Privacy policy

Otman AS, org. no. 926425293, Kjeller, Nittebergsvingen 8, 2007.

For privacy questions, contact us at info@otman.no or +47 402 84 977.

The information we collect depends on how you use our services.

• Contact details such as name, company name, email address, phone number, and address.
• Transport and booking details such as pickup address, delivery address, return address, delivery date, time window, product or item details, customer comments, order notes, and service selections.
• Operational details such as driver information, subcontractor details, license plate, route distance, status updates, deviations, and proof-of-delivery or receipt attachments where relevant.
• Account details for platform users, including email, password hash, role, permissions, company membership, session records, language preference, profile details, and invite or password reset records.
• Technical and security data such as hashed IP address, hashed user agent, authentication events, rate-limit records, file metadata, and integration logs.
• Messages sent to or from us, including contact form messages, order emails, inbound email replies, and notification history.

We use personal data to respond to inquiries, provide quotes, create and manage transport or manpower assignments, coordinate deliveries, communicate with customers and partners, handle attachments and proof of delivery, operate user accounts, secure the platform, maintain accounting and business records, and improve our services.

We process personal data when it is necessary to perform a contract or take steps before entering into a contract, when we must comply with legal obligations such as accounting and tax requirements, when we have a legitimate interest in operating, securing, documenting, and improving our services, or when you have given consent where consent is required.

We only share personal data when it is needed to deliver or administer our services, comply with the law, protect our rights, or operate our systems securely.

• Transport partners, subcontractors, drivers, customers, and warehouses when needed to complete an assignment.
• IT, hosting, storage, email, map, and operational integration providers that process data on our behalf.
• Public authorities, accountants, advisors, or insurers when required by law or necessary for legitimate business purposes.

Some service providers may process data outside Norway or the EEA. Where this happens, we use appropriate safeguards such as EU standard contractual clauses or other approved transfer mechanisms.

We keep personal data for as long as it is needed for the purpose it was collected, to complete assignments, document transactions, handle claims, secure the platform, and meet legal obligations. Accounting records are normally retained for the period required by Norwegian bookkeeping rules. Order data may be anonymized or deleted when it is no longer needed for operational, legal, or documentation purposes.

We use technical and organizational measures to protect personal data, including access controls, role-based permissions, session handling, password hashing, logging, file type and size restrictions, and secure storage for attachments.

You may have the right to request access, correction, deletion, restriction, data portability, and objection to certain processing. If processing is based on consent, you can withdraw consent at any time. Requests are normally handled free of charge and within one month.

If you believe your privacy rights have been breached, contact us first. You also have the right to complain to the Norwegian Data Protection Authority, Datatilsynet.

Our website and platform may use necessary cookies or similar technologies to keep the site working, maintain login sessions, remember preferences, protect forms, and improve reliability. We do not use cookies to sell personal data.

We may update this policy when our services, systems, or legal obligations change. The latest version will be available on this page.