Hi!
    Sesam-sesam app

    Privacy policy for the Sesam-Sesam app

    Version 08/2026

    This privacy policy describes how Hi Tech Mobility AS processes personal data in connection with the Sesam-Sesam app.

    1. Data controller

    Hi Tech Mobility AS, company no. 922 741 085, is the data controller for personal data processed in connection with the creation of a user profile in, and the use of, the Sesam-Sesam application (“Sesam-Sesam”), payment through the service, customer service, security, operations, further development and administration of the service delivered through Sesam-Sesam.

    Contact information: Hi Tech Mobility AS, company no. 922 741 085, email support@sesam-sesam.com, telephone +47 55 70 52 60.

    When we write “Hi Tech”, “we”, “us” or “our” in this policy, we mean Hi Tech Mobility AS. When we write “the Customer”, “the user” or “you”, we mean the person who creates, manages or uses Sesam-Sesam.

    2. What is Sesam-Sesam?

    Sesam-Sesam is a digital service developed, owned, operated, financed and commercialised by Hi Tech Mobility AS. The service enables users to register vehicles and payment methods for automatic payment of parking, road tolls or other fees offered through Sesam-Sesam.

    Parking companies, facility owners, toll operators and other partners may be data controllers in their own right for processing of personal data carried out as part of their own business, for example the operation of parking facilities, enforcement of parking terms, control activities or statutory tasks. This privacy policy covers Hi Tech's processing of personal data as data controller for Sesam-Sesam in relation to the user.

    3. What personal data do we process?

    We may process the following categories of personal data, depending on how you use the service:

    3.1 Categories of personal data

    • Account and contact data: name, email address, mobile phone number, user ID, login information and preferences.
    • Vehicle data: registration number, vehicle identification and vehicles linked to the user profile.
    • Payment data: payment card references, tokenised payment data, transaction references, payment status, receipts and payment history. Hi Tech does not normally store complete card numbers.
    • Usage and transaction data: entry time, exit time, parking duration, parking facility, area, passages, service fees, charges, transaction status and history.
    • Technical information: IP address, device information, operating system, app version, browser information, error logs, security logs and similar technical data.
    • Customer service information: enquiries, correspondence, complaints, support history and other information you provide when contacting customer service.
    • Camera and ANPR data: images, video and automatic number plate recognition (ANPR) may be used to identify vehicles and link parking or passages to the correct user and payment method.
    • Marketing preferences: opt-outs, consents, channel choices, responses to marketing and any preferences.

    3.2 Other data

    We may also collect or receive other types of personal data if this is necessary to fulfil the purposes described below.

    4.1 The purposes in detail

    • Creating and managing the user profile — categories: account and contact data, vehicle data, payment data and technical information. Covers: registering the user, vehicles and payment method, managing login and the customer relationship. Source: from you. Legal basis: Art. 6(1)(b) — necessary to perform a contract.
    • Delivering the Sesam-Sesam service — categories: account and contact data, vehicle data, usage and transaction data, camera and ANPR data and technical information. Covers: identifying the vehicle, registering parking or passage, calculating the fee and making the service available. Source: from you and from camera and ANPR systems. Legal basis: Art. 6(1)(b) — necessary to perform a contract.
    • Processing payment and issuing receipts — categories: account and contact data, vehicle data, payment data and usage and transaction data. Covers: calculating the parking fee, toll fee and service fee, charging the payment method, handling payment status and issuing receipts. Source: from you. Legal basis: Art. 6(1)(b) — necessary to perform a contract. Art. 6(1)(c) may apply to statutory bookkeeping.
    • Customer service and complaints — categories: account and contact data and any information included in the dialogue. Covers: responding to enquiries, handling complaints, correcting errors and documenting the dialogue. Source: from you. Legal basis: Art. 6(1)(b) and (f) — performance of the contract and legitimate interest in being able to provide support and document cases.
    • Security and prevention of misuse — categories: account and contact data, vehicle data, usage and transaction data, technical information and camera and ANPR data. Covers: preventing fraud, misuse, security incidents and unauthorised use of the service. Source: from you and from camera and ANPR systems. Legal basis: Art. 6(1)(f) — legitimate interest in providing a secure and reliable service.
    • Operations, error correction and further development — categories: technical information, usage and transaction data and customer service information. Covers: technical operations, troubleshooting, stability measurements, analysis of deviations and improvement of the user experience. Source: from you. Legal basis: Art. 6(1)(f) — legitimate interest in improving and securing the service.
    • Statutory obligations — categories: account and contact data, payment data, usage and transaction data and other documentation necessary to fulfil legal obligations. Covers: bookkeeping, accounting documentation, orders from public authorities and other legal duties. Source: from you. Legal basis: Art. 6(1)(c) — necessary to comply with a legal obligation.
    • Service and contract-related communication — categories: account and contact data, user preferences, usage and transaction data and technical information. Covers: operational messages, security alerts, payment information, receipts, changes to the terms and information about relevant service areas. Source: from you. Legal basis: Art. 6(1)(b) and (f) — performance of the contract and legitimate interest in informing about operations, security and relevant changes.
    • Marketing — categories: account and contact data and marketing preferences. Covers: information about services, features or offers where this is permitted. Source: from you. Legal basis: Art. 6(1)(a) or (f), depending on the channel and content. Consent is obtained where required by law.

    4.2 Other compatible purposes

    On a case-by-case basis, we may use your personal data for certain purposes that are not incompatible with the purpose for which they were originally collected or received, for example audits, analyses, reporting, innovation and mergers and acquisitions.

    5. Automatic number plate recognition, images and video

    In order to deliver Sesam-Sesam, automatic number plate recognition (ANPR), images and video may be used at affiliated parking facilities, toll areas and other charging areas. The purpose is to identify the vehicle, register start and stop times, document transactions, carry out correct charging and handle customer service, errors, complaints and security.

    Normally, it is the registration number and associated event data that are used to link a parking or passage to a Sesam-Sesam account. Images and video shall not be used for purposes other than those necessary for the service, documentation, security, legal claims or other lawful purposes described in this policy.

    6. Who do we share personal data with?

    We only share personal data when it is necessary, lawful and relevant for the purposes described in this policy. Relevant recipients may be:

    6.1 Recipients

    • Payment providers and card acquirers, in order to carry out payments, refunds and payment controls.
    • Operations, hosting and cloud providers, for the secure technical operation of Sesam-Sesam.
    • Parking companies, facility owners, toll operators and other partners, where this is necessary to carry out, document or follow up parking, passages, payment, complaints or errors.
    • Customer service, invoicing and debt collection providers, where this is necessary for support or payment follow-up.
    • Public authorities, courts, the police or others where Hi Tech is legally obliged to disclose information.
    • Advisers, auditors, lawyers or insurance companies where this is necessary to safeguard legal, financial or security interests.

    6.2 Roles of the recipients

    Where recipients process personal data on behalf of Hi Tech, a data processing agreement shall be in place. Where the recipient itself determines the purposes and means of its own processing, the recipient is an independent data controller and must have its own legal basis.

    7. Transfers of personal data outside the EEA

    Personal data shall in principle be processed within the EEA. If personal data is transferred to countries outside the EEA, the transfer shall take place in accordance with Chapter V of the GDPR, for example on the basis of the European Commission's standard contractual clauses, an adequacy decision or another valid transfer mechanism. Further information about relevant transfers is provided on request.

    8. How long do we store personal data?

    We store personal data for as long as it is necessary for the purpose for which it was collected and in accordance with our internal retention guidelines. The overview below sets out the typical retention period that applies to the categories of personal data we process. Special situations may result in longer or shorter retention than described below, for example where we have a legitimate need for documentation, security, dispute resolution or payment follow-up. In any event, we will retain data for as long as required by law.

    8.1 Typical retention periods

    • Account and contact data: for as long as the agreement is in force and thereafter for 3 years after the user account has been closed.
    • Vehicle data: for as long as the vehicle is registered in the service, and thereafter for 3 years where necessary for transaction history, complaints or documentation.
    • Payment data, usage and transaction data: data subject to bookkeeping requirements is normally stored for five years after the end of the financial year, cf. section 13 of the Norwegian Bookkeeping Act. Other payment and transaction data is stored for 5 years after the transaction has been completed.
    • Customer service information: for as long as the case is being handled and thereafter for 2 years after the case is closed where this is necessary for documentation, quality, learning and any claims.
    • Technical information: for as long as necessary for security, troubleshooting, prevention of misuse and documentation, normally for 3 years.
    • Camera and ANPR data: for as long as necessary to deliver the service, normally for 12 months.
    • Marketing preferences: for as long as you have an active relationship with us, or until you opt out or withdraw consent where consent is the legal basis. Information about opt-outs may be stored for as long as necessary to ensure that the opt-out is respected.

    8.2 Deletion

    When the need for storage ceases, the data will be deleted, anonymised or otherwise processed in accordance with applicable law.

    9. Your rights

    You have rights under data protection legislation. Within the conditions of the legislation, you may have the right to:

    9.1 Your rights in detail

    • receive further information about how we process your personal data
    • access the personal data we process about you
    • rectification of incorrect or incomplete data
    • erasure of personal data
    • restriction of processing
    • data portability
    • object to processing
    • withdraw consent where the processing is based on consent
    • lodge a complaint with the Norwegian Data Protection Authority

    9.2 How to exercise your rights

    To exercise your rights, you can contact us at support@sesam-sesam.com. We will respond without undue delay and normally within 30 days of receiving the request. We may ask for the information necessary to confirm your identity before we process the request.

    You can withdraw consent or opt out of marketing at any time by using the unsubscribe link in the marketing, changing settings in the app or contacting us at support@sesam-sesam.com.

    10. Cookies, SDKs and analytics

    Sesam-Sesam uses cookies, SDKs and similar technologies in the app and on websites for login, security, technical operations, error correction, performance analysis and improvement of the user experience. Where we use technologies that require consent, consent will be obtained in accordance with applicable law. Further information is provided in a separate cookie statement at hitechmobility.io/informasjonskapsler or in equivalent information in the app or on the websites.

    11. Security

    Hi Tech implements technical and organisational measures to protect personal data against unauthorised access, accidental loss, alteration, misuse, destruction and other security incidents. The measures are assessed and improved on an ongoing basis and include, among other things, access control, logging, secure operations, supplier follow-up, incident handling routines and continuous work on information security.

    12. Changes to the privacy policy

    We may update this privacy policy as needed, for example in the event of changes to the service, technology, suppliers, processing activities, legal requirements or the allocation of roles with our partners. In the event of material changes, we will provide information in an appropriate manner, for example in the app, on the website, by email or by SMS.

    13. Complaints

    If you believe that our processing of personal data is not in accordance with applicable law, we ask you to contact us. You also have the right to lodge a complaint with the Norwegian Data Protection Authority.

    14. Contact

    Questions about privacy, your rights or our processing of personal data can be directed to Hi Tech Mobility AS, company no. 922 741 085, email support@sesam-sesam.com, telephone +47 55 70 52 60.

    Contact and access requests

    Hi Tech Mobility AS, company no. 922 741 085. Email: support@sesam-sesam.com. Telephone: +47 55 70 52 60.