National authorities and their remit
ExploreWorldAI is an EU regulatory intelligence platform for companies, not a travel service.
You never have to go through us to reach a supervisor. This page lists the authorities that cover data protection, electronic communication, AI rules and marketing in Sweden, Norway and at union level, what each one actually decides, and when writing to them is the right move.
Contact details are taken from each authority's own public site and are checked at every review of this page. Nothing here says that an authority has reviewed, approved or assessed ExploreWorldAI.
Reviewed: 2026-08-08
Integritetsskyddsmyndigheten (IMY)
- Level
- Sweden
- Role
- Data protection supervisory authority for Sweden, and the lead authority for us because our company is registered in Stockholm.
- Jurisdiction
- Personal data handled by controllers and processors established in Sweden, under Regulation (EU) 2016/679 and Swedish complementary law.
- Responsibility
- Handles complaints from data subjects about how personal data is used
- Supervises controllers and processors, and can order a practice to stop
- Receives reports of personal data breaches
- Issues administrative fines and other corrective measures
- Publishes guidance on legal basis, retention and transfers
- Contact
- Website: imy.se
Complaint form: imy.se/en/individuals/
Address: Box 8114, 104 20 Stockholm, Sweden - When to contact them
- When you believe your personal data has been handled wrongly by us and you are not satisfied with our answer, or when you want to complain without asking us first.
Datatilsynet
- Level
- Norway
- Role
- Data protection supervisory authority for Norway under the GDPR as incorporated in the EEA Agreement.
- Jurisdiction
- Personal data handled by controllers and processors established in Norway, and complaints from people resident in Norway.
- Responsibility
- Handles complaints from people in Norway, including complaints about a controller in another EEA country
- Supervises Norwegian controllers and processors
- Receives reports of personal data breaches in Norway
- Publishes Norwegian guidance and decisions
- Contact
- Website: datatilsynet.no
Address: Postboks 458 Sentrum, 0105 Oslo, Norway - When to contact them
- When you live in Norway and want to complain in Norwegian. Datatilsynet takes the complaint and cooperates with IMY as the lead authority for our company.
European Data Protection Board (EDPB)
- Level
- European Union
- Role
- The body that keeps the interpretation of the GDPR consistent across all supervisory authorities.
- Jurisdiction
- Union level. It does not handle individual complaints and does not supervise a single company.
- Responsibility
- Issues guidelines that supervisory authorities apply
- Resolves disputes between authorities in cross-border cases
- Publishes opinions on transfers, certification and codes of conduct
- Contact
- Website: edpb.europa.eu
- When to contact them
- When you want the source of an interpretation rather than a decision in your case. An individual complaint goes to IMY or Datatilsynet, never to the EDPB.
European Data Protection Supervisor (EDPS)
- Level
- European Union
- Role
- The supervisor for personal data handled by the EU institutions, bodies and agencies themselves.
- Jurisdiction
- The Commission, the Parliament, the Council and the union agencies, under Regulation (EU) 2018/1725. It does not supervise private companies such as ours.
- Responsibility
- Handles complaints about how an EU institution used personal data
- Supervises union bodies and can order a practice to stop
- Advises on union legislation that touches personal data
- Shares the secretariat work of the EDPB
- Contact
- Website: edps.europa.eu
Address: Rue Wiertz 60, 1047 Brussels, Belgium - When to contact them
- When an EU institution, not a company, handled your data. A complaint about us goes to IMY or Datatilsynet.
European AI Office
- Level
- European Union
- Role
- The Commission body that oversees the application of Regulation (EU) 2024/1689, the AI Act, and general-purpose AI models.
- Jurisdiction
- Union level for general-purpose models and coordination. National market surveillance authorities handle individual AI systems in each member state.
- Responsibility
- Coordinates supervision of the AI Act across member states
- Supervises providers of general-purpose AI models
- Publishes codes of practice and guidance on transparency obligations
- Contact
- Website: digital-strategy.ec.europa.eu
- When to contact them
- When your question concerns the AI Act itself rather than our use of it. Our classification and transparency statements are published on the AI Act page.
Post- och telestyrelsen (PTS)
- Level
- Sweden
- Role
- Supervisory authority for electronic communication in Sweden, including cookies and similar storage on a device.
- Jurisdiction
- The Swedish Electronic Communications Act, which carries the cookie rules. Consent for cookies is supervised by PTS, not by IMY.
- Responsibility
- Supervises how consent for cookies and similar technologies is collected
- Handles complaints about tracking on Swedish websites
- Publishes guidance on what a website must tell a visitor
- Contact
- Website: pts.se
Address: Box 6101, 102 32 Stockholm, Sweden - When to contact them
- When your question is about cookies or tracking on the site rather than about personal data in the product. Your own choices can be changed at any time on the cookie page.
Nasjonal kommunikasjonsmyndighet (Nkom)
- Level
- Norway
- Role
- Supervisory authority for electronic communication in Norway, including the cookie rules in Norwegian law.
- Jurisdiction
- Electronic communication services and cookie consent for websites aimed at Norway.
- Responsibility
- Supervises consent for storage and access on a user device
- Handles complaints about tracking on Norwegian websites
- Contact
- Website: nkom.no
Address: Postboks 93, 4791 Lillesand, Norway - When to contact them
- When you are in Norway and your complaint concerns cookies or tracking rather than personal data.
Konsumentverket
- Level
- Sweden
- Role
- Supervisory authority for marketing and consumer terms in Sweden.
- Jurisdiction
- Marketing practices and standard terms towards consumers. Business-to-business terms fall outside its remit.
- Responsibility
- Supervises marketing claims and price information
- Reviews standard terms offered to consumers
- Can take a case to the Patent and Market Court
- Contact
- Website: konsumentverket.se
Address: Box 48, 651 02 Karlstad, Sweden - When to contact them
- When you buy as a private person and believe a claim, a price or a term was misleading. Business customers use the dispute route in the terms of use.
Forbrukertilsynet
- Level
- Norway
- Role
- Supervisory authority for marketing and consumer terms in Norway.
- Jurisdiction
- Marketing practices and standard terms towards consumers in Norway.
- Responsibility
- Supervises marketing and price information towards consumers
- Reviews standard terms and can require a change
- Handles complaints about misleading claims
- Contact
- Website: forbrukertilsynet.no
Address: Postboks 2862 Kjørbekk, 3702 Skien, Norway - When to contact them
- When you buy as a private person in Norway and believe our marketing or our terms were misleading.
Finansinspektionen (FI)
- Level
- Sweden
- Role
- Supervisory authority for financial firms and payment services in Sweden.
- Jurisdiction
- Firms with a Swedish licence under Directive (EU) 2015/2366, PSD2, and related financial law. We hold no licence, our payment provider does.
- Responsibility
- Supervises payment service providers and strong customer authentication
- Handles reports about a licensed firm and can impose sanctions
- Publishes rules on payment security and consumer information
- Keeps the public register of licensed firms
- Contact
- Website: fi.se
Address: Box 7821, 103 97 Stockholm, Sweden - When to contact them
- When a card payment, an authentication step or a refund went wrong at the payment provider. Write to us first, we hold the receipt and can trace the charge.
Which authority for which question
One line per situation, so you do not have to read all ten blocks to find the right address.
| Your situation | Where it goes |
|---|---|
| My personal data was handled wrongly | IMY (Sweden) or Datatilsynet (Norway) |
| I want my data deleted or corrected | Us first, at /gdpr-request, then IMY if you disagree |
| A personal data breach affected me | Us, and IMY as the lead authority |
| Cookies or tracking on the website | PTS (Sweden) or Nkom (Norway) |
| The marketing or the price was misleading | Konsumentverket (Sweden) or Forbrukertilsynet (Norway) |
| A question about the AI Act itself | The European AI Office |
| How the GDPR should be interpreted | The EDPB, for guidance only |
| An EU institution handled my data | The EDPS |
| A card payment or a refund went wrong | Us first, then Finansinspektionen (Sweden) |
Related texts
ExploreWorldAI is operated by Valkiv Ventures AB (Reg. no. 556995-1311), Kungsgatan 8, 111 43 Stockholm, Sweden. EU-hosted, with data processing assessed against the GDPR. Contact: hello@exploreworldai.com.
Machine-readable summaries for AI agents: /llms.txt and /llms-full.txt.
