Hazardous Area Sites

Privacy & GDPR notice

Last updated: 13 August 2026

Who we are

This site is operated by Andreas Parr Bjørnsund, c/o Gambit Invest AS, Oslo, Norway ("we"), the data controller for the processing described here. It maps industrial facilities with potentially hazardous (explosive-atmosphere) areas and supports business-to-business contact between our team, our channel partners, and the operators of those facilities.

Privacy questions or requests: andreas.bjornsund@gmail.com.

Where and how data is stored

Server locationStockholm, Sweden (EU) — all application and database servers run in this region Hosting providerFly.io, Inc. (infrastructure), with encrypted backups in S3-compatible object storage EncryptionAll data is encrypted in transit (TLS) and at rest (encrypted volumes and backups) AccessRestricted to authorised staff sign-ins; partner links show only a scoped, read-only slice with no export function

What personal data we process, and where it comes from

The facilities themselves are industrial objects, not people. The personal data we hold is limited to professional B2B contact information about people in operational roles at those facilities: name, job title, employer, business email address, business phone number, LinkedIn profile URL, and country.

This information comes from publicly available sources (company websites, professional networking profiles, public registers and press) and from licensed business-contact databases that themselves collect publicly available professional information. We do not process special categories of personal data, data about private life, or data about consumers.

Why we process it — legal basis

Our legal basis is legitimate interest (GDPR Article 6(1)(f)): contacting people in relevant professional roles, on behalf of their employer's potential interest, about certified mobile devices for the hazardous areas their sites operate. We limit outreach to role-relevant, business-context contact, we do not use tracking pixels or click tracking in our emails, and every message offers a direct way to decline further contact.

We use software (including AI models) to assess which sites and roles are professionally relevant before any contact. No decision with legal or similarly significant effect is made automatically about any person.

Who receives the data

We share personal data only with service providers (processors) needed to run this service: our hosting provider (Fly.io), our email delivery platform, our CRM, licensed B2B contact-data providers, and AI providers used for relevance assessment. Some providers are based in the United States; transfers rely on the EU–US Data Privacy Framework or Standard Contractual Clauses.

Our channel partners see contact data only through scoped, read-only access links, with no export function, for the purpose of professional follow-up. We do not sell personal data.

Retention

We keep professional contact data while it remains accurate and relevant to the facility it relates to. Contacts who object, or whose addresses stop working, are placed on a permanent suppression list so they are not re-added by future data collection.

Access logging

Requests to partner access links are logged (IP address, browser type, approximate location) solely to detect abuse or sharing of access links beyond the intended team. These logs are not used for marketing.

Your rights

To exercise any right, email andreas.bjornsund@gmail.com. We respond within one month. You also have the right to lodge a complaint with your national data-protection authority (for the controller, the Norwegian Datatilsynet).

This notice covers hazardousareasites.com, including partner access links and the messages our team and partners send with the information shown here.