Controller and processor — your responsibility

Last updated: 29 June 2026

This summary is for businesses that use Klarte.no. It is not legal advice. If you are unsure, contact a qualified adviser.

Two separate roles

Party	Role under the GDPR	Who they are

Your business	Controller	The salon, clinic, agency, or brand the booker deals with

Klarte.no	Processor	The SaaS company that operates the booking software

What you are responsible for (controller)

Telling bookers who you are, and how you use their information (the privacy notice on the booking page)
Choosing a lawful basis for marketing and optional analytics
Responding to requests from bookers (access, erasure, complaints) — Klarte provides self-service, but you remain responsible
Making sure the business name, email, and address in the notice are correct
Any extra privacy text you add beyond Klarte’s standard template
Following laws that apply to your industry and country

What Klarte is responsible for (processor)

Providing the booking platform securely
Processing booker data only on your instructions through the product settings
Assisting with the technical measures described in the data processing agreement
Notifying you of security incidents that affect the platform, so you can meet your duties as controller

What Klarte is not responsible for

How you communicate with bookers, or how you run the business
Whether your privacy information or consent setup is lawful in your situation
Complaints from bookers directed at your business
Tools or services you use outside Klarte (CRM, newsletters, and similar) that you describe in an optional supplement to the notice

Privacy notice for bookers

Bookers see a standard core (written by Klarte to support the processor) plus your business details, filled in automatically. The contact section names your business as controller — not Klarte.no.

Privacy requests overview
Data-request guide
Terms of use
Platform privacy notice (your Klarte account)
Data processing agreement