Privacy Policy for Oslo Congress Centre

Privacy Policy for Oslo Congress Centre

This privacy policy is continuously updated and was last revised on 26th of August 2026.

It explains why and how Oslo Kongressenter Folkets Hus AS collects and uses personal data, as well as your rights.

This privacy policy applies to Oslo Kongressenter Folkets Hus AS (org. no. 911 791 366).

If you have any questions regarding this privacy policy or the data we collect, you can contact us at booking@oslo.kongressenter.no.

1. General Information

Below, you will find a brief overview of how your personal data will be processed when you visit our website. The term “personal data” includes all information that can be used to identify you personally. As the operator of this website, Oslo Kongressenter Folkets Hus AS understands the importance of handling your personal data confidentially. We assure you that we will comply with all legal requirements for data privacy and security at all times.

2. Controller Responsible for Data Collection on the Website

The data processed on this website is managed by the website owner, whose contact information is available under “Information about the Controller” in this privacy policy.

3. Who Has Access to Your Personal Data?

Information provided via forms on this website and/or in communication with us by phone or email is used by employees of Oslo Kongressenter Folkets Hus AS. Personal data is not shared with external third parties.

Information about how you use the website will also be tracked and stored in the various analytics tools that we use, provided that you have given your consent. The information is processed in de-identified and aggregated form. De-identified means that we cannot trace the information we collect back to an individual user. 

We collect the full IP address, but the IP address is automatically anonymised by removing part of it and replacing it with a new code. Aggregated means that all data is combined into a group and is not processed individually. 

You will find detailed information about our analytics tools and the information collected further down in this privacy policy.

4. How We Use Your Personal Data

Some of your information is stored to ensure the proper and reliable operation of the website. Other data is stored for analysis purposes to understand how you use the website.

We process your personal data in accordance with applicable privacy regulations. This means that user data is only processed in the following cases:

  • When required by law (in accordance with Article 6(1)(c) of the GDPR).
  • When necessary to perform a contract (in accordance with Article 6(1)(b) of the GDPR).
  • When processing is in line with our legitimate interests (in accordance with Article 6(1)(f) of the GDPR).
  • When the user has provided consent (in accordance with Article 6(1)(a) of the GDPR).

We do not collect personal data such as your name, address, phone number or email address unless you voluntarily provide this information, for example by submitting a booking request or chat request, or by contacting us by email or phone.

We will only use this data to contact you regarding your existing customer relationship with us or regarding a specific inquiry from you, such as a booking request.

5. How Long We Store Your Data

Unless a more specific retention period is provided in this privacy policy, your personal data will be retained by us until the purpose for which it was collected no longer applies. If you submit a legitimate request for deletion or withdraw your consent to data processing, your data will be deleted unless we have other legally permissible reasons to retain your personal data (for example, retention periods under tax or purchase law). In such cases, the data will be deleted once those reasons no longer apply.

6. Legal Basis for Data Processing on This Website

If you have given your consent to data processing, we will process your personal data in accordance with applicable privacy laws, including Article 6(1)(a) of the GDPR. If you have specifically consented to the transfer of personal data to third countries, the processing will also be based on relevant legal provisions, such as Article 49(1)(a) of the GDPR. If you have consented to the storage of cookies or access to information on your device (for example through device fingerprinting), the processing will also comply with applicable laws and regulations. You may withdraw your consent at any time. 

If your data is necessary to perform a contract or to take steps before entering into a contract, the processing will be carried out in accordance with Article 6(1)(b) of the GDPR. We will also process your data in accordance with Article 6(1)(c) of the GDPR if such processing is necessary to comply with a legal obligation. We may also process your data on the basis of our legitimate interests, in accordance with Article 6(1)(f) of the GDPR. Further information about the specific legal bases for processing is provided in the relevant sections of this privacy policy.

7. Information about the Controller (the Responsible Data Processor)

The party responsible for data processing on this website is:

Oslo Kongressenter Folkets Hus AS
Address: Youngs gate 21, 0181 Oslo
Email: booking@oslo.kongressenter.no
Phone: (+47) 90 70 99 99

8. Your Rights Regarding Your Personal Data

You have the right to receive information about the source, recipients and purposes of the personal data stored about you, free of charge. You also have the right to request correction or deletion of your data. If you have given consent to the processing of your data, you have the right to withdraw this consent at any time. The withdrawal will affect all future processing of your data. In addition, you have the right to request restriction of the processing of your data where the circumstances warrant it. You also have the right to lodge a complaint with the competent supervisory authority.

If you wish to exercise any of the rights described above, you can email us at booking@oslo.kongressenter.no. You can also send a written request to Oslo Kongressenter Folkets Hus AS, Youngs gate 21, 0181 Oslo, or call us at +47 90 70 99 99.

9. How Your Personal Data Is Stored

9.1 General

Our website is built using the WordPress content management system. When you visit the website, your device’s browser automatically sends information to our server, where it is temporarily stored in a log file. We have no control over this. The following information is automatically recorded and stored until it is deleted:

  • The IP address of the device requesting access
  • The date and time of access
  • The name and URL of the file accessed
  • The website/application used to access it (referrer URL)
  • The browser you use and, where applicable, your computer’s operating system, as well as the name of your access provider

Processing of the IP address is based on Article 6(1)(f) of the GDPR. Our legitimate interest in collecting the data includes ensuring a smooth connection, an optimal user experience, and assessing system security and stability.

We also use cookies, tracking tools, targeting methods and social media tracking codes on our website. You will find a detailed explanation of these tools and procedures, and how your data is used for these purposes, in the sections below on our online presence, website optimisation, and the integration of services and third-party content.

9.2 Inquiries

When you share information with us, for example through a contact form, a booking or another type of inquiry, the information is stored in our customer and business system, Microsoft Dynamics 365, together with SharePoint and OneNote. This system stores data in accordance with the Norwegian Personal Data Act and the GDPR. Read more about Microsoft Dynamics and the GDPR:

https://learn.microsoft.com/en-us/dynamics365/customer-insights/journeys/privacy

https://techcommunity.microsoft.com/blog/onedriveblog/gdpr-compliancy-with-onedrive-and-sharepoint/191126

For different types of inquiries, we store the following personal data about you:

  • Inquiries submitted through the booking form
    Name, email address, phone number and company (if provided).
  • Email inquiries sent to one of our published email addresses
    Your email address and any other personal data you have provided in the email.
  • Telephone inquiries
    Your phone number and any other personal data you have provided during the call.

10. Marketing and Analytics Tools

10.1 Google Tag Manager

This website uses Google Tag Manager. The provider is Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland.

Google Tag Manager is a tool that allows us to integrate tracking technologies and other tools into our website. Google Tag Manager does not create user profiles, store cookies or conduct independent analyses. It only functions as a platform for managing and activating the integrated tools. However, Google Tag Manager collects your IP address, which may also be transmitted to Google’s parent company in the USA.

The use of Google Tag Manager is based on Article 6(1)(f) of the GDPR. As the website operator, we have a legitimate interest in the simple and efficient integration and management of various tools on our website. When required consent has been obtained, processing is carried out in accordance with Article 6(1)(a) of the GDPR, provided that the consent includes the storage of cookies or access to information on the user’s device (for example, device fingerprinting). You may withdraw this consent at any time.

10.2 Google Analytics

We use Google Analytics on this website. This is a web analytics tool provided by Google Ireland Limited (“Google”), Gordon House, Barrow Street, Dublin 4, Ireland. Google Analytics allows the website operator to analyse visitor behaviour patterns on the website. This includes information such as the pages visited, time spent on the pages, the operating system and the user’s geographical location. The data is collected and assigned to a unique user ID linked to the visitor’s device.

Google Analytics also allows mouse clicks, scrolling movements and other interactions on the website to be recorded. To improve data collection and analysis, Google Analytics uses various modelling methods and machine-learning technologies.

Google Analytics uses technologies such as cookies or device fingerprinting to identify and analyse user behaviour patterns. The information collected by Google is generally transmitted to servers in the USA and stored there.

We base our use of Google Analytics on your consent, in accordance with Article 6(1)(a) of the GDPR. You may withdraw this consent at any time.

Data is transferred to the USA in accordance with the European Commission’s Standard Contractual Clauses (SCCs). You can find details here: https://business.safety.google/adscontrollerterms/sccs/.

10.3 Google Ads

This website uses Google Ads, an online marketing programme provided by Google Ireland Limited (“Google”), Gordon House, Barrow Street, Dublin 4, Ireland.

Google Ads enables advertisements to be displayed in Google’s search engine or on third-party websites when users search for specific keywords on Google (keyword targeting). It also enables targeted advertising based on user data held by Google, such as location data and interests (audience targeting). As the data processor, we analyse this data quantitatively, including which keywords resulted in our advertisements being displayed and the number of clicks on each advertisement.

The use of these services is based on your consent in accordance with Article 6(1)(a) of the GDPR. You may withdraw this consent at any time.

Data transfers to the USA are based on the European Commission’s Standard Contractual Clauses (SCCs). For details, please see: https://policies.google.com/privacy/frameworks and https://privacy.google.com/businesses/controllerterms/mccs/.

10.4 DoubleClick

This website uses Google DoubleClick. The provider is Google Ireland Limited (“Google”), Gordon House, Barrow Street, Dublin 4, Ireland (hereinafter referred to as “DoubleClick”).

DoubleClick is used to show you advertisements tailored to your interests across the Google network. Advertisements can be tailored to the viewer’s interests using DoubleClick. For example, our advertisements may appear in Google search results or in banners associated with DoubleClick.

In order for DoubleClick to show interest-based advertisements to users, it must be able to identify individual visitors and associate the websites they visit, clicks and other information about usage patterns with them. For this purpose, DoubleClick uses cookies or similar recognition technologies (for example, device fingerprinting). The recorded information is compiled into a pseudonymous user profile so that the individual user can receive targeted advertising.

The use of these services is based on your consent in accordance with Article 6(1)(a) of the GDPR. You may withdraw this consent at any time.

For more information about how to opt out of advertisements displayed by Google, please see the following links: https://policies.google.com/technologies/ads and https://myadcenter.google.com/personalizationoff.

10.5 Google Signals

If you have consented to performance and statistics cookies through our consent solution (in accordance with Article 6(1)(a) of the GDPR), we will also implement the Google Signals extension in Google Analytics. The provider of this service is Google LLC (formerly Google Inc.), headquartered at 1600 Amphitheatre Parkway, Mountain View, CA 94043, USA. In the EU, the service is provided by Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland, hereinafter referred to as Google.

Google Signals provides Google Analytics (see the Google Analytics section above) with additional information, including demographic data and interest categories relating to Google users who have enabled personalised advertisements in their settings. Google combines this information with its own signals to analyse behaviour across multiple devices. However, Google Analytics only generates this data in the form of aggregated and anonymised reports. These reports provide insights into general behaviour patterns without making it possible to identify individuals.

For this purpose, Google Analytics creates specific audiences (known as Google Audiences), which the Google Ads advertising platform can use as a basis for displaying advertisements across devices. This allows Google to integrate advertising across various platforms, including search engines, YouTube and other Google products, as well as third-party websites.

If you do not wish to allow the use of Google Signals, you can withdraw any marketing consent you have previously given in the cookie settings and disable personalised advertisements through your Google settings: https://adssettings.google.com/

For further information about Google Signals and Google’s privacy practices, please see the following links:

https://support.google.com/analytics/answer/7532985

https://policies.google.com/privacy?hl=en

10.6 Microsoft Advertising

This website uses Microsoft Advertising, an online marketing programme provided by Microsoft Corporation, One Microsoft Way, Redmond, WA 98052-6399, USA.

Microsoft Advertising enables advertisements to be displayed in Microsoft’s search engines (including Bing, Yahoo and DuckDuckGo) or on third-party websites when users search for specific keywords in one of Microsoft’s search engines (keyword targeting). It also enables targeted advertising based on user data held by Microsoft, such as location data and interests (audience targeting). As the data processor, we analyse this data quantitatively, including which keywords resulted in our advertisements being displayed and the number of clicks on each advertisement.

The use of these services is based on your consent in accordance with Article 6(1)(a) of the GDPR. You may withdraw this consent at any time.

Any transfer of data from Microsoft Advertising to the USA is based on the European Commission’s Standard Contractual Clauses (SCCs). For details, please see: https://policies.google.com/privacy/frameworks and https://privacy.google.com/businesses/controllerterms/mccs/.

10.7 Matterport

Our website links to Matterport presentations of some of our venues. Matterport is an interactive 3D presentation solution that allows visitors to take a closer look at the layout, design and space available in our venues. The provider is Matterport, which is part of CoStar Realty Information, Inc.

When you click on a Matterport link, the Matterport solution opens. When Matterport is used, technical information and usage data may be processed, including an anonymised IP address, city and country information derived from the anonymised IP address, browser, operating system, device type, screen size, language settings, time, time zone and the actions you take within the Matterport presentation.

According to Matterport, Matterport Showcase does not set or read cookies for visitors who are not signed in to a Matterport account. However, the solution may use Local Storage in the browser to store user preferences, such as the selected unit of measurement or whether an information message has been dismissed. If the user is signed in to a Matterport account, Matterport may use a session cookie and associate the use of the service with the user’s Matterport ID.

We use Matterport to present our venues in a more visual and interactive way, making it easier for visitors to assess their layout and suitability. The processing is based on Article 6(1)(f) of the GDPR. As the website operator, we have a legitimate interest in presenting our venues in an informative and user-friendly manner.

When required consent has been obtained, processing is carried out in accordance with Article 6(1)(a) of the GDPR, provided that the consent includes the storage of or access to information on the user’s device. You may withdraw this consent at any time.

Personal data processed by Matterport/CoStar may be transferred to countries outside the EU/EEA, including the USA. You can find more information about how Matterport and CoStar process personal data in their privacy notice: https://www.costar.com/about/privacy-notice

10.8 Meta Pixel

This website uses the Facebook Pixel to measure the conversion rate of visitor activity. The provider of this service is Meta Platforms Ireland Limited, 4 Grand Canal Square, Dublin 2, Ireland (hereinafter referred to as “Facebook”). According to Facebook, the data collected will also be transferred to the USA and other third countries.

This tool enables visitors to be tracked after they have been redirected to our website by clicking on one of our Facebook advertisements. This allows us to analyse the effectiveness of our Facebook advertisements for statistical and market analysis purposes and to optimise future advertising campaigns.

For us as the operator of this website, the data collected is anonymous, and we are unable to draw conclusions about the identity of users. Facebook stores and processes the information in a way that makes it possible to link it to the relevant user profile. Facebook may then use the data for its own promotional purposes in accordance with Facebook’s Data Policy. This allows Facebook to display advertisements both on Facebook pages and outside Facebook. As the operator of this website, we have no control over how such data is used.

The use of these services is based on your consent in accordance with Article 6(1)(a) of the GDPR. You may withdraw this consent at any time.

Data transfers to the USA are based on the European Commission’s Standard Contractual Clauses (SCCs). You can find more information here:

https://www.facebook.com/privacy/policy/?entry_point=facebook_page_footer

https://business.safety.google/adscontrollerterms/sccs/

When personal data is collected on this website using the Meta tool and forwarded to Facebook, we and Meta Platforms Ireland Limited, 4 Grand Canal Square, Grand Canal Harbour, Dublin 2, Ireland, are joint controllers for this processing in accordance with Article 26 of the GDPR. Our joint responsibility is limited to collecting the data and forwarding it to Facebook.

We are responsible for providing privacy information when the Facebook tool is used and for ensuring that the tool is implemented on our website in compliance with data protection requirements. Our obligations are set out in a joint processing agreement. The wording of the agreement is available here: https://www.facebook.com/legal/controller_addendum. Facebook is responsible for the data security of Facebook products. You may exercise your rights relating to data processed by Facebook by contacting Facebook directly. If you choose to exercise your rights through us, we will forward your request to Facebook in accordance with our obligations.

You can find further information about the protection of your privacy on Facebook in Facebook’s privacy policy: https://www.facebook.com/privacy/policy/?entry_point=facebook_page_footer.

You can also disable the “Custom Audiences” remarketing feature in the ad preferences section at https://accountscenter.facebook.com/ad_preferences. You must be signed in to Facebook to do so.

11. Tools and Third-Party Providers

11.1 Vimeo

We use plugins from the Vimeo video portal. This service is provided by Vimeo Inc., 555 West 18th Street, New York, NY 10011, USA.

When you visit one of our web pages containing a Vimeo video, a connection is established with Vimeo’s servers. Vimeo then receives information about which of our pages you have visited, as well as your IP address. Depending on the settings and whether you are signed in to Vimeo, Vimeo may also use cookies and similar technologies to collect additional data about user behaviour.

We use Vimeo to make our digital presentation more engaging and user-friendly. If you have given your consent, this use is based on Article 6(1)(a) of the GDPR. You may withdraw this consent at any time. If consent has not been obtained, the service is used in accordance with Article 6(1)(f) of the GDPR.

Data is transferred to the USA on the basis of the European Commission’s Standard Contractual Clauses (SCCs) and, according to Vimeo, “legitimate business interests”. You can read more about this and about how Vimeo handles user data here: https://vimeo.com/privacy.

11.2 Google Maps

We use the Google Maps service on this website. This service is provided by Google Ireland Limited (“Google”), Gordon House, Barrow Street, Dublin 4, Ireland.

In order to use the Google Maps features, your IP address must be processed and stored. This information is generally transmitted to Google’s servers in the USA and stored there. We have no control over this data transfer. When Google Maps is activated, Google may also use Google Fonts to ensure the consistent display of fonts. When you open Google Maps, your browser loads the necessary fonts into its cache so that text and typefaces are displayed correctly.

We use Google Maps to present our online content in an appealing way and to make it easy for visitors to find the locations listed on our website. This constitutes a legitimate interest in accordance with Article 6(1)(f) of the GDPR. When required consent has been obtained, processing is carried out in accordance with Article 6(1)(a) of the GDPR, provided that the consent includes the storage of cookies or access to information on the user’s device (for example, device fingerprinting). You may withdraw this consent at any time.

Data transfers to the USA are based on the European Commission’s Standard Contractual Clauses (SCCs). You can find details here: https://commission.europa.eu/law/law-topic/data-protection/international-dimension-data-protection/standard-contractual-clauses-scc_en. For more information about how user data is handled, please see Google’s privacy policy: https://policies.google.com/privacy?hl=en.

12. Data Security

All personal data you transmit is secured using the recognised and reliable SSL (Secure Socket Layer) standard. SSL is a well-known and trusted standard used in online banking, for example. Signs of a secure SSL connection include “https://” in the browser’s address bar and the padlock symbol in the browser.

This website uses technical and organisational security measures to ensure that all personal information provided is protected against manipulation, loss or unauthorised access by third parties. Our security protocols are continuously updated in line with technological developments.