Privacy Notice

PINTO URZUA - ANDES.NO / Org. no. 936 883 672 · Last updated 21 July 2026

Who we are

Andes is the trading brand of PINTO URZUA - ANDES.NO, a Norwegian sole proprietorship. We build software and provide operational services for AI compliance work. Questions or requests: explore@andes.no.

AI Systems Check applications

If you apply for an AI Systems Check, we collect your name, work email, organisation, role, organisation size, sector, AI system stage, main governance concern, decision authority and preferred review window. We do not ask you to submit system records, evidence, personal data about other people or confidential technical details in the application form.

We use this information to assess fit, manage limited review capacity, contact you about the requested check and maintain an operational record of the application. The legal basis is taking steps at your request before entering into a contract (GDPR Art. 6(1)(b)). Optional product updates use consent (GDPR Art. 6(1)(a)) and can be withdrawn at any time.

Systems and service providers

AI Systems Check application records are processed in our website hosting, database, authentication and Google Workspace environments. Access is restricted to authorised Andes operators. We do not sell application data. We retain an initial application for up to 90 days unless it becomes part of an active customer record, a legal obligation requires longer retention, or you ask us to delete it sooner.

What data we hold and why

If you have received a cold email from us, we hold the following data about you:

  • Full name
  • Job title and seniority
  • Company name and website
  • Business email address

This data was sourced from Apollo.io, a B2B data provider that aggregates publicly available professional information. We did not receive it directly from you.

Legal basis

We process this data under Legitimate Interest (GDPR Art. 6(1)(f)). Our interest is to reach decision-makers at professional services firms who may benefit from Kernal Pro. We have assessed that this interest is proportionate and does not override your rights.

How we use it

We will contact you a maximum of three times via email. Each email contains a one-click unsubscribe link. We do not use your data for any other purpose, do not sell it, and do not share it with third parties outside of the tools required to send email (Google Workspace / Gmail).

Retention

We delete your data 90 days after the last contact in your sequence, or immediately upon unsubscribe - whichever comes first. Unsubscribe requests are honoured within 24 hours and your data is removed within 7 days.

Your rights

Under GDPR you have the right to:

  • Access the data we hold about you
  • Correct inaccurate data
  • Request erasure of your data
  • Object to processing based on legitimate interest
  • Lodge a complaint with your national data protection authority

To exercise any of these rights, email explore@andes.no. We will respond within 30 days.

Supervisory authority

The competent supervisory authority for PINTO URZUA - ANDES.NO is Datatilsynet (Norwegian Data Protection Authority), Postboks 458 Sentrum, 0105 Oslo.

PINTO URZUA - ANDES.NO / Org. no. 936 883 672 · Oslo, Norway · explore@andes.no
    Kernal - The Context Layer for Your AI · Andes Labs