Last updated August 2026

This privacy notice for Kulturella AS (“Company,” “we,” “us,” or “our”), describes how and why we might collect, store, use, and/or share (“process”) your information when you use our services (“Services”), such as when you: Visit our website at https://kulturella.io, or any website of ours that links to this privacy notice, or use our platform and its features. Engage with us in other related ways, including any sales, marketing, or events.

Questions or concerns? Reading this privacy notice will help you understand your privacy rights and choices. If you do not agree with our policies and practices, please do not use our Services. If you still have any questions or concerns, please contact us at post@kulturella.no.

This summary provides key points from our privacy notice, but you can find out more details about any of these topics by using our table of contents below to find the section you are looking for.

What personal information do we process?

When you visit, use, or navigate our Services, we may process personal information depending on how you interact with Kulturella AS and the Services, the choices you make, and the products and features you use.

Do we process any sensitive personal information?

We do not process sensitive personal information.

Do we receive any information from third parties?

We do not receive personal information from third parties. We do receive basic profile information when you register using a social media account.

How do we process your information?

We process your information to provide, improve, and administer our Services, communicate with you, for security and fraud prevention, and to comply with law. We process anonymised and aggregated behavioural data to produce cultural statistics for the public sector — with your consent.

How do we keep your information safe?

We have organisational and technical processes and procedures in place to protect your personal information. However, no electronic transmission over the internet or information storage technology can be guaranteed to be 100% secure.

What are your rights?

Depending on where you are located geographically, the applicable privacy law may mean you have certain rights regarding your personal information, including the right to access, rectify, erase, restrict, or object to processing.

How do you exercise your rights?

The easiest way to exercise your rights is by contacting us at post@kulturella.no. We will consider and act upon any request in accordance with applicable data protection laws.

1. WHAT INFORMATION DO WE COLLECT?
2. HOW DO WE PROCESS YOUR INFORMATION?
3. HOW DO WE ANONYMISE DATA FOR CULTURAL STATISTICS?
4. WHAT LEGAL BASES DO WE RELY ON TO PROCESS YOUR PERSONAL INFORMATION?
5. WHEN AND WITH WHOM DO WE SHARE YOUR PERSONAL INFORMATION?
6. WHAT IS OUR STANCE ON THIRD-PARTY WEBSITES?
7. DO WE USE COOKIES AND OTHER TRACKING TECHNOLOGIES?
8. HOW DO WE HANDLE YOUR SOCIAL LOGINS?
9. HOW LONG DO WE KEEP YOUR INFORMATION?
10. HOW DO WE KEEP YOUR INFORMATION SAFE?
11. DO WE COLLECT INFORMATION FROM MINORS?
12. WHAT ARE YOUR PRIVACY RIGHTS?
13. CONTROLS FOR DO-NOT-TRACK FEATURES
14. DO WE MAKE UPDATES TO THIS NOTICE?
15. HOW CAN YOU CONTACT US ABOUT THIS NOTICE?
16. HOW CAN YOU REVIEW, UPDATE, OR DELETE THE DATA WE COLLECT FROM YOU?

Personal information you disclose to us

In Short: We collect personal information that you provide to us. We collect personal information that you voluntarily provide to us when you register on the Services, express an interest in obtaining information about us or our products and Services, when you participate in activities on the Services, or otherwise when you contact us.

Personal Information Provided by You.

The personal information that we collect depends on the context of your interactions with us and the Services, the choices you make, and the products and features you use. The personal information we collect may include the following:
– names
– phone numbers
– email addresses
– contact or authentication data
– personal preferences
– artistic field, genre, biography and profile picture

Sensitive Information.

We do not process sensitive personal information.

Social Media Login Data.

We may provide you with the option to register with us using your existing social media account details, like your Facebook or other social media account. If you choose to register in this way, we will collect the information described in the section called “HOW DO WE HANDLE YOUR SOCIAL LOGINS?” below.

Behavioural Data.

We collect data about actions you perform on the platform, including which buttons you click, and which opportunities (funding schemes, activities, collaboration requests) you express interest in by clicking “Apply now” or similar action buttons. This data is used to understand user behaviour and to generate anonymised cultural statistics. See section 3 for details on how anonymisation works.

Survey Data.

When you express interest in a funding scheme, activity or collaboration, you may receive an automatic follow-up survey. We ask whether you applied or participated, whether you received support and if so how much, and whether a collaboration involved payment. Participation in surveys is voluntary. Responses are used only in anonymised and aggregated form.

Information automatically collected

In Short: Some information — such as your Internet Protocol (IP) address and/or browser and device characteristics — is collected automatically when you visit our Services.

We automatically collect certain information when you visit, use, or navigate the Services. This information does not reveal your specific identity but may include device and usage information, such as your IP address, browser and device characteristics, operating system, language preferences, referring URLs, device name, country, location, information about how and when you use our Services, and other technical information. This information is primarily needed to maintain the security and operation of our Services, and for our internal analytics and reporting purposes.

Like many businesses, we also collect information through cookies and similar technologies.

The information we collect includes:

Log and Usage Data. Log and usage data is service-related, diagnostic, usage, and performance information our servers automatically collect when you access or use our Services and which we record in log files. Depending on how you interact with us, this log data may include your IP address, device information, browser type, and settings and information about your activity in the Services (such as the date/time stamps associated with your usage, pages and files viewed, searches, and other actions you take such as which features you use), device event information (such as system activity, error reports, and hardware settings).

Device Data. We collect device data such as information about your computer, phone, tablet, or other device you use to access the Services. Depending on the device used, this device data may include information such as your IP address (or proxy server), device and application identification numbers, location, browser type, hardware model, Internet service provider and/or mobile carrier, operating system, and system configuration information.

Location Data. We collect location data such as information about your device’s location, which can be either precise or imprecise, based on your IP address. You can opt out of allowing us to collect this information by disabling your Location setting on your device. However, if you choose to opt out, you may not be able to use certain aspects of the Services.

In Short: We process your information to provide, improve, and administer our Services, communicate with you, for security and fraud prevention, to comply with law, and — with your consent — to produce anonymised cultural statistics for the public sector.

We process your personal information for the following purposes:

2.1 To provide and administer our Services
We process your information so you can create and log in to your account, use the platform’s features, communicate with other users, and receive the services you have requested.

2.2 To improve our Services
We analyse usage data and behavioural data to improve platform functionality, fix technical errors, and train and improve the AI models that underpin our matching and recommendation features.

2.3 To produce cultural statistics for the public sector
We aggregate and anonymise behavioural data and survey responses to produce cultural statistics. These statistics may be delivered to Norwegian municipalities, county authorities and other public sector actors as a basis for cultural administration and planning. Statistical deliveries never contain personally identifiable information. It is not possible to identify individual users from the data delivered to the public sector.

This purpose requires your active consent. You can give or withdraw consent at any time under Account Settings > Privacy, or by contacting us at post@kulturella.no.

2.4 To send administrative information
We may process your information to send you details about our products and services, changes to our terms and policies, and other similar information.

2.5 For security and fraud prevention
We may process your information when necessary to protect the security of our Services and to prevent fraud and misuse.

2.6 To comply with legal obligations
We may process your information where we believe it is necessary for compliance with our legal obligations, such as to cooperate with a law enforcement body or regulatory agency.

Before any data is used for cultural statistics, it goes through the following processing steps:

– All personally identifiable information (name, email address, phone number) is permanently removed
– Data is aggregated — the minimum group size is 10 users, ensuring that no individual can be identified
– Geographic data is coarsened to municipality level or higher
– Data is pseudonymised internally during processing and stored separately from personal profiles

Kulturella follows the principle of data minimisation: we do not use more data than is necessary to produce the requested statistics.

The aggregated and anonymised statistics that are delivered to the public sector cannot be traced back to you as an individual.

In Short: We only process your personal information when we believe it is necessary and we have a valid legal reason (i.e., legal basis) to do so under applicable law.

The General Data Protection Regulation (GDPR) requires us to explain the valid legal bases we rely on in order to process your personal information. We rely on the following legal bases:

Consent (GDPR art. 6 no. 1 a)
We rely on your consent for the production of cultural statistics for the public sector (section 2.3 above). You can withdraw your consent at any time without this affecting the lawfulness of processing carried out before the withdrawal. To withdraw consent, go to Account Settings > Privacy or contact us at post@kulturella.no.

Performance of a Contract (GDPR art. 6 no. 1 b)
We rely on this basis to provide our core services — account creation, platform features, and user-to-user communication.

Legitimate Interests (GDPR art. 6 no. 1 f)
We rely on this basis to improve our Services, analyse usage patterns, train our AI models, and prevent fraud. We have assessed that our legitimate interests are not overridden by your interests or fundamental rights.

Legal Obligations (GDPR art. 6 no. 1 c)
We rely on this basis where processing is necessary to comply with a legal obligation, such as cooperating with regulatory authorities or law enforcement.

In Short: We may share information in specific situations described in this section and/or with the following third parties.

Other users of the platform. Profile information you enter — name, artistic field, biography and profile picture — is visible to other registered users. You control what you enter in your profile.

Data processors. We use data processors who operate technical infrastructure on our behalf. All data processors are bound by data processing agreements and may not use your data for their own purposes. Our primary data processors are:
– DigitalOcean — cloud infrastructure and server hosting (USA, EU Standard Contractual Clauses apply)
– Anthropic — AI engine for ELLA (USA, EU Standard Contractual Clauses apply)

Public sector. Aggregated and anonymised cultural statistics may be shared with Norwegian municipalities, county authorities and state actors. No personal data is included in these deliveries. See sections 2.3 and 3 for details.

Business Transfers. We may share or transfer your information in connection with, or during negotiations of, any merger, sale of company assets, financing, or acquisition of all or a portion of our business to another company. You will be notified in advance.

Legal requirements. We may disclose your information where required by law, court order, or governmental regulation.

In Short: We are not responsible for the safety of any information that you share with third parties that we may link to or who advertise on our Services, but are not affiliated with, our Services.

The Services may link to third-party websites, online services, or mobile applications. We do not make any guarantee regarding any such third parties, and we will not be liable for any loss or damage caused by the use of such third-party websites, services, or applications. Any data collected by third parties is not covered by this privacy notice. You should review the policies of such third parties and contact them directly to respond to your questions.

In Short: We use cookies and other tracking technologies to collect and store your information.

We use cookies and similar tracking technologies (like web beacons and pixels) to access or store information. We use cookies to:
– Keep you logged in between visits
– Remember your settings and preferences
– Analyse traffic and usage patterns

You can manage cookies in your browser settings. Please note that disabling certain cookies may affect the functionality of the platform. Specific information about how you can refuse certain cookies is set out in our Cookie Notice.

In Short: If you choose to register or log in to our Services using a social media account, we may have access to certain information about you.

Our Services offer you the ability to register and log in using your third-party social media account details (like your Facebook login). Where you choose to do this, we will receive certain profile information about you from your social media provider.

The profile information we receive may vary depending on the social media provider concerned, but will often include your name, email address, and profile picture, as well as other information you choose to make public on such a social media platform.

We will use the information we receive only for the purposes that are described in this privacy notice. Please note that we do not control, and are not responsible for, other uses of your personal information by your third-party social media provider. We recommend that you review their privacy notice to understand how they collect, use, and share your personal information.

In Short: We keep your information for as long as necessary to fulfill the purposes outlined in this privacy notice unless otherwise required by law.

We retain different categories of data for different periods:

– Account information: For as long as your account is active. Deleted within 30 days of account closure.
– Behavioural data: 12 months from the time of collection, then anonymised or deleted.
– Survey responses: 12 months in personally identifiable form, then retained only in aggregated form.
– Aggregated cultural statistics: Retained indefinitely — contains no personal data.
– Log and security data: 90 days.

When we have no ongoing legitimate business need to process your personal information, we will either delete or anonymise such information, or, if this is not possible (for example, because your personal information has been stored in backup archives), then we will securely store your personal information and isolate it from any further processing until deletion is possible.

In Short: We aim to protect your personal information through a system of organisational and technical security measures.

We have implemented appropriate and reasonable technical and organisational security measures designed to protect the security of any personal information we process, including:
– Encryption of data in transit (TLS) and at rest
– Access controls — only authorised personnel have access to personal data
– Data processing agreements with all sub-processors
– Regular security assessments

However, no electronic transmission over the Internet or information storage technology can be guaranteed to be 100% secure. In the event of a security breach that affects your rights, we will notify you and the Norwegian Data Protection Authority (Datatilsynet) within 72 hours, as required by GDPR.

In Short: We do not knowingly collect data from or market to persons under 16 years of age.

Kulturella’s services are not directed at persons under the age of 16. We do not knowingly collect personal information from minors. If we become aware that we have received information about a minor, we will delete it immediately. If you become aware of any data we may have collected from persons under 16, please contact us at post@kulturella.no.

In Short: As a user in the European Economic Area (EEA), you have rights that allow you greater access to and control over your personal information.

Under the GDPR, you have the following rights:
– Right of access: You can request a copy of all information we hold about you.
– Right to rectification: You can ask us to correct inaccurate information.
– Right to erasure: You can ask us to delete your personal information (“the right to be forgotten”).
– Right to restriction: You can ask us to restrict processing of your personal information.
– Right to data portability: You can request your data in a machine-readable format.
– Right to object: You can object to processing based on legitimate interests.
– Right to withdraw consent: You can withdraw your consent to cultural statistics processing at any time under Account Settings > Privacy. This does not affect the lawfulness of processing carried out before withdrawal.

To exercise your rights, log in to your account and go to Settings, or contact us at post@kulturella.no. We will respond within 30 days.

You also have the right to lodge a complaint with the Norwegian Data Protection Authority (Datatilsynet): datatilsynet.no | post@datatilsynet.no | +47 22 39 69 00.

Account Information

If you would at any time like to review or change the information in your account or terminate your account, you can log in to your account settings or contact us using the contact information provided below. Upon your request to terminate your account, we will deactivate or delete your account and information from our active databases within 30 days. However, we may retain some information in our files to prevent fraud, troubleshoot problems, assist with any investigations, enforce our legal terms and/or comply with applicable legal requirements.

Most web browsers and some mobile operating systems and mobile applications include a Do-Not-Track (“DNT”) feature or setting you can activate to signal your privacy preference not to have data about your online browsing activities monitored and collected. At this stage no uniform technology standard for recognising and implementing DNT signals has been finalised. As such, we do not currently respond to DNT browser signals or any other mechanism that automatically communicates your choice not to be tracked online. If a standard for online tracking is adopted that we must follow in the future, we will inform you about that practice in a revised version of this privacy notice.

In Short: Yes, we will update this notice as necessary to stay compliant with relevant laws.

We may update this privacy notice from time to time. The updated version will be indicated by an updated “Last updated” date at the top of this notice. If we make material changes to this privacy notice, we will notify registered users by email at least 30 days before the change takes effect. We encourage you to review this privacy notice periodically to be informed of how we are protecting your information.

If you have questions or comments about this notice, you may email us at post@kulturella.no or by post to:

Kulturella AS
Naustskaret 2
Molde, Møre og Romsdal 6409
Norway

Data Protection Authority (supervisory authority):
Datatilsynet — datatilsynet.no | post@datatilsynet.no | +47 22 39 69 00

You have the right to request access to the personal information we collect from you, change that information, or delete it.

To review or update your information, log in to your account and go to Settings.

To delete your account and all associated personal data, log in and go to Settings > Account > Delete account.

To exercise any of your privacy rights or to withdraw consent for cultural statistics processing, contact us at post@kulturella.no. We will respond within 30 days.