The community for independent IT consultants in Norway. We cut through the noise and connect experts directly with exciting assignments.

Content

  • About us
  • Have an assignment
  • Need an assignment

Kontakt

  • Nakkeknausen 4
    6014 Ålesund
  • +47 91 31 25 77
  • richard.gulbrandsen@ic.no
  • Richard Gulbrandsen
    Managing Director

© 2026 Independent Consultants. All rights reserved.

Org. nr: 832 872 652

  • Privacy
  • Terms
About usHave an assignmentNeed an assignment
NO/EN

Independent Consultants AS

Data processing agreement

Version dict-1 · effective from —

This is a provisional standard text. The final agreement text is published in Sanity.

Data processing agreement between the consulting house (controller) and Independent Consultants AS (processor) on the processing of personal data for consultants put forward for assignments.

DRAFT — PLACEHOLDER. This is a temporary standard text based on the Norwegian Data Protection Authority's template for data processing agreements (GDPR article 28) and must be replaced with IC's final wording in Sanity Studio before being used as a final agreement.

1. Purpose of the agreement. The agreement governs the processor's (Independent Consultants AS, “IC”) processing of personal data on behalf of the controller (the consulting house), in connection with the consulting house uploading CVs and contact details for its consultants on ic.no and putting them forward for assignments.

2. Purpose and nature of processing. IC stores CV, name, phone, email and title for the consultants, makes the data available to IC staff to match consultants with assignments, and forwards the data to clients when the consulting house submits an expression of interest.

3. Controller's obligations. The consulting house warrants that it has a lawful basis, including any necessary consent or other valid basis, for sharing its consultants' personal data with IC, and that the consultants have been informed of the processing.

4. Processor's obligations. IC processes the data only on documented instructions from the consulting house, ensures that persons processing the data are bound by confidentiality, implements appropriate technical and organisational security measures, and assists the consulting house in safeguarding data subjects' rights.

5. Sub-processors. IC uses Supabase (databases and file storage, EU), Vercel (hosting), Resend (email) and Cloudflare (storage, EU) as sub-processors. The consulting house approves these upon entering the agreement and is notified of changes.

6. Security and breaches. IC notifies the consulting house without undue delay, and no later than 48 hours, after becoming aware of a personal data breach.

7. Duration, renewal and deletion. The agreement is valid for 12 months from acceptance and must be renewed by the consulting house for continued processing. Upon expiry without renewal, or when the consulting house deletes a profile, IC deletes the CV file and contact details in line with the retention rules on ic.no. Data forming part of ongoing application processes may be retained while the process is running.

8. Audit. The consulting house may request documentation of IC's compliance with the agreement and may carry out an audit once per year by further agreement.

9. Acceptance. The agreement is accepted electronically on ic.no by a person authorised to bind the consulting house. Time, version and a cryptographic hash of the agreement text are stored as documentation.

sha256: d64c01e97aab92aac055ee4c57274238e50b774defc048f9b5d97260682bc774