RockExchange / Privacy and cookies
Privacy and cookies
This page explains how rockexchange.no processes personal data, which cookies we use, and how you can change your choices.
1. Who is responsible
RockExchange is a product of Netpower Business Solutions AS (company reg. no. 990 648 085), part of Netpower IT Group, Stokkamyrveien 13, 4313 Sandnes, Norway. Netpower Business Solutions AS is the controller for rockexchange.no. Netpower IT Solutions AS (company reg. no. 982 375 681) is the processor.
Contact us at info@netpower.no or +47 51 95 80 00.
2. What we process, and why
We process the following data when you use the website:
- Server logs: IP address, URL and browser type. Kept for 14 days, for security and operations. Basis: legitimate interest.
- Contact form: name, email, phone, organisation and message, submitted through the embedded Pipedrive form on /en/contact-us/. Sent to Pipedrive for follow-up.
- Company visits (Leadfeeder): Before you have made a cookie choice, and also if you reject cookies, the website sends this to Leadfeeder without cookies: your IP address, the address of the page you are viewing (including any parameters in the URL), the page title, the page you came from (referrer), the time and a temporary ID that exists only in the browser’s memory while the page is open. Leadfeeder uses the IP address to work out which company the visit comes from. We use this to see which companies are interested in RockExchange and to follow up. Leadfeeder is provided by Dealfront Group GmbH, which is our processor. Basis: legitimate interest (GDPR art. 6(1)(f)). The cookies _lfa and _lfa_consent (1 year) are set only if you consent to marketing. You can object to this processing (GDPR art. 21): Opt out of Leadfeeder in this browser, or contact us at info@netpower.no.
3. Cookies
Necessary cookies make the website work. Leadfeeder shows us which companies visit us, based on the IP address and without cookies (see section 2). With your consent we also use cookies for statistics (Google Analytics), for marketing (the Leadfeeder cookies _lfa and _lfa_consent, which recognise repeat visits) and to show the contact form (Pipedrive).
| Name | Provider | Purpose | Duration | Category |
|---|---|---|---|---|
| np_consent | RockExchange | Stores your cookie choice | 12 months | Necessary |
| wordpress_*, wp-settings-* | WordPress | Only for logged-in editors | Session / 1 year | Necessary |
| np_ga | Distinguishes visitors | 2 years | Statistics | |
| np_ga_R07DNQM176 | Keeps the session (GA4 property G-R07DNQM176) | 2 years | Statistics | |
| _lfa | Leadfeeder | Recognises repeat visits from the same browser. Set only with your consent | 1 year | Marketing |
| _lfa_consent | Leadfeeder | Remembers that you have consented to the Leadfeeder cookie | 1 year | Marketing |
| ldfdr_opt_out | Leadfeeder / RockExchange | Remembers that you opted out of Leadfeeder. Set only when you opt out | Up to 10 years | Necessary |
| Form cookies from Pipedrive | Pipedrive | Session inside the embedded contact form | Session | Functional |
When you make a choice in the banner, we store it on our server so that we can document your consent: a random consent ID (the same as in np_consent), the time, the categories you chose, the language and a shortened hash of your browser’s identifier. Your IP address is not stored. The record is deleted after 24 months.
4. Third parties and transfers
We share data with these third parties:
- Google Ireland Ltd (Google Analytics). Data may be processed in the USA under the EU–US Data Privacy Framework.
- Leadfeeder, provided by Dealfront Group GmbH, Germany (EU), as our processor. Identifies companies from the IP address without cookies; the cookies _lfa and _lfa_consent are set only with your consent.
- Pipedrive OÜ, Estonia (EU).
5. Legal basis
Consent (GDPR Art. 6(1)(a) and section 3-15 of the Norwegian Electronic Communications Act) is the basis for cookies that are not necessary. Legitimate interest (Art. 6(1)(f)) is the basis for server logs and necessary cookies, and for Leadfeeder identifying companies from the IP address without cookies. Contract or legitimate interest is the basis when you send us an enquiry.
6. Your rights
You have the right of access, rectification, erasure, restriction and data portability, and you can object to the processing. You can withdraw your consent at any time. How to opt out of Leadfeeder: see section 2.
You can complain to the Norwegian Data Protection Authority (datatilsynet.no) if you believe we process your data unlawfully.
7. Changes
We may update this page when our services change. Last updated 13 October 2026.
