Privacy Policy
Privacy Policy – Bastant Solutions AS
Last Updated: June 12, 2025
Bastant Solutions AS (“Bastant Solutions”, “we”, “our”, “us”) respects your privacy and is committed to protecting your personal data.
This Privacy Policy explains how we collect, use, store, protect, and disclose personal information when you use www.bastantai.com (the “Website”) or our AI-powered services (“Services”).
By accessing or using the Website or Services, you agree to this Privacy Policy.
If you do not agree with any part of this Policy, please discontinue use of the Website.
We may update this Policy from time to time.
Material changes will be communicated through the Website or email.
Continued use after such changes constitutes acceptance.
1. Data Controller
For Website visitors and general inquiries, the Data Controller is:
Bastant Solutions AS
Org. no. 935 745 616
Welhavens gate 8A
0352 Oslo, Norway
Email: [email protected]
For Clients using our AI services, Bastant Solutions typically acts as Data Processor, governed by a separate Data Processing Agreement (DPA).
2. What This Policy Covers
This Policy applies to:
The Website
Forms submitted through the Website
Email and electronic communication with Bastant Solutions
Use of the Services
Data processed for onboarding or support
This Policy does not apply to:
Client systems where we act as Processor
Third-party sites linked from the Website
Information collected by Clients about their own users (covered by the DPA)
3. Personal Data We Collect
3.1 Information You Provide Directly
This includes:
Name
Email address
Phone number
Company name
Location (if provided)
Survey or onboarding data
Messages or support requests
Information provided to request service demos or consultations
3.2 Information Collected Automatically
We collect:
IP address
Device information
Browser type
Operating system
Usage data and interaction patterns
Cookies and tracking technologies
You may adjust cookie settings through your browser.
4. How We Use Personal Data
We use personal data for:
Operating and presenting the Website
Providing Services you request
Responding to inquiries or support requests
Processing onboarding information
Improving the Website and Services
Sending updates or communications (where legally permitted)
Enforcing agreements and preventing fraud
Fulfilling legal obligations
We do not sell personal data.
5. Legal Basis for Processing (GDPR)
We process personal data under the following lawful bases:
Contract – when data is necessary for delivering Services
Consent – when you voluntarily submit information or accept cookies
Legitimate interests – Website security, improvement, analytics
Legal obligations – compliance with law enforcement or regulatory requirements
Clients are solely responsible for obtaining lawful basis before providing any lead or customer data to Bastant Solutions.
Bastant Solutions does not determine, validate, or supply consent for leads processed on behalf of Clients.
6. Cookies & Tracking
We use cookies to:
Personalize Website experience
Perform analytics
Improve stability and security
Where required by law, cookie consent banners will be displayed.
7. AI Processing & Third-Party APIs
Bastant Solutions uses AI technologies and third-party APIs (e.g., OpenAI, Google Cloud) to power our Services.
We comply with:
Google API Services User Data Policy
OpenAI API policies
GDPR requirements for sub-processing
Bastant Solutions:
Does not use personal data for general AI model training
Does not allow AI vendors to retain or reuse customer data
Only processes data strictly under Client instruction
AI Disclaimer:
AI-generated responses may be incorrect, incomplete, or misleading.
Bastant Solutions is not liable for decisions made based on AI-generated output.
8. Disclosure of Personal Data
We may disclose personal data to:
Hosting providers
AI infrastructure providers
Messaging platforms
CRM or integration services
Contractors bound by confidentiality
Successors in case of merger or acquisition
Legal authorities when required
We may disclose aggregated or anonymized data without restriction.
We do not disclose personal data to third parties for advertising.
9. International Data Transfers
Personal data may be transferred outside Norway/EEA only when necessary for delivering Services.
Such transfers rely on:
Standard Contractual Clauses (SCCs)
Adequacy decisions
Other GDPR-compliant mechanisms
We ensure compliance with GDPR Chapter V for all transfers.
10. Data Security
We implement reasonable administrative, technical, and physical safeguards including:
Encryption at rest and in transit
Multi-factor authentication
Role-based access control
Data segregation
Logging and monitoring
Regular security reviews
However, no system is 100% secure.
Data transmission is at your own risk.
11. Data Retention
We retain personal data only as long as necessary for:
Service delivery
Legal obligations
Security
Contractual requirements
Client data processed under a DPA will be deleted according to that agreement (typically 30–40 days after termination).
12. Your Rights (GDPR)
You have the right to:
Access your data
Request correction
Request deletion
Request restriction
Data portability
Object to processing
Withdraw consent at any time
Requests may be submitted to [email protected].
Right to lodge a complaint:
EU/Norway: Datatilsynet
Australia: Office of the Australian Information Commissioner (OAIC)
USA residents: State privacy regulators (e.g., California Privacy Protection Agency for CA residents)
13. Children Under 18
Our Website and Services are not intended for individuals under 18.
We do not knowingly collect data from minors.
If discovered, the data will be deleted.
14. Public Submissions
Information posted on public areas of the Website may be visible to others.
We cannot guarantee it will not be accessed or misused.
15. Changes to This Policy
We will post updates with a revised “Last Updated” date.
Material changes will be communicated through the Website or email.
16. Contact
For questions or privacy-related requests, contact:
Bastant Solutions AS
Welhavens gate 8A
0352 Oslo, Norway
Email: [email protected]
