Privacy notice
What Andes collects and why.
This notice covers Andes public-site, contact and service-related processing. Earlier service activities below retain their own scope. Calibre delivery-specific processing depends on the relevant agreement and configuration.
This public notice explains the main activities. Customer-specific processing is governed by the relevant contract, processing schedule and product configuration where applicable.
The Calibre demonstration and films
The public Calibre demonstration uses fictional company records and is read-only. Do not send live employee data when evaluating the demonstration.
On the house site, the film player loads only after you choose to load or play a video. This connects your browser to YouTube. Closing the player removes that embedded player. You can continue exploring the site without loading it.
YouTube receives connection information, such as your IP address and browser details, when you load a film. Its own privacy terms and storage practices apply. Closing the player stops that embedded connection; it does not erase information already received by YouTube. See Google's privacy policy.
Before inviting employees into your own deployment, confirm providers, processing locations, access, model use, retention, deletion and export in the documents for that delivery.
Controller and contact
Andes is the trading brand of PINTO URZUA - ANDES.NO, a Norwegian sole proprietorship. Questions, corrections and privacy requests can be sent to explore@andes.no.
PINTO URZUA - ANDES.NO / Org. no. 936 883 672
Check intake and fit assessment
If you apply for Check, we collect the information requested in the form: name, work email, organisation, role, organisation size, sector, AI-system stage, governance concern, decision authority and preferred review window.
The intake is designed for fit assessment and capacity management. Do not submit system records, evidence, personal data about other people, credentials or confidential technical details in the application form.
We use the information to assess fit, manage review capacity, contact you about the requested check and maintain an operational record of the application. Initial applications are retained for up to 90 days unless they become part of an active customer record, a legal obligation requires longer retention or an earlier deletion request is accepted.
Cookies and campaign links
The public house does not use advertising or analytics cookies. Its campaign-link feature does not read or write browser session storage, local storage or cookies, and makes no separate analytics request.
Some incoming links include a journey tag or standard campaign labels. The site carries only the approved, bounded labels already in the current URL to public house pages and approved product destinations. It does not generate a persistent browser identifier or copy other query fields, such as an email address.
Labels remain visible in the URL and may appear in ordinary request logs or in a product record where that destination supports attribution. A visit without those labels does not recover them from a previous visit. Do not include confidential information in campaign links.
Film embeds load only after your choice, as described above. Product sign-in, checkout and external booking or social sites have their own notices and may use storage needed for those services.
Support, contracts and service delivery
When you contact Andes or work with us as a customer, we process the information needed to respond, manage the relationship, prepare or perform an order, handle billing and keep required business records.
Product-specific data handling, subprocessors, locations, access and retention depend on the service and are recorded in the relevant order and processing materials. The public trust register does not claim that every service is EEA-only.
Business outreach
Andes may process professional contact information, such as name, role, organisation, work email and publicly available company context, to make a relevant business contact. This information may be obtained from business data providers, public sources or direct interactions.
We use the information to assess relevance, send and manage professional communications, respect objections or unsubscribe requests, and maintain a suppression record where needed to avoid further contact. We do not sell this information.
We use Google Workspace (Gmail) to send and manage business email, including outreach from explore@andes.no and replies. Our Workspace data-region setting is Europe (EU) for covered data at rest. This does not restrict all processing or support to the EU/EEA. Google and its subprocessors may process data outside the EEA, including in the United States and other countries described in Google's current subprocessor information. Google's Cloud Data Processing Addendum governs this processing. For transfers of EU/EEA personal data to the United States, Google uses the EU-US Data Privacy Framework. Other restricted transfers are covered by the safeguards in the addendum, including Standard Contractual Clauses where applicable. Contact explore@andes.no to request information about these safeguards.
Outreach records are retained only for the period needed for the relevant campaign, response handling and suppression obligations. The applicable retention record may vary by activity; a universal retention period is not claimed here.
Your rights and complaints
Subject to applicable law, you may request access, correction, erasure, restriction, objection or information about the processing of your personal data. To make a request, contact explore@andes.no.
You may also lodge a complaint with the Norwegian Data Protection Authority, Datatilsynet.