Privacy Policy
Norstat AS, Fridtjof Nansens plass 5, 0160 Oslo, Norway, is responsible for the processing of your personal data and for ensuring it is handled securely and in accordance with applicable privacy legislation, including the General Data Protection Regulation (GDPR) and relevant national laws.
As a professional data and insight provider operating across Europe, Norstat applies appropriate technical and organisational measures to protect personal information, including encryption, firewalls, restricted access controls, and secure systems. All personal data is treated confidentially.
This Privacy Policy explains how Norstat Expert Network collects, processes, stores, shares and protects your personal data.
Last updated: May 2026
1. Who We Are
The Norstat Expert Network is a B2B respondent platform operated by Norstat AS, connecting professionals and decision-makers with paid market research opportunities, including surveys, interviews, communities and consultancy-based insight projects.
For the purposes of applicable data protection laws, Norstat AS acts as the data controller for the personal data processed through the platform.
2. Types of Personal Data We Collect
Depending on your interaction with the Norstat Expert Network, we may collect and process the following categories of personal data:
- Name
- Email address
- Telephone number
- Job title and professional background
- Company name and industry
- Country and region
- Professional expertise and areas of specialization
- Survey participation data and research responses
- IP address and device-related information
- Website usage and interaction data
- Communication preferences
- Support requests and correspondence
In certain research projects, we may ask for additional information to determine eligibility for participation. Providing such information is always voluntary.
3. Purpose of Processing
We process personal data for the following purposes:
- To create and manage your Expert Network account
- To identify and match you with relevant research opportunities
- To invite you to participate in surveys, interviews, advisory projects and research communities
- To compensate or reward participation where applicable
- To improve targeting and reduce irrelevant invitations
- To communicate with you regarding projects, platform updates or support requests
- To prevent fraud, verify identity and maintain platform integrity
- To analyze and improve our services, platform functionality and user experience
- To comply with legal and regulatory obligations
- To maintain information security and system administration
Research responses provided during studies are generally combined with responses from other participants and shared with clients in aggregated or anonymized form for statistical and research purposes only.
4. Legal Basis for Processing
Norstat processes personal data only where there is a valid legal basis under applicable privacy legislation.
Depending on the activity, processing may be based on:
Consent
We process personal data based on your consent when:
- You register for the Norstat Expert Network
- You agree to participate in surveys or interviews
- You opt in to newsletters, cookies, location tracking or marketing communications
- You provide optional or sensitive information voluntarily
You may withdraw your consent at any time.
Legitimate Interests
We may process personal data where necessary for our legitimate business interests, including:
- Operating and improving the Expert Network platform
- Matching experts with relevant projects
- Fraud prevention and identity verification
- Ensuring platform security and quality control
- Managing client relationships and research operations
- Conducting analytics and service improvements
We ensure that such processing does not override your rights and freedoms.
Contractual Necessity
Certain processing activities are necessary to fulfil contractual obligations or to provide requested services, including:
- Managing participation in research projects
- Processing incentives or rewards
- Providing access to platform functionality and support
Legal Obligations
We may process personal data where required to comply with legal or regulatory obligations.
5. Sharing Information with Third Parties
Norstat does not sell or disclose personally identifiable information to third parties without an appropriate legal basis and, where required, your explicit consent.
We may share personal data with trusted third-party service providers and subprocessors who assist us in operating the platform and delivering services, including providers for:
- Helpdesk and customer support services
- Fraud prevention and identity verification
- Hosting and IT infrastructure
- Analytics and website functionality
- CRM and communication systems
Current subprocessors may include:
|
Subprocessor
|
Service
|
Location
|
|---|---|---|
|
Amazon
|
Database Hosting
|
EU
|
Where data is transferred outside the European Economic Area (EEA), appropriate safeguards are implemented in accordance with GDPR requirements.
6. Cookies and Tracking Technologies
The Norstat Expert Network website and related services use cookies and similar technologies to improve functionality, analyze website usage and enhance user experience.
Cookies may be used for:
- Essential website functionality
- Analytics and performance measurement
- Survey targeting and research purposes
- Fraud prevention and security
Analytics tools such as Google Analytics 4 and LinkedIn Insight Tag may be used only where appropriate consent has been provided.
Users can manage or withdraw cookie consent through browser settings or cookie preferences.
7. Mobile App and Location Data
Where applicable, the Norstatpanel app may collect location data and app identifiers only with explicit user consent.
Location data:
- Is used solely for anonymous survey targeting and statistical analysis
- Is anonymized and deleted after 60 days
- Is never used for advertising purposes
Users may revoke consent or delete location data directly through the app settings.
8. Data Retention
Personal data is retained only for as long as necessary to fulfil the purposes described in this Privacy Policy or to comply with legal obligations.
As a general rule:
- Research project data linked to identifiable individuals is stored for up to six months after project completion
- Support ticket data may be stored for up to three years
- Expert Network profile information is retained for as long as you remain a member
If you close your account or withdraw consent, personally identifiable information will be deleted or anonymized unless retention is legally required.
9. Information Security
Norstat maintains strict physical, technical and organizational security measures to protect personal data against unauthorized access, disclosure, loss or misuse.
Security measures include:
- Encryption
- Secure hosting environments
- Access controls
- Internal security policies
- Continuous monitoring and auditing
Norstat complies with recognized industry standards and maintains certifications including:
- ISO 9001:2015
- ISO 27001
- ISO 20252
Norstat also follows the ESOMAR International Code on Market, Opinion and Social Research and Data Analytics.
10. Your Rights
Under applicable privacy laws, you may have the right to:
- Access your personal data
- Correct inaccurate or incomplete data
- Request deletion of your data
- Restrict or object to processing
- Withdraw consent at any time
- Request data portability
- Lodge a complaint with a supervisory authority
You may also update or modify certain information directly through your account settings where available.
11. Contact Information
If you have questions regarding this Privacy Policy or the processing of your personal data, you may contact:
Norstat AS
Fridtjof Nansens plass 5
0160 Oslo, Norway
Data Protection Officer:
dpo@norstatgroup.com
Based on GDPR/privacy policy structuring references and legal basis wording examples.
Ready to Share your Expertise with leading Decision-Makers?
Join our verified network of professionals and contribute to high-impact B2B research that drives real-world strategy, innovation, and policy. Your insights. Trusted. Rewarded. Respected.