Privacy policy data sharing with Smart Building Hub platform

Latest update: 14/3/2026.

1. We are the data controller

Smart Building Hub is the data controller for the processing of the personal data we have received from you.

2. Contact information

If you have questions regarding our processing of your data, you are always welcome to contact us:

• By email: sbhub-project@sintef.no

• By phone, reception: +47 40 00 51 00

3. Purpose and legal basis for processing your personal data

We process your personal data for the following purposes:

1. Storing data is our platform for:

   a. Analyzing energy use across regions: We collect data to identify energy use profiles and analyze the load on specific supply lines and energy use profiles in different building categories. This influence optimizing energy distribution and identifying flexibility potentials within the Norwegian context.

   b. Correlating data with external sources: Collected data may be correlated with external sources such as weather data, the Norwegian cadaster, price data, and production data. This correlation aids in comprehensive analysis such as forecasting.

2. Responding to inquiries: We may also process your data to respond to your inquiries or requests directed to us.

The processing of personal data may be based on the legal ground set out in the General Data Protection Regulation (GDPR) Chapter II, in particular Article 6(1)(b). This provision permits the processing of personal data when such processing is necessary for the performance of a contract to which the data subject is a party, or in order to take steps at the request of the data subject prior to entering into a contract.

Corresponding provisions follow from the Norwegian Personal Data Act § 8, cf. GDPR Article 6(1)(b).

4. Categories of personal data

We will process general personal data about you, including your full name, email address, metering point ID of the electricity meter(s), electrical use of the buildings at high resolution (hourly - unless Elhub provides even higher), property address(es).

Personal data such as name, address, email address and your metering point ID will not be shared with third parties.

Electrical use and property address(es) will be pseudonymized¹ before any analysis or form of visualization is made available to others. Although these data are pseudonymized, complete anonymization cannot be guaranteed. In particular, within small municipalities or areas with few residential buildings/public buildings, there is a potential risk that properties and hence the tenant(s) could be indirectly identified through combinations of location, energy use patterns, and other publicly available information.

5. Recipients or categories of recipients

We disclose or transfer your personal data to the following recipients:

• Data processors who process your personal data on behalf of SINTEF.

We will regularly monitor that processing by data processors meets legal requirements.

6. Transfer to recipients in third countries or international organizations

We do not transfer your personal data to recipients outside the EU and EEA.

7. Source of your personal data

Data is collected in collaboration with Vipps and Elhub (electricity use).

8. Storage of your personal data

We store your personal data for up to 10 years but often delete it before that. Maintaining access to data over time is important for supporting long-term scientific research, historical documentation, and statistical analysis. Many research projects, especially those related to energy efficiency and sustainability, rely on long-term data to identify patterns, evaluate performance over time, and generate meaningful insights that contribute to better solutions for the future.

We continuously assess the necessity of the retention period to ensure only the necessary data is stored. The storage period is reviewed at least once a year.

Data will be stored in Google Cloud platform (on servers in the European Union), and the web app will use cookies to enable user authentication and preferences.

9. Right to withdraw consent

To withdraw consent to share your electricity data, you need to log into your account on Elhub (https://minside.elhub.no/metering-points/access-management) and withdraw your consent from there. Please contact sbhub-project@sintef.no if you encounter any issues. Be aware that this will not delete the data you have agreed to share with us.

10. Your rights

Under the GDPR, you have several rights concerning our processing of your personal data. To exercise your rights, contact us using the details provided in section 2.

• Right of access: You have the right to access the data we process about you and receive additional information.

• Right to rectification: You can request correction of incorrect data about you.

• Right to object: In certain cases, you can object to our processing of your personal data, including for direct marketing purposes.

You can read more about your rights in the Norwegian Data Protection Authority's guidance at https://www.datatilsynet.no/.

11. Complaint to the Norwegian Data Protection Authority

You have the right to file a complaint with the Norwegian Data Protection Authority if you are dissatisfied with our processing of your personal data. Their contact information can be found at https://www.datatilsynet.no/.