Modulize AS Privacy Policy

Last updated: September 18, 2023

We at Modulize recognize the importance of processing data about you as an individual (“Personal Data”) and are committed to protecting your privacy in accordance with the General Data Protection Regulation (GDPR).

This Privacy Policy sets out why we collect Personal Data, what data we process and store as you interact with our website or software, receive newsletters, attend a webinar or apply to a posted position - and your rights regarding Personal Data that we hold. 

The controller for the personal data we process is Modulize AS (organization number 926 067 575), Mariboes gate 8, 0183 Oslo, Norway, by CEO Lucas Carstens.

We reserve the right to update this policy. You will always find the last version on our website at   

Collection and processing of Personal Data

Our legal basis for collecting and processing your personal data is based on your consent, our legitimate interests in providing our services to you, or to comply with legal obligations. We collect, store and use Personal Data for different purposes, depending on who you are and how the Personal Data is collected. Here is how:

We use email addresses based on your consent to provide information about our products and services, including sending newsletters. You can always opt out of email campaigns and newsletters by clicking the “unsubscribe” button in the email footer.
When you submit an inquiry for information, we ask for your name, the name of the company you work for, your email address and your phone number. We use this data to ensure you receive relevant information in a timely manner. For our customers, we also process your IP address.

As you visit our website, sign up to be a user of the Modulize software, or attend a virtual event, we collect information automatically using cookies. The use of cookies is necessary to improve our website and provide you with more tailored information. You may at any time disable the use of cookies by changing the settings on your device. 

We collect information to analyze how our customers use our product and interact with us, and may also ask you to respond to Net Promoter Score or similar customer surveys. Such data are processed and stored to provide insight and help us improve our product, services and communications. 

We may also process Personal Data as a data processor under the direction of our customers, the data controllers. As a data processor we only grant access to the personal data being processed on behalf of the data controller to persons under our authority who have committed themselves to confidentiality, or are under an appropriate statutory obligation of confidentiality. 

Transfer of Personal Data to third parties

We use third-party service providers to support our websites, software, and related services. We carefully select service providers and only share relevant information. The service providers are prohibited from using your Personal Data except for necessary, agreed purposes, and are required to maintain the confidentiality of your information. Among others, we use the following service providers acting as data processors:

  • We communicate via our website, email and LinkedIn, and use Hubspot for Customer Relationship Management (CRM). 
  • Data storage is provided by Amazon Web Services (AWS), and we use data centers in Europe. 
  • To ensure our customers can complete their work with as low effort as possible, we have integrated AI into our product. Our provider OpenAI are compliant with data protection regulations. 
  • Our careers page is powered by Teamtailor with a separate privacy policy.

Protection of Personal Data

Modulize and its service providers take integrity and confidentiality of Personal Data seriously. We take the measures that can be reasonably expected to safely process and store Personal Data. We use access levels and controls, and Personal Data is encrypted at storage and upon transfer.

In case of a data breach, affected individuals and the data protection authorities will be notified in accordance with laws and regulations. 

Storing of personal data

Personal Data will be retained for as long as necessary to provide our services to you, and in accordance with legal and regulatory requirements. We take the appropriate measures to protect your personal data against unauthorized access, accidental loss, or destruction.

Personal Data collected on the basis of your consent, will be retained until you withdraw your consent. If you unsubscribe from a newsletter, we will however still keep your email address in our CRM tool to ensure you are not re-enrolled.

Personal Data where the processing is in our legitimate interest, will be retained as long as we need to comply or achieve such interest.

Your rights

You have the right to request access, rectification, or erasure of your Personal Data. Further, you have the right to restrict our processing, to object to our processing and to port Personal Data elsewhere.

To exercise your rights, please contact us via email: We will respond to your inquiry as soon as possible, and at the latest within 30 days.

If you wish to exercise your rights, we will require that you confirm your identity by providing additional information. We do this to ensure that third parties are not given access to Personal Data.

You have the right to file a complaint to a data protection authority about our processing of Personal Data if you believe it does not comply with privacy law.

These terms are governed by Norwegian law. The venue is Oslo Tingrett.