Cookie Policy

1. What cookies and similar technologies are

Cookies are small text files that a website asks your browser to store on your device. Each time you return to the site, or move between its pages, the browser sends the relevant cookie back to the site. Cookies let a site remember that you are signed in, protect a form against attack and remember a choice you have made.

We use the term "cookies" in this policy to cover cookies and similar technologies. Similar technologies include local storage and session storage, which hold information in your browser without sending it with every request, and pixels or scripts that record that a page was loaded. The mobile apps do not use browser cookies for their core functions; they use software development kits (SDKs), which section 5 explains.

Cookies fall into two broad groups by lifetime. A session cookie is deleted when you close your browser. A persistent cookie remains until its stated expiry date or until you delete it. Cookies are also described as first-party, when set by the site you are visiting, or third-party, when set by another domain. Nearly all cookies on our website are first-party.

2. Strictly necessary and non-essential cookies

We divide cookies into two categories according to whether they are needed to deliver the service you have requested.

Strictly necessary cookies

These are required for the website to work and for you to use its features. They include the cookie that keeps you signed in and the cookie that protects forms against cross-site request forgery, together with the cookie that records your consent choices. Strictly necessary cookies are set without consent because, without them, we cannot provide the service. They are not used to build a profile of you and they are not used for advertising.

Non-essential cookies

These are cookies that are not required to deliver the basic service. On this website they are limited to one preference cookie (which remembers your language choice) and one analytics cookie (which helps us understand how the site is used so we can improve it). We set non-essential cookies only after you have given your consent. We do not use advertising cookies, and we do not allow third parties to set cookies for advertising or cross-site tracking.

3. The cookies we use

The table below lists the cookies set by the sammes.no website, their category, what they do, who provides them and how long they last.

Name	Category	Purpose	Provider	Lifetime
sammes_session	Strictly necessary	Authenticates your session and keeps you signed in as you move between pages	Sammes AS (first party)	30 days, or until you sign out
sammes_csrf	Strictly necessary	Protects forms and account actions against cross-site request forgery	Sammes AS (first party)	Session
sammes_consent	Strictly necessary	Stores your cookie choices so that we do not ask on every visit and can honour your settings	Sammes AS (first party)	12 months
sammes_lang	Preferences (non-essential)	Remembers the language you select so that pages load in your language	Sammes AS (first party)	12 months
sammes_analytics_id	Analytics (non-essential)	Distinguishes visits so we can measure which pages and features are used and improve the website; processed in aggregated form	Sammes AS (first party)	13 months

We keep this table up to date whenever we add, remove or rename a cookie. If you believe a cookie is missing from the list, please tell us using the contact details in section 8.

4. Consent and how to withdraw it

When you first visit the website, we show a consent banner that lets you accept or reject non-essential cookies, and that lets you choose per category. Nothing other than strictly necessary cookies is set until you make an affirmative choice. Rejecting non-essential cookies does not reduce your access to the website or its core features.

You can change or withdraw your consent at any time. To do so, open the "Cookie settings" link in the footer of any page and update your choices, or delete the sammes_consent cookie so that we ask you again. Withdrawing consent stops future non-essential cookies from being set and takes effect immediately; it does not affect the lawfulness of processing carried out before you withdrew. Withdrawing consent does not remove cookies that are already stored on your device, so you should also clear them in your browser if you want them gone.

5. The website and the apps

This policy covers the website at sammes.no. The Connect, Intel and Social mobile apps are native applications, so they do not use browser cookies for their core functions and this cookie table does not apply to them. Where an app opens a web page inside the app, that page may use the cookies described above, subject to the same consent rules.

Instead of cookies, the apps use SDKs, which are libraries built into the app. Our SDKs fall into a small number of categories: crash reporting and error diagnostics; push notifications; remote configuration and feature flags; and first-party product analytics. Some SDKs create a device-level or app-instance identifier so that a crash report or an analytics event can be grouped with others from the same installation. We do not use SDKs for third-party advertising or cross-app tracking, and you can turn app-level analytics off in the app settings.

Because the apps process personal data through SDKs rather than cookies, the details, including retention periods and the rights you can exercise, are set out in our Privacy Policy and in the per-app tables on our App Privacy page. The two documents together cover both the website and the apps.

6. Browser and device controls

You can also control cookies through your browser or device, independently of the consent banner on our website. All major browsers let you view, block and delete cookies, and most let you block third-party cookies specifically. The controls are found in the privacy or security settings of Chrome, Safari, Firefox and Edge, and in the settings of iOS and Android for app-level tracking.

• Blocking or deleting strictly necessary cookies will sign you out and may stop parts of the website from working.
• Blocking non-essential cookies has no effect on whether you can sign in or use the website.
• If you send a Do Not Track or Global Privacy Control signal, we treat it as an objection to non-essential analytics and preference cookies and we will not set them.
• Cookies you delete in your browser will be recreated only where the category still has your consent.

For more information about cookies and how to manage them, see the guidance published by your browser provider or by Datatilsynet.

7. Changes to this policy

We review this policy when our use of cookies changes, and at least once a year. The effective date and version at the top of the page show the current version. If we introduce a new non-essential cookie, we will ask for your consent before setting it and we will update the table in section 3. Earlier versions are available on request.

8. Contact

For questions about this policy, or to ask about a cookie you have seen, contact our data-protection contact at [email protected], or write to SAMMES AS, Øvrehusvegen 37E, 4054 Tjelta, Norway. For general enquiries, use [email protected] or our support page. Our handling of personal data is described in the Privacy Policy, and the data each app collects is described on the App Privacy page.