1. Who we are

OceanX Energy AS (“we”, “us”, “our”) is the controller of personal data collected through this website and related services.

‍Company details
OceanX Energy AS
Organisation number: 935 416 485
Fridtjof Nansens vei 19
0369 Oslo
Norway

‍Contact details
Email: contact@oceanxenergy.com
Website: www.oceanxenergy.com

If you have questions about this Privacy Policy or how we process personal data, you can contact us using the details above.

2. What this Privacy Policy covers

This Privacy Policy explains how we collect, use, store, and protect personal data when you:

• visit our website
• contact us through forms, email, or phone
• request information about our services
• subscribe to newsletters or other communications
• use our website, platform, or related digital services
• interact with us as a customer, prospect, supplier, or business contact.

3. What personal data we collect

Depending on how you use our website, platform or related digital service, or contact us, we may collect the following categories of personal data:

• name
• company name
• email address
• country or location
• information you provide in contact forms or messages
• technical information such as IP address, browser type, device information, and website usage data
• cookie and tracking data, where applicable
• account or user profile information used for login, where applicable

We do not intentionally collect sensitive personal data through this website unless you choose to provide it to us. Please avoid submitting sensitive personal information unless it is necessary.

4. How we collect personal data

We collect personal data:

• directly from you when you submit a form, contact us, or communicate with us
• automatically when you use our website, platform, or related services, including through server logs, cookies, and similar technologies
• from third-party tools we use for analytics, communications, website hosting, or customer relationship management, where applicable

We do not intentionally collect sensitive personal data through this website unless you choose to provide it to us. Please avoid submitting sensitive personal information unless it is necessary.

5. Why we process personal data

We process personal data for the following purposes:

• to respond to inquiries and communicate with you
• to provide information about our company, services, and solutions
• to manage business relationships with customers, partners, and suppliers
• to provide access to our website, platform, and related services
• to improve the performance, security, and functionality of our website, platform, and services
• to understand how visitors use our website and services, and improve user experience
• to send newsletters or marketing communications where permitted by law or where you have consented
• to establish, exercise, or defend legal claims
• to comply with legal and regulatory obligations

6. Legal basis for processing

Under data protection law, we must have a legal basis for processing your personal data. Depending on the situation, we rely on one or more of the following:

• Consent – for example where you choose to receive newsletters or accept non-essential cookies
• Legitimate interests – for example to respond to inquiries, improve our services, maintain website security, and manage business relationships, provided such interests are not overridden by your rights and freedoms
• Contract – where processing is necessary to take steps before entering into a contract or to perform a contract with you or your organisation
• Legal obligation – where processing is necessary for compliance with applicable laws or regulations.

7. Cookies and similar technologies

Our website may use cookies and similar technologies to ensure proper website functionality, improve performance, and understand how visitors use the website.

Cookies are small text files stored on your device when you visit a website. Similar technologies, such as local storage, may also be used for comparable purposes.

We may use the following categories of cookies and similar technologies on this website:

• Strictly necessary cookies – required for core technical operation, security, and basic website functionality
• Analytics or performance technologies – where used, to help us understand how visitors interact with the website and improve performance and user experience
• Functional technologies – where used, to support website usability and remember choices or preferences

Where non-essential cookies or similar technologies are used, we will process them in accordance with applicable law.Our website may use cookies and similar technologies to ensure proper website functionality, improve performance, and understand how visitors use the website.

Please note that selecting Log in, Sign in, or similar links on this website may redirect you to separate OceanX services hosted on other domains. Those services may use their own cookies or similar technologies and are governed by their own privacy and cookie information where applicable.

For questions about our use of cookies and similar technologies on this website, please contact us at contact@oceanxenergy.com.

8. Sharing of personal data

We do not sell, rent, or share personal data with third parties for marketing or commercial purposes.

Personal data collected through this website is used only for the purposes described in this Privacy Policy and is handled internally, except where disclosure is required by law or is necessary for basic website operation and communications.

9. Data location and transfers

Personal data collected through this website is currently stored and processed within the EEA, including on servers located in France. We do not intend to transfer personal data outside the EEA. If this changes, we will ensure that any such transfer takes place in accordance with applicable data protection law.

10. Data retention

We keep personal data only for as long as necessary for the purposes for which it was collected, including to satisfy legal, accounting, reporting, and contractual requirements.

Retention periods may vary depending on the type of data and the purpose of processing. When we no longer need personal data, we will delete it or anonymize it securely.

11. Your rights

Subject to applicable law, you may have the right to:

• request access to your personal data
• request correction of inaccurate or incomplete data
• request deletion of your personal data
• request restriction of processing
• object to processing based on legitimate interests
• request data portability where applicable
• withdraw consent at any time where processing is based on consent

If you want to exercise any of these rights, please contact us using the details in this Privacy Policy.

12. Complaints

If you believe that our processing of your personal data violates applicable law, you have the right to lodge a complaint with the relevant supervisory authority.

For Norway, this is Datatilsynet.

13. Data security

We take appropriate technical and organisational measures to protect personal data against accidental or unlawful destruction, loss, alteration, unauthorised disclosure, or access.

Such measures may include access controls, encryption, secure hosting environments, monitoring, and internal policies for handling personal data securely.

14. Changes to this Privacy Policy

We may update this Privacy Policy from time to time to reflect changes in legal requirements, our services, or how we process personal data. The latest version will always be available on this page, and the “Last updated” date will show when it was most recently revised.