes how Literally AS processes personal data when customers and other stakeholders interact with us. Literally AS is the data controller for the activities described below. The words "we", "us" and "our" refer to the data controller. The words "you", "you" and "your" refer to the data subject (the person about whom we process information).

If you have any questions or would like to exercise your rights as a data subject, you can find our contact information below.

2. Why and how we process personal data

In chapters 3-7 below, you will find information about what personal data we process and for what purposes.

3. Manage and follow up on agreements

We enter into various types of agreements with customers, suppliers and other contractual parties in order to provide our services and run our business. In order to follow up and administer such agreements, we process personal data about the contact person(s) at our contractual partner. The personal data we process typically includes the name, contact information, position, employer and signature of the person representing the contracting party.

The legal basis for the processing is that it is necessary to fulfill an agreement with you and it is our legitimate interest in being able to administer and follow up our contractual relationships.

4. Responding to inquiries

You can get in touch with us through our website (contact form, chat etc.), by phone or by sending us an email. In such cases, the personal data we process typically includes information about your name, affiliated company (if relevant), contact information and what you write/tell us when you contact us.

The purpose is to be able to interact with and respond to customers, suppliers and other stakeholders. The legal basis for the processing is that we have a legitimate interest in being able to respond and interact with people who contact us.

5. Deliver the website literally.dev

On the website literally.dev we use cookies to deliver the content of the website as well as to collect statistics and market our products and services.

The cookies we use to make the website work collect personal data such as which device you use, IP address and browser type.

The cookies we use for analytical purposes include information about the use of the website. The legal basis for our processing is our legitimate interest in providing a website to promote and provide information about our business to interested parties.

For statistical and marketing purposes, we will obtain your consent to the processing.

You can find updated information in the tool we use to obtain consent on the website. Please press the Cookie Settings button in the website's footer to get a detailed breakdown.

6. Conduct surveys

We conduct surveys from customers and others (like external IT managers) to obtain information relevant for the services we provide and the market we operate in. It is voluntary to participate in such surveys, which are normally conducted through qualitative in-depth interviews or quantitative, digital surveys.

If you participate in a user survey, we will process information about your name, contact information, demographic information and other information requested by the survey.

The purpose is to collect information in order to improve our services. The legal basis for the processing is either that we have obtained consent (typically for in-depth interviews) or that we have a legitimate interest in developing and improving our services.

7. Using social media

We are present on various social media platforms.

If you interact with us on these platforms (for example, by liking our posts or sending us messages), we will process information that appears in your social media profile. This typically includes your name/username and profile picture.

We are normally a joint controller with the provider of the platform, such as Meta.

Our basis for processing is that we have a legitimate interest in being present on platforms where we reach out to relevant users and stakeholders.

8. How long we keep your personal data

We process your personal data for as long as it is necessary to fulfill the purpose for which the personal data was collected. More specifically, this means that:

  • We process the contact information of representatives of our contracting parties for as long as we have a valid agreement with the party in question, and for a certain time after this in order to handle subsequent questions or inquiries.
  • If you have contacted us, f.ex. to request information about our services, we will store your personal data for 180 days after the last contact.
  • If you have participated in a user survey, we store your personal data for 180 days after the last contact.
  • We process other data for as long as it is necessary and in line with the purpose for which the data was collected.

In certain situations, we may process the data for a longer period. This may be the case, for example, if it is necessary to continue processing the personal data in order to comply with a legal obligation or to establish, exercise or defend a legal claim.

9. How we share your personal data

9.1 Sharing of personal data with our data processors

We use data processors to perform some of the activities described above. Data processors act on our behalf and typically provide software systems to us to process personal data. We have entered into data processing agreements with our third-party suppliers where relevant.

We use the following types of data processors:

  • Google Workspace
  • Calendly
  • Slack
  • Notion
  • Webflow
  • Other data processors, which can be provided on request.

9.2 Sharing of personal data with third parties

We only share your personal data with third parties if we have a legal basis to do so. We share your personal data in the following situations:

  • When necessary to deliver our services and interact with our customers and stakeholders, we use data processors as described in section 9.1 (these act on our behalf).
  • When necessary to comply with legal obligations, for example to comply with relevant accounting and bookkeeping laws, we may share your data with public authorities.
  • When necessary to seek assistance, establish, exercise or defend a legal claim, we may share your data with our advisors.

10. Transfer of personal data outside the EU/EEA

If you are subject to the GDPR, we will not transfer your personal data that you share with us outside the EU/EEA, except as described below.

Some personal data may be processed outside the EU/EEA. If such a transfer takes place, we will ensure that there is a legal basis for the transfer, such as a decision that the country we are transferring to has an adequate level of protection.

11. Your rights as a registrant

11. Overview of rights

This section describes certain rights you have as a data subject under the GDPR. Please do not hesitate to contact us if you have any questions about your rights or if you wish to exercise your rights. Please note that there may be certain exceptions to the rights set out below.

Insight

You have the right to obtain confirmation as to whether or not we process personal data about you. You can also request a copy of the personal data we process about you.

Correction of personal data

You can ask us to correct or amend information that is inaccurate or misleading, and to complete incomplete personal data.

Deletion of personal data

In some cases, you may request the deletion of your personal information. To do so, please send a written request to andrei@literally.dev, and we will remove any personal data we may have stored about you.

Restriction of the processing of personal data

In certain situations, you can also ask us to restrict the processing of your personal data. This could be, for example, if you have contested the accuracy of the personal data we are processing and we are working to verify its accuracy, or if you have objected to our processing based on our legitimate interest.

Objection to the processing of personal data

If we process your data on the basis of a task carried out in the public interest or in the exercise of official authority vested in the controller, or on the basis of a balancing of interests, you have the right to object to the processing of your data. You may also object to our processing for direct marketing purposes, including profiling for such purposes. If you object to processing for direct marketing purposes, we are obliged to stop such direct marketing.

Data portability

When we process information about you on the basis of consent or to fulfill an agreement, you can ask us to transfer information about you to you or to another data controller, if technically possible.

You can complain about our processing of your personal data

We hope that you will let us know if you believe that we are not complying with the provisions of the General Data Protection Regulation or the Personal Data Act. If you wish to complain to us, please first notify us via the email indicated below.

You can also complain about our processing of personal data by contacting the Norwegian Data Protection Authority. You can find the contact details for the Norwegian Data Protection Authority at www.datatilsynet.no.

11.2 How to make use of your rights

You can exercise your rights by sending an email to hi@literally.dev or a letter to

Literally AS,

Jernveien 24, 1831 Askim, Norway

Registered company number 835 004 112

You have the right to receive a response without undue delay, and normally within one month at the latest.