Data Privacy Policy for Bulk

1. Data Privacy at Bulk - Overview

This privacy policy explains how Bulk processes personal data about customers, business connections and visitors to our various sites and online platforms. In the following we will inform you what data is involved, how the data is processed and what rights you have in this regard.

Bulk is a leading provider of sustainable digital infrastructure in the Nordics. We are an industrial investor, developer and operator of industrial real estate, data centers and dark fiber networks.

Data Controller

Bulk is a Data Controller. This means that we are responsible for deciding how we use and hold personal information. For privacy concerns, contact us at

The purpose and grounds of processing personal data

Bulk values your privacy. We comply with the Norwegian Personal Data Act including the EUs General Data Protection Regulation (GDPR). Bulk process personal data for the administration of relationships with our customers, suppliers, partners and others, to deliver in accordance with our contractual obligations.

The information we collect may also be used to provide information about Bulks services. We do not send out marketing enquiries without legal basis, in accordance with the Norwegian Marketing Control Act.

What personal information is processed

We may process contact info, addresses, purchase history, and bank information.

2. Where we collect information

2.1 We collect information from you when you give it to us directly

You may provide your details when you ask us for information, attend our events, visit our facilities or contact us for any other reason. Your information may be collected by an organization we are working with, but we are still responsible for your information.

2.2 Visiting our facilities

To secure our facilities we use surveillance cameras. Surveillance videos are stored for seven days. This storage period applies except for specific scenarios listed in the regulation on video-surveillance § 6, such as cases when video is given to the police.

In addition our staff will register the identity of visitors and customers, strictly for the purpose of facility security.

2.3 We collect information when you give it to us indirectly

Your information may be shared with us by other organizations. They should only do so in the way they have set out in their own Privacy Policy which you should check when you give your details.

2.4 We collect information when you have given other organizations permission to share it

Your information may be provided to use by other organizations if you have given them your permission. This might for example be a business working with us or when you buy a product or service from a third-party organization. The information we receive from other organizations depends on your settings or the option responses you have given them.

2.5 We collect information when you visit our website

Information about you is recorded and stored when you use our website. You may use our website anonymously, for instance through VPN. Be advised, your browser could automatically send information to our webserver (e.g. your IP address , date and time , name and URL of the accessed file, browser type and version and also further information sent by the browser (such as your computer’s operating system, your access provider, location, etc.). This information is temporarily stored in a log file. We process the above data for the purpose to ensure connection, a trouble-free experience and for security. The legal grounds for this data processing is GDPR Art. 6.1 b) and f).

If you consent in accordance with the GDPR art. 6.1.a), we may use this data and location and interaction data for profiling and/or marketing.

See the information about the use of cookies under that heading below.

2.6 We collect information when it is available on social media

Depending on your settings or the privacy policies applying for social media and messaging services you use, like Facebook, Instagram, LinkedIn or Twitter, you might give us permission to access information from those accounts or services.

2.7 Bulk’s customer portal

After signing a contract with Bulk, you may get access to Bulk’s customer portal and by signing on to this you may register a profile (“Customer Profile”) with us for the purpose of getting access to information about your data and the services provided by Bulk.

By registering a Customer Profile, you may access an overview of information related to service requests, incidents or other requests done solely through the customer portal. You may also make new orders by entering details using your profile to communicate with Bulk.

Bulk’s customer portal is run by a third-party software provider. All customer data is securely stored at a data center placed in the UK , and as such Bulk has the legal bases for transfer according to the GDPR art 6 (our contract with you). The processing made by that third-party is covered by a Data Processing Agreement (DPA) signed with Bulk, and the DPA includes guarantees by the processor to implement appropriate technical and organizational measures to meet the instructions and requirements set out in the DPA.

2.6 We collect information when visiting our Facebook page

When visiting our Facebook Page, Bulk becomes joint data controller with Facebook. Facebook is responsible for the data subjects’ overall rights (information in Facebooks Privacy Policy), and Bulk is the controller for the personal data we collect when you interact with us.

Unless you communicate with Bulk on Facebook, we will not process your personal data. However, Facebook is on a regular basis providing aggregated and anonymous data concerning our followers’ interests.

2.7 Employees

Information about processing for employees is available at the intranet. The purpose is solely administration of employment. For work candidates the purpose is recruiting. The legal basis is GDPR art. 6.1. b) and f).

3. Cookies policy

In addition to the information which you supply to us, information and data may be automatically collected through the use of cookies. Cookies are small files implemented on the website to recognize earlier visitors and the cookies allow us to observe interaction and compile aggregated data in order to improve the website for you. For example, cookies will tell us whether you viewed the webste with sound or with text on your last visit. Cookies also allow us to count the number of unique and returning visitors to our website. Some of our associated companies may themselves use cookies on their own websites. We have no access to, or control of these cookies, should this occur.

Cookies may be either “persistent” cookies or “session” cookies. A persistent cookie consists of a file sent by a web server to a web browser, which will be stored by the browser and will remain valid until its set expiry date (unless deleted by the user before the expiry date). A session cookie, on the other hand, will expire at the end of the user session, when the web browser is closed.

Our use of cookies has legal grounds in the Norwegian Electronic Communications act § 2-7 b. Processing of personal data has legal grounds in the GDPR art. 6.1 f), we pursue the following legitimate interests in this regard:

  • Our market research is a legitimate interest, this data is anonymized.
  • Making the solution more convenient to you is a legitimate interest, we only process data of low privacy risk for this purpose.

If you consent in accordance with the GDPR art. 6.1.a), we may use cookies, concerning such as location and interaction data for profiling and/or marketing.

Most browsers accept cookies by default, but you can turn this off. Complete deactivation of cookies can interfere with functions on our website.

We use Google Analytics for optimization of our website, which processes information about web browser, operating system, URL, IP address and the time of server requests. The data is anonymized, and sent to Google in the USA. Google is subject to the EU-US Privacy Shield so that an adequate level of data privacy is ensured.

The information will be used for the purpose of evaluating your use of the website, compiling reports on website activity and providing other services relating to website activity and internet usage for the purposes of market research and ensuring an internet experience tailored to users' needs.

Furthermore, this information may be transferred to third parties to the extent that this may be legally required or those third parties process these data on our behalf. Under no circumstances will your IP address be associated with any other data held by Google.

4. Your right’s as a data subject

You have the right:

  • to withdraw your consent at any time. This means that we may no longer continue processing the data based on that consent for the future;
  • to demand information about your personal data we process. In particular, you can demand information about the purposes of the processing, the category of the personal data, the categories of recipients to whom your data were or will be disclosed, the planned storage period, the existence of a right to rectification, deletion, restriction or revocation of processing, the existence a right to lodge a complaint, the origin of your data, in so far as not collected by us, and also about the existence of automated decision-making including profiling and where appropriate meaningful information about to details thereof;
  • to demand immediate rectification or completion of your personal data saved with us. You may also rectify or complete your data on your Customer Profile;
  • to demand deletion of your personal data saved with us, in so far as the processing is not required for exercising the right of freedom of expression and information, to comply with a legal obligation, for reasons of public interest or to establish, exercise or defend legal claims. You may delete your data by entering into your Customer Profile, with the restrictions mentioned here;
  • to demand restriction of processing of your personal data;
  • to receive the personal data you have provided us in a structured, commonly used and machine-readable format or to demand transmission to another controller;
  • to lodge a complaint to a supervisory authority. As a rule, you can contact the supervisory authority for your habitual residence or place of work or our registered offices.

5. Retention time

Bulk retains the personal information only as long as necessary according to the purpose of processing. In general, we retain the personal information for the duration of the relevant agreement.

You may contact Bulk at if you wish to have access to, correct or delete personal information we have stored.

To find out how Bulk can help you solve your Infrastructure, Real Estate or Sustainability challenges please contact us.

Talk to an expert