Privacy Policy
Last updated: December 1, 2025
This page outlines how Impact Deal Engine / ClimatePoint collects, uses, and safeguards personal data for our outbound operations and inbound inquiries.
1. Who we are
Data controller: Giga Impact Solutions AS.
Registered address: Universitetsgata 12, 0164 Oslo, Norway.
Affiliates: ClimatePoint Methodology AS (Org.no: 929 099 389), same address.
For privacy or data questions reach out to automate@impactdealengine.com.
If appointed: Data Protection Officer or responsible person (name/contact details can be added here).
2. What personal data we collect
Depending on how you interact with our site or services we may collect:
- Contact details (name, email, company, message content) when you submit a contact or inquiry form.
- Technical data (IP address, browser, device, pages visited, referrer, timestamps) captured by server logs and analytics.
- Cookies and similar identifiers for functionality, analytics, or optional marketing (with consent where required).
- Other data you explicitly provide (e.g., attachments, follow-up emails, file uploads).
3. Purpose and legal basis for processing
We use personal data only for clear business reasons, including:
- Responding to inquiries, requests, or messages (legal basis: consent or legitimate interest in handling communications).
- Operating, securing, and improving the website (legal basis: legitimate interest in running a functional service).
- Sending marketing communications only if you opt-in (legal basis: explicit consent).
- Detecting abuse or security issues (legal basis: legitimate interest in protecting the service).
4. Recipients & third parties
Your data may be shared with:
- Processors who assist with hosting, email delivery, forms, analytics, or security.
- Authorized employees or trusted representatives that need access to respond to you or deliver services.
- Legal or regulatory authorities if required by law or to defend legal claims.
If data is transferred outside the European Economic Area we use standard contractual clauses or other lawful safeguards and notify you accordingly.
5. Data retention
We retain personal data only as long as it is needed:
- We retain contact form submissions for up to 26 months, unless you request deletion sooner.
- Analytics and usage logs: kept for up to 26 months before anonymization or deletion.
- Marketing consent records: kept until you withdraw consent or unsubscribe.
When data is no longer required, we delete or anonymize it securely.
6. Your rights under GDPR
Under GDPR you can:
- Request access to personal data we hold about you.
- Request correction of inaccurate or incomplete data.
- Request deletion of data (right to erasure) where lawful.
- Request restriction or object to certain processing (e.g., marketing).
- Receive your data in a portable, machine-readable format.
- Withdraw consent at any time without affecting prior lawful processing.
- File a complaint with your local supervisory authority.
To exercise any of these rights contact automate@impactdealengine.com.
8. Security & data protection
We implement reasonable technical and organizational measures to protect personal data from misuse and unauthorized access. We limit access to a need-to-know basis, pseudonymize/anonymize where appropriate, and review procedures regularly.
If a data breach affects your personal data we will investigate and notify authorities and affected individuals without undue delay when required by law.
9. Changes to this policy
We may update this Privacy Policy as our services or legal requirements evolve. Revisions will be posted here with a new "Last updated" date. Please check back periodically.
10. Contact & complaints
For any questions about this policy or to exercise your rights, email automate@impactdealengine.com.
If you believe we violated your data protection rights, you may file a complaint with your local Data Protection Authority.