This Privacy Policy explains how SnowVolt (“SnowVolt”, “we”, “us”, “our”) collects and uses personal data when you visit our website, sign up for or use the Alumanel platform, or contact us. We are committed to protecting your privacy in accordance with the EU General Data Protection Regulation (GDPR) as implemented in Norway by the Personal Data Act (personopplysningsloven).
1. Who we are (data controller)
SnowVolt, organisation number 937003315, registered in Norway, is the data controller for the personal data described in this policy that we process for our own purposes.
Contact for privacy matters: hello@alumanel.com
2. Controller vs. processor — an important distinction
Alumanel is a business tool that our customers (organisations) use to run their own IT support and service desks.
- When you use our website, or when your organisation sets up an account and we handle billing and administration, we act as the controller and this policy applies.
- When our customers use Alumanel to process data about their own employees, users, or requesters (for example, support tickets and their contents), we act as a data processor on that customer's behalf. In that case, the customer is the controller and their own privacy policy governs. Questions about that data should go to the relevant organisation. Our handling of it is governed by our Data Processing Agreement.
3. Personal data we collect
Depending on how you interact with us, we may process:
a) Website visitors
- Technical data such as IP address, browser and device information, and pages visited.
- Information from cookies and similar technologies (see section 7).
b) Account holders and users (agents, administrators)
- Name, work email address, and login credentials.
- Organisation/company name and role.
- Authentication data, including multi-factor authentication settings.
- Usage and activity within the platform.
c) People who contact us
- Name, email address, company, and the content of your message when you use a contact form or email us. We send you a confirmation of receipt and use the details to respond.
d) Billing
- Billing contact details and subscription information. Card payments are handled by our payment provider (Stripe); we do not store full card numbers.
4. Why we process personal data and our legal basis
- Provide, operate, and secure the website and platform — performance of a contract (Art. 6(1)(b)); legitimate interests (Art. 6(1)(f)).
- Create and administer accounts and authenticate users — performance of a contract (Art. 6(1)(b)).
- Process payments and manage subscriptions — performance of a contract (Art. 6(1)(b)); legal obligation (Art. 6(1)(c)).
- Respond to enquiries and provide support — legitimate interests (Art. 6(1)(f)); performance of a contract.
- Keep accounting records — legal obligation under the Bookkeeping Act (bokføringsloven) (Art. 6(1)(c)).
- Improve and secure our services, prevent abuse — legitimate interests (Art. 6(1)(f)).
- Non-essential cookies / analytics — consent (Art. 6(1)(a)).
Where we rely on legitimate interests, we have assessed that our interests are not overridden by your rights. You may object at any time (see section 11).
5. How we share personal data
We do not sell personal data. We share it only with:
- Service providers (sub-processors) who help us run Alumanel, under contracts that require them to protect the data (see section 6);
- Professional advisers (e.g. accountants, lawyers) where necessary;
- Authorities where required by law;
- Successors in the event of a merger, acquisition, or reorganisation.
6. Sub-processors and service providers
We engage a small number of trusted third-party service providers to deliver the Service, including for database hosting, transactional email delivery, network and security infrastructure, application hosting, and payment processing. Each is bound by a data processing agreement requiring them to protect personal data to a standard consistent with the GDPR, and we give 30 days' notice before adding a new one.
An up-to-date list of sub-processors, including their identity and data location, is available on request at hello@alumanel.com.
7. Cookies and similar technologies
We use cookies and similar technologies to operate the website and, with your consent, to understand usage. Under the Norwegian Electronic Communications Act (ekomloven), storing or reading information on your device requires your consent, except where strictly necessary to provide a service you have requested.
- Strictly necessary cookies are used to run the site and keep you signed in.
- Analytics / non-essential cookies are only set with your consent, which you can withdraw at any time by contacting us.
The website today sets only strictly necessary cookies. If that changes, we will add a consent mechanism before any non-essential cookie is set.
8. International transfers
Some of our providers process data outside the EU/EEA, including in the United States. Depending on the region in which a customer's workspace is provisioned, customer data may also be hosted in the United States.
Where personal data is transferred outside the EEA, we rely on appropriate safeguards under GDPR Chapter V, in particular the EU Standard Contractual Clauses (SCCs) and, where relevant, additional technical and organisational measures. You can request more information about these safeguards using the contact details in section 1.
9. How long we keep personal data
We keep personal data only as long as necessary for the purposes described, or as required by law:
- Account data — for the duration of the customer relationship and a reasonable period afterwards.
- Contact/enquiry data — for as long as needed to handle your request and for a reasonable follow-up period.
- Accounting records — for the period required by the Bookkeeping Act (bokføringsloven) (generally five years).
- Website/technical logs — for a limited period for security and troubleshooting.
When personal data is no longer needed, we delete or anonymise it.
10. How we protect personal data
We use appropriate technical and organisational measures, including tenant isolation, encryption of data in transit, access controls, role-based permissions, and multi-factor authentication for administrators. We review our measures and work only with providers that offer adequate safeguards.
11. Your rights
Under the GDPR you have the right to:
- Access the personal data we hold about you;
- Rectify inaccurate or incomplete data;
- Erase data (“right to be forgotten”) in certain circumstances;
- Restrict or object to processing in certain circumstances;
- Data portability — receive your data in a structured, machine-readable format;
- Withdraw consent at any time, where processing is based on consent.
To exercise your rights, contact hello@alumanel.com. We will respond within the time limits set by the GDPR (normally within one month). If your request concerns data we process on behalf of a customer (as a processor), we will refer you to, or assist, the relevant organisation.
12. Complaints
If you believe we process your personal data unlawfully, you may lodge a complaint with the Norwegian Data Protection Authority:
Datatilsynet — www.datatilsynet.no · Postboks 458 Sentrum, 0105 Oslo.
We would appreciate the chance to address your concern first — please contact us before, or alongside, contacting Datatilsynet.
13. Children
The Service is a business tool and is not directed at children. We do not knowingly collect personal data from children.
14. Changes to this policy
We may update this Privacy Policy from time to time. The “Last updated” date shows the latest version. For material changes, we will provide a more prominent notice where appropriate.
15. Contact
SnowVolt · Org. nr. 937003315
Norway
Email: hello@alumanel.com
Last updated: 7 September 2026