Privacy
How we handle your information
OESA only stores what we need to run the association: who is a member, who is coming to our events, who wants the newsletter and which companies have contacted us. We never sell information and we use no tools that track you.
Last updated 28 September 2026
This is a translation of the Norwegian privacy notice. If the two versions differ, the Norwegian version applies.
Who is responsible
The data controller is OESA – Oil & Energy Student Association, represented by the board. Please send any questions about privacy to styret@oesa.no.
What we store, why and for how long
| When | What we store | Why | Legal basis | How long |
|---|---|---|---|---|
| You become a member | Name, email, place of study, year of study, study programme, which tracks you are interested in and any board position you want to apply for | To administer your membership, put together the groups in each city and contact you | Your consent (GDPR Article 6(1)(a)) | Until you leave the association or ask us to delete it |
| You subscribe to the newsletter | Email and the topics you want to receive | To send you new reports and analyses | Your consent | Until you unsubscribe |
| You sign up for an event | Name and email | To know how many people are coming and to let you know about any changes | Your consent | Deleted no later than three months after the event |
| A company contacts us | Company, name, email, phone number and the message | To reply and, where relevant, enter into an agreement | Legitimate interest (Article 6(1)(f)) | Deleted after twelve months if no agreement is reached |
| You write analyses for us | Email and the name shown on your analyses | To log you in and show who wrote each analysis | Agreement to write for OESA (Article 6(1)(b)) | For as long as the analyses are published |
| You read an analysis | Only a total count of how many times the analysis has been read. Nothing about you. | To show the most-read analyses | No personal data | – |
Only the board has access to the membership list, event sign-ups and enquiries. We do not share them with our partners. If a company wants to invite our members to something, we send the invitation ourselves.
Where the information is stored
- Supabase is the database where the forms are stored. The database is located in the EU, and Supabase processes the information on our behalf under a data processing agreement.
- Render runs the website from a data centre in Frankfurt. It sees your IP address when you visit the site, as all websites do, but we keep no log of visitors.
- Google Fonts, cdnjs and jsDelivr deliver fonts and program code to the site. They see your IP address when your browser fetches the files.
- Our website itself fetches share prices, weather data and continental shelf data from Yahoo Finance, the Norwegian Meteorological Institute and the public authorities. Nothing about you is sent with these requests.
What is stored in your browser
We use no cookies for tracking or advertising, and no analytics tools. On the analysis page, your browser remembers a few choices, such as the stocks in «Min liste» (My list), in the browser's own storage. This stays on your device, and we cannot see it. You can delete it by clearing the site data in your browser. If you log in to write analyses, your login is stored in the same way.
Your rights
- You can ask to see what we have stored about you.
- You can ask us to correct or delete the information.
- You can withdraw your consent at any time. This takes effect from that point on.
- You can ask to receive your information in a common file format.
Send an email to styret@oesa.no and we will reply within 30 days. If you believe that we are processing your information in breach of the rules, you can complain to the Norwegian Data Protection Authority (Datatilsynet).