| Question | Answer |
|---|
| Does a Norwegian exit IP decide whether the GDPR applies? | No. Article 3 looks at where your organisation is established (an establishment in the EU or EEA brings you in) and, for organisations outside it, whether you offer goods or services to people in the EEA or monitor their behaviour there (EDPB Guidelines 3/2018 on territorial scope). Where the proxy IP sits is not one of the tests. |
| Are public listings outside the GDPR? | No. A private seller's name, phone number, email, photo or address in an ad is personal data, even when anyone can open the ad. |
| What do I need if I keep personal data? | A lawful basis (often legitimate interests, after a balancing test), a defined purpose, data minimisation, a retention period, security, and information to the people concerned where the GDPR requires it. |
| What is the simplest way to stay small? | Keep the facts you need (price, category, area, date) and drop names, phone numbers and photos at collection time. |
|---|
Finn.no listings: the site's terms come first
Section 6 of Finn's user terms says that automated services (robots, spiders, indexing and the like) and other methods for systematic or regular copying of content in FINN's channels are not allowed without FINN's explicit written consent ("Bruk av automatiserte tjenester (roboter, spidere, indeksering m.m.) samt andre fremgangsmåter for systematisk eller regelmessig kopi av innholdet i FINNs kanaler er heller ikke tillatt uten eksplisitt skriftlig samtykke fra FINN"). So for Finn.no data in bulk, ask FINN for written consent first; the GDPR then governs the personal data in what you keep. A Norwegian IP shows you the public version of a listing, as a visitor in Norway sees it. ProxyField's rule for every site: public pages only, and follow the site's terms.
More on scraping law in Europe: web scraping law in the UK and EU. This is not legal advice.