Who is responsible
The data controller is BURO OPS AS, a Norwegian private limited company (aksjeselskap). We trade as Buro.
- Organisation number
- 832 405 612
- Registered office
- Ullevålsveien 12, 0171 Oslo, Norway
- VAT
- Registered in the Merverdiavgiftsregisteret (NO 832 405 612 MVA)
- Industry
- NACE 62.200 — IT consultancy and operation of IT systems
- Privacy contact
- privacy@buroventures.com
Company details are taken from the Norwegian Register of Business Enterprises (Brønnøysundregistrene).
What we collect
We collect the following when you use this site:
- Application details you send us. Name, work email, phone number, country, business name, website, a short description of the business, target market, and monthly advertising spend.
- Site usage. The page you viewed, time of visit, referrer, and campaign tags in the URL (utm_source, utm_medium, utm_campaign). We also store a random visitor identifier so we can tell repeat visits from new ones.
- Technical data needed to run the forms. IP address and browser user agent when you submit an application, used to measure conversions and keep the service secure.
We do not ask for payment details, national identity numbers, or special-category data on this site.
Why we use it
- To review whether we can run your OpenAI Ads and to reply to you. Legal basis: steps prior to a contract (GDPR art. 6(1)(b)) and our legitimate interest in assessing inbound work (art. 6(1)(f)).
- To keep the site working and understand which pages and campaigns bring applications. Legal basis: legitimate interest (art. 6(1)(f)).
- To measure advertising performance with OpenAI Ads when you apply. Legal basis: legitimate interest in attributing paid traffic (art. 6(1)(f)).
Cookies and local storage
- buro_vid — a random visitor ID we set so page-view stats are not double-counted. It lasts one year, is HttpOnly, and is not used to identify you by name.
- buroLead — stored in your browser so we can carry your name, email, and phone from the first form to the application page. It stays on your device only.
- The OpenAI Ads pixel on this site may set its own cookies to measure ads. See OpenAI’s privacy policy.
An admin sign-in cookie is used only on the internal admin page and is not set for ordinary visitors.
Who we share it with
We share personal data only as needed to run Buro:
- Hosting and database. Application and page-view records are stored on our servers and in our Postgres database.
- OpenAI Ads. When you submit a form we send a conversion event. Contact details are hashed (SHA-256) before they are sent, together with IP address and user agent, so OpenAI can match the event to an ad click.
- Tools we connect for follow-up. If we enable a webhook (for example a CRM or inbox), the same application fields you submitted are forwarded there.
We do not sell your personal data or share it with other advertisers. Buro is not part of OpenAI, Inc.
How long we keep it
Applications are kept while we review fit, communicate with you, and, if we work together, for the client relationship and ordinary bookkeeping. Page views and visitor IDs are kept for site statistics. We delete or anonymise data when we no longer need it, unless a Norwegian legal duty requires a longer hold.
Where it is processed
BURO OPS AS is established in Norway. Some processors, including OpenAI, may handle data outside the EEA. Where that happens, we rely on an adequacy decision or standard contractual clauses together with the provider’s own safeguards.
Your rights
Under the GDPR and the Norwegian Personal Data Act you can ask us to access, correct, or delete your data, restrict or object to certain processing, and receive a copy of data you provided. Write to privacy@buroventures.com or to Ullevålsveien 12, 0171 Oslo, Norway.
You can complain to the Norwegian Data Protection Authority (Datatilsynet).
Changes
If we change how we handle personal data, we will update this page and the date at the top.