TLDR: Personal data is your data. Atlas does not own your data, nor do we sell it to others or use it for advertising. We will not read or access your private content without your consent unless required of us by law.
Last updated: 2025-05-24
Atlas AS safeguards your personal integrity
Atlas AS, (hereafter referred to as "Atlas", “we” “us” and “our”) respects your privacy and we are committed to maintaining a high level of security and integrity regarding your personal data. Atlas is also committed to ensuring that the processing of your personal data is carried out in accordance with applicable data protection legislation.
Scope of this privacy policy
This Privacy Policy describes how Atlas, as a data controller, processes your personal data when you use our products, services, software and applications (our “Applications”), when you interact with us through mail, phone or social media or when you use or visit our website www.atlas.co (the “Website”). Our Applications, Website and other online and offline offerings are collectively referred to as our “Services”.
This Privacy Policy also describes your rights and choices in relation to your personal data.
Controller and data protection officer
Atlas (see full name and contact details in the end of the policy) is the data controller of the processing of your personal data described in this Privacy Policy. We are therefore responsible for ensuring that your personal data is processed correctly and securely in accordance with applicable legislation.
Atlas has appointed a Privacy Contact. The Privacy Contact is responsible for, among other things, monitoring and ensuring that Atlas’ processing of your personal data is carried out in accordance with applicable legislation. You can contact the Privacy Contact at contact@atlas.co.
What personal data do we process?
Personal data means any information that directly or indirectly relates to a natural, living person. Accordingly, personal data is information about you and your person, e.g. your name, contact information, pictures of you and your IP-address. Thus, content you upload to our Services, for example in the workspaces, may contain personal data that we process as a part of our services.
Processing means any operation performed on personal data, such as collection, storage, use, adaption, or disclosure.
We process the following categories of your personal data:
- User content: when you use Atlas, you can upload content like maps, layers, images, comments, and files – some of which might include personal data. This is your data. We only use it to run the service, and we don’t access it without a valid reason. We also store your name and email so we can manage your account and help you if you reach out.
- User data: your account name, login details, security question, optional profile photo, user settings, total storage options and used storage;
- Device data: IP-address, internet connection, operating system, time zone, device location, MAC address, screen resolution, unique device IDs, network and device performance, language settings, web browser settings, mobile carrier, internet service provider and equipment used;
- Usage data: cookie information, cookie identifies and technical information we collect regarding your use of our Applications by analysing your actions within our Applications, how you interact with the Applications and Website, which Services you use and frequency and duration of use, links you click and pages you visit before, during and after using the Services;
- Technical data logs: technical information generated through your use of our Webpage and services, such as response times, dates and times of usage and any encountered errors or crashes;
- Transaction data: information which is required for processing of a payment of your subscription to our Services such as bank account information, invoicing details, transaction history, receipts, purchase orders; and
- Communication data: information contained in your communications with us. For example, the information you provide us in any support messages or surveys you participate in, as well as any metadata related to communication.
Specific information regarding user data
User data is information and datasets that you enter into or upload to our Services. User data may contain personal data. Processing of your User data is necessary for us to fulfil our contract with you regarding the Services, provided that we have entered into a contract with you directly. If you are accessing the services through your employer or company, we are a data processor.
We will not process your User data (or other personal data) for purposes other than those set out in this policy without your consent, unless we are required to do otherwise by law or binding orders from government authorities or agencies. This means that we do not access or disclose your User data without your prior consent or unless it is required of us to fulfil our legal obligations, as described in our Terms and Conditions.
However, information about your usage of our Services may be used for tailored communication, eg. for product updates and other relevant material. You can always opt-out of such communications. Please read more about our processing of your personal data under section “Why do we process your personal data?”. For more information regarding our security measures, please read further below, under section “Security of your Personal Data”.
Why do we process your personal data?
Personal Data, such as data about your usage of the product, may only be collected and used for specified, explicit and legitimate purposes and may not be processed in a manner that is incompatible with those purposes. Atlas processes your personal data for the following purposes:
- To administer and provide our Services;
- To analyse how users use our Services;
- To inform or communicate about our Services;
- To improve and personalize our Services;
- To comply with legal obligations;
- To analyse risks to our IT environment or business;
- To communicate with you when you contact us for any reason;
- To establish, exercise and defend legal claims;
- For administration in connection with an acquisition, restructuring or similar measures;
- To anonymise and aggregate data; and
- For other specific purposes to which you have given your consent from time to time.
In the tables below, you are provided with more information about our processing of your personal data when we are a data controller. There you can find details regarding which categories of personal data are processed in relation to each specific purpose, what legal basis we use for the processing and information regarding how long your personal data is retained.
To analyse the use of our Services
We process your personal data to conduct market and user analyses, for example by analysing statistics based on information gathered through our Services. The results of our analyses are used to improve, develop, replace and create new and existing services or functionalities, and to ensure an optimal user experience. For example, by way of analysing how end users interact with our Webpage and Applications, we can improve our user interface to make it more intuitive and helpful, or create new features that increase the value of the content we deliver or improve the quality of life when using our Services.
| Categories of Data | Legal Basis | Retention Time |
|---|---|---|
| User data, Usage data, Device data, Technical data | The processing is necessary for our legitimate interest to provide, improve, change or develop our current or new Services, or functionalities therein. | Your personal data is kept during the time you are a registered user of the Services. After this period, your data is aggregated so that identification is no longer possible. |
To administer and provide the Services to you as a user
We process personal data to administer our relationship with our users, including storing user data, using it to provide the Services, sending information in an electronic format (not marketing) and storing any potential agreements and to process payments.
| Categories of Data | Legal Basis | Retention Time |
|---|---|---|
| Contact information, User content, Transaction data, User data, Technical data, Device data | Processing is necessary to perform our contract with you as a direct end-user and to receive payments for our Services. | - Transaction data is kept for 7 years (per accounting laws). - Communication and administrative data is retained while you're an active user and for 12 months after. - User data stays until you remove it or delete your account. If linked to another user’s workspace, it may stay longer. - Data may be retained longer if needed for legal claims (e.g., a payment dispute). |
To inform and communicate with you about our Services
We process your personal data to communicate with you and inform you about Atlas and our Services, for example by sending you our newsletter, if you have opted in to such communications. In order to do so, we need to understand what services you would be interested in receiving more information regarding.
| Categories of Data | Legal Basis | Retention Time |
|---|---|---|
| Contact information, Usage data, Device data, Technical data, Communication data | Processing is necessary for our legitimate interest to market our Services. Marketing newsletters are sent based on your consent, unless they relate to product usage or related services. | Personal data is kept for 12 months from collection or last contact, whichever is later. You can opt out anytime via the contact details or unsubscribe link in the message. |
To improve and personalize our Services
We process your personal data in order to improve and personalize our Services. Based on information gathered through your use of our services and their content, we can analyse end-user patterns. For example, by studying how end users navigate our services, we can improve the user interface to make it easier and more intuitive.
| Categories of Data | Legal Basis | Retention Time |
|---|---|---|
| User data, Usage data, Device data, Technical data | Processing is necessary for our legitimate interests to provide, improve and develop our Services. | Personal data is kept while you are an active user and for 12 months after. After that, it is aggregated so that it can no longer be linked to you. |
To comply with legal obligations
In certain situations, we are required by law to process your personal data in certain ways. Such situations may for example be when we process your personal data to verify your identity when you contact us to exercise your rights as a data subject under applicable data protection law.
We also process your personal data as necessary to comply with our legal obligations relating to accounting, audits and taxes. This includes storing certain payment-related verifications for tax-declaration purposes for up to seven years.
We may also be required to share your personal data with government authorities. For example, if we are subject to a binding government request to disclose information, including personal data, for civil, administrative, criminal or national security purposes. In such events, the Atlas Privacy Contact carefully reviews each request to make sure it satisfies applicable laws.
| Categories of Data | Legal Basis | Retention Time |
|---|---|---|
| Transaction data, Contact information, User data, Communication data, User content | Required to comply with legal obligations under applicable legislation | Data is kept as long as necessary to meet legal obligations. – Transaction data is kept for 7 years (per the accounting act). – Data used to verify your identity is stored for the duration of your request and deleted afterwards. – Data may be retained longer if needed to handle legal claims (e.g., disputes). |
To analyse risks to our IT environment or business
In order to ensure that our IT environment and business is secure from internal and external interruptions, threats or incidents we process certain personal data. For example, in relation to denial-of-service attacks and internal access logs.
| Categories of Data | Legal Basis | Retention Time |
|---|---|---|
| Contact information, User data, Usage data, Device data, Technical data, Transaction data, Communication data | Processing is necessary for our legitimate interest of securing our IT and business environment. | Personal data is kept for 12 months. After that, it is aggregated so it can no longer identify you. Data may be retained longer if needed to handle legal claims (e.g., disputes). |
To communicate with you when you contact us for any reason
We process your personal data when you contact us through any means (e.g., phone, email, social media or by letter). We process your data in order to store and answer your communication, for example general questions or when you contact us in order to receive support.
| Categories of Data | Legal Basis | Retention Time |
|---|---|---|
| Contact information, User data, Usage data, Device data, Technical data, Communication data | Processing is necessary for our legitimate interest to handle and answer your communication. | Data is stored as long as needed for the matter at hand, plus 12 months. After that, it is erased. Aggregated or statistical info (e.g. reason for communication) may be retained. Data may be kept longer if needed for legal claims (e.g., in a dispute). |
To establish, exercise and defend legal claims
In case of dispute, we are entitled to process your data to establish, exercise or defend the legal claim.
| Categories of Data | Legal Basis | Retention Time |
|---|---|---|
| All categories of data, depending on the legal claim | Processing is necessary for our legitimate interest in establishing, exercising, or defending legal claims. | Data is kept as long as necessary to manage legal claims and for any additional period required by law. |
For administration in connection with an acquisition, restructuring or similar measures
In case of a merger, divestiture, restructing, reorganization, dissolution or other sale or transfer of Atlas' assets, we may need to process your personal data in order to enable such transfer.
| Categories of Data | Legal Basis | Retention Time |
|---|---|---|
| All categories of data, except for User content | Processing is necessary for our legitimate interest in enabling mergers, divestitures, restructuring, reorganization, dissolution, or asset sales. | Data is processed as long as needed for the purpose. If transferred to a buyer/successor, Atlas will not retain it unless required for other lawful processing purposes outlined in this policy. |
To anonymize and aggregate data
We also process your personal data in order to create aggregated and anonymized data sets. These data sets cannot be used to identify you, either directly or indirectly together with other data, and therefore no longer constitute personal data. We use these anonymized data sets in order to analyse, research and develop our Services and business operations, as well as to find new customer segments.
| Categories of Data | Legal Basis | Retention Time |
|---|---|---|
| All categories of data, except for User content | Processing is necessary for our legitimate interest to improve our Services in compliance with data protection laws and privacy rights. | Data is anonymised, so no personal data is retained. |
Certain processing operations based on consent
In addition to the above-mentioned purposes, we may also process your personal data for certain specific purposes based on your explicit and informed consent. In such cases, the applicable purpose, concerned categories of data and retention times will be clearly explained to you at the time you provide your consent to the processing.
How long do we store your personal data?
Your personal data is stored as long as there is a need to preserve it in order to fulfil the purposes for which the data was collected in accordance with this Privacy Policy. Thereafter, your personal data will be deleted.
Contact information regarding company representatives is stored during such time the Company considers that the information is necessary to maintain the relationship with the company/organisation. Deletion shall take place when the Company becomes aware that the information is no longer adequate or relevant for the purpose, or at the request of the contact person.
More detailed information regarding retention times can be found above, in the tables under section “Why do we process your personal data”. For more further information regarding how long we store specific personal data, please contact us. Contact information is provided under section “Contact Information” below.
WITH WHOM DO WE SHARE YOUR PERSONAL DATA?
Atlas does not disclose personal data to third parties, except when necessary to fulfil a legal obligation or to fulfil our obligations to you, our customers and/or partners. Your personal data will not be sold to third parties for marketing purposes. Situations when your personal data may be disclosed to third parties are listed in the table below.
| Third Party | Reason for Third-Party Disclosure |
|---|---|
| Suppliers of cloud solutions | Data may be shared with cloud providers since Atlas stores information in cloud environments. |
| Suppliers and partners | Data may be shared with AI providers, consultants, and other service partners if required to fulfill their roles in supporting Atlas services. This includes support tools and technical integrations. |
| Authorities | Data may be disclosed to authorities when legally required. |
| Sale | If Atlas is sold or merges, personal data may be shared with the potential buyer as part of the transaction. |
Where do we process your personal data?
Atlas only stores and processes your personal data within the EU/EEA. We do not transfer your personal data to countries outside this area. This means your data is always handled under the protections and safeguards required by the GDPR. We work exclusively with providers that store and process data within the EU/EEA.
YOUR RIGHTS
A summary of your rights according to applicable legislation is set out in the table below.
| Right | Description |
|---|---|
| Right of access | You have the right to access your personal data and to obtain a copy of the personal data concerning you that is processed by the Company. |
| Right to rectification | If the personal data concerning you is inaccurate, incomplete or outdated, you have the right to have it corrected. |
| Right to erasure | You can request deletion of your personal data. Unless we have a legal basis to keep it, and it’s no longer needed for its original purpose, we will erase it. |
| Right to object | In certain cases, you can object to how we process your personal data. |
| Right to restriction of processing | In specific situations, you can request that we limit how we process your personal data. When restricted, we will only store the data and not use it for other purposes, unless legally required. |
| Right to data portability | If processing is based on consent or a contract, you can request your data in a machine-readable format and ask for it to be transferred to another controller. |
| Right to lodge complaints with an authority | If you’re in the EEA or UK, you can file a complaint with a supervisory authority, like the Norwegian Data Protection Authority (Datatilsynet), if you believe we’ve violated data protection laws. |
Security of your personal data
You should always be able to feel safe when you provide us with your personal data. Therefore, Atlas has implemented the security measures that are necessary to protect your personal data against unauthorised access, alteration and destruction. Atlas will not disclose your personal data, other than as expressly provided by this Privacy Policy.
Cookies
Atlas uses cookie-like techniques in order to provide certain functions on the Website and to improve the Applications and to deliver better and more personal Services. Atlas uses cookies in accordance with the Atlas' Cookie Policy.
Changes
Atlas reserves the right to change this Privacy Policy at any time. In the event of changes to this Privacy Policy, we will publish the amended Privacy Policy on the Website and in connection with our Services together with information on when the changes will come into effect and may also you in an appropriate manner.
Atlas AS
Contact: contact@atlas.co
Address: Rosenkrantz' gate 4, 0159 Oslo, Norway
