Privacy Policy

How we collect, use, and protect your personal data

Last updated: May 2026

1. Introduction

Saga ('we', 'our', or 'us') is committed to protecting your privacy. This Privacy Policy explains how we collect, use, disclose, and safeguard your personal data when you visit our website or use our services, and the rights you have under the EU General Data Protection Regulation (GDPR) and the Norwegian Personal Data Act (personopplysningsloven).

2. Data Controller

The data controller responsible for your personal data is:

  • Sagabuild AS
  • Organisation number: 937 573 804
  • Address: Stasjonsveien 57, 0771 Oslo, Norway
  • Email: [email protected]

For any questions about this policy or how we handle your data, or to exercise your rights, contact us at [email protected].

3. Information We Collect

We may collect information about you in various ways:

  • Contact form data: Your name, email address and the content of the message you send us via the contact form.
  • Booking data: Your name, email address, the notes you provide, and the date and time you select when booking a call.
  • Usage Data: Information about how you use our website, including pages visited, time spent, and navigation patterns. This is only collected if you accept analytics cookies.
  • Technical Data: IP address, browser type, device information, and operating system.

We do not collect special categories of personal data (such as health, religion or political opinions), and our services are not directed at children under 16.

4. Legal Basis for Processing

Under GDPR Article 6, we process your personal data on the following legal bases:

  • Consent (Art. 6(1)(a)): For optional analytics cookies and any marketing communications. You can withdraw consent at any time.
  • Contract / pre-contract (Art. 6(1)(b)): To respond to your inquiries and handle booking requests you submit to us.
  • Legitimate interests (Art. 6(1)(f)): To keep our website secure, prevent abuse, and improve our services. We balance this against your rights and freedoms.
  • Legal obligation (Art. 6(1)(c)): To comply with accounting and other statutory requirements.

5. How We Use Your Information

We use the information we collect to:

  • Respond to your inquiries and provide customer support
  • Improve our website and services
  • Send you relevant information about our services (with your consent)
  • Analyze website usage to enhance user experience
  • Comply with legal obligations

6. Cookies

We use strictly necessary local storage for choices such as language, theme and cookie consent. Optional analytics from Google Analytics and Google Tag Manager are disabled by default and only load after you actively accept analytics cookies.

The specific cookies and storage we use:

  • saga-cookie-consent (essential, local storage, persistent): Remembers your analytics choice.
  • Language and theme preferences (essential, local storage, persistent): Remember your language and display settings.
  • _ga (analytics, Google, ~2 years): Distinguishes unique visitors. Set only after consent.
  • _ga_FSQEBW9549 / _gid / _gat (analytics, Google, minutes to 24 hours): Used by Google Analytics to maintain session state and throttle requests. Set only after consent.

Analytics is loaded with IP anonymisation and Google Consent Mode, with advertising storage and personalisation denied. Declining analytics does not affect access to the website. You can change or withdraw your choice at any time through the 'Cookie settings' link in the footer; withdrawing consent removes the analytics cookies set in your browser.

7. Who We Share Your Data With

We do not sell your personal data. We share it only with the data processors that help us operate our website and services, under data processing agreements that require them to protect your data:

  • Hosting: Our website and database are hosted on servers operated by Hetzner Online GmbH, located within the EU/EEA (Finland and Germany).
  • Analytics: Google Ireland Ltd / Google LLC provide Google Analytics and Google Tag Manager, used only with your consent.
  • Email: Messages and booking requests you send may be processed through our email provider in order to reach us.

We may also disclose data where required by law or to protect our legal rights.

8. International Data Transfers

Our hosting and database are kept within the EU/EEA. Where you consent to analytics, Google may process data outside the EEA, including in the United States. Such transfers are covered by the EU-U.S. Data Privacy Framework and/or the European Commission's Standard Contractual Clauses, which provide an adequate level of protection. If you do not accept analytics cookies, no analytics data is transferred.

9. Your Rights Under GDPR

If you are a resident of the European Economic Area (EEA), you have certain data protection rights:

  • Right to Access: You can request copies of your personal data.
  • Right to Rectification: You can request that we correct inaccurate or incomplete information.
  • Right to Erasure: You can request that we delete your personal data.
  • Right to Restrict Processing: You can request that we restrict the processing of your personal data.
  • Right to Data Portability: You can request that we transfer your data to another organization.
  • Right to Object: You can object to our processing of your personal data.
  • Right to Withdraw Consent: Where processing is based on consent, you can withdraw it at any time without affecting prior processing.

To exercise any of these rights, email us at [email protected]. We will respond within one month.

You also have the right to lodge a complaint with the Norwegian Data Protection Authority (Datatilsynet) if you believe our processing of your personal data infringes data protection law. Datatilsynet, P.O. Box 458 Sentrum, 0105 Oslo, Norway — www.datatilsynet.no.

10. Data Security

We implement appropriate technical and organizational measures to protect your personal data against unauthorized access, alteration, disclosure, or destruction. However, no method of transmission over the Internet is 100% secure, and we cannot guarantee absolute security.

11. Data Retention

We keep your personal data only as long as necessary for the purpose it was collected for:

  • Contact and booking messages: kept while we handle your inquiry and for up to 24 months afterwards, then deleted, unless a contractual or legal relationship requires longer.
  • Accounting records: kept for 5 years as required by the Norwegian Bookkeeping Act.
  • Analytics data: retained according to Google Analytics settings (up to 14 months) and only if you consented.

12. Third-Party Links

Our website may contain links to third-party websites. We are not responsible for the privacy practices of these external sites. We encourage you to read the privacy policies of any third-party sites you visit.

13. Changes to This Policy

We may update this Privacy Policy from time to time. We will notify you of any changes by posting the new Privacy Policy on this page and updating the "Last updated" date.

14. Contact Us

If you have any questions about this Privacy Policy or our data practices, please contact us at:

Sagabuild AS
Org. no. 937 573 804

Email: [email protected]

Address: Stasjonsveien 57, 0771 Oslo, Norway