Svyxaronghakthol

Privacy Policy

Last updated:

1. Data Controller

The data controller responsible for the processing of your personal data is:

Svyxaronghakthol
Storgata 40, 9008 Tromsø, Norway
Email: service@svyxaronghakthol.world

If you have any questions or concerns regarding the processing of your personal data, you may contact us using the information above.

2. Scope and Purpose

This Privacy Policy describes how Svyxaronghakthol (hereinafter referred to as "we," "us," or "our") collects, uses, processes, stores, and protects your personal data when you visit our website at https://svyxaronghakthol.world (the "Website") or interact with our services. This policy applies to all visitors, users, and customers of the Website.

We are committed to protecting your privacy and processing your personal data in accordance with the General Data Protection Regulation (GDPR — Regulation (EU) 2016/679), the Norwegian Personal Data Act (Personopplysningsloven), and any other applicable data protection legislation.

3. Personal Data We Collect

We may collect and process the following categories of personal data:

3.1 Data You Provide Directly

  • Contact information: Full name, email address, and phone number (if voluntarily provided) when you submit an order form or contact us.
  • Communication data: The content of messages you send to us through our order form or via email.
  • Consent records: Records of the consents you have given, including GDPR consent and cookie preferences.

3.2 Data Collected Automatically

  • Technical data: IP address, browser type and version, operating system, device type, screen resolution, and language settings.
  • Usage data: Pages visited, time spent on pages, referral source, click patterns, and navigation paths.
  • Cookie data: Information collected through cookies and similar technologies, as described in our Cookie Policy.

4. Legal Basis for Processing

We process your personal data based on the following legal grounds under Article 6 of the GDPR:

  • Consent (Article 6(1)(a)): When you explicitly consent to the processing, such as when you submit an order form with the GDPR consent checkbox checked, or when you accept optional cookies.
  • Contractual necessity (Article 6(1)(b)): When processing is necessary for the performance of a contract or to take steps at your request prior to entering into a contract, such as processing your order.
  • Legitimate interests (Article 6(1)(f)): When processing is necessary for our legitimate interests, such as improving our website, ensuring security, and conducting analytics, provided that such interests are not overridden by your fundamental rights and freedoms.
  • Legal obligation (Article 6(1)(c)): When processing is required to comply with applicable laws and regulations.

5. Purposes of Processing

We use your personal data for the following purposes:

  • Processing and managing your orders and inquiries.
  • Communicating with you regarding your order, including sending confirmation emails and responding to your questions.
  • Complying with legal and regulatory obligations under Norwegian and EU law.
  • Analyzing website usage to improve the quality, functionality, and user experience of the Website.
  • Ensuring the security and integrity of our Website and systems.
  • Maintaining internal records and administrative purposes.

6. Data Retention

We retain your personal data only for as long as necessary to fulfill the purposes for which it was collected, including:

  • Order data: Retained for up to 5 years from the date of the order to comply with Norwegian accounting and tax regulations (Bokføringsloven).
  • Communication records: Retained for up to 2 years after your last interaction with us, unless a longer retention period is required by law.
  • Cookie consent preferences: Stored locally on your device and retained until you clear your browser data or update your preferences.
  • Analytics data: Retained in an aggregated and anonymized form for up to 26 months.

After the applicable retention period expires, your personal data will be securely deleted or anonymized.

7. Data Sharing and Third-Party Processors

We do not sell, rent, or trade your personal data to third parties. We may share your data with the following categories of recipients, solely for the purposes described in this policy:

  • Service providers: Third-party processors who assist us with website hosting, email delivery, payment processing, and analytics services. These providers are contractually obligated to process your data only on our instructions and in compliance with applicable data protection laws.
  • Legal authorities: Government agencies, law enforcement, or regulatory bodies when required by applicable law, court order, or legal process.

All third-party processors are located within the European Economic Area (EEA) or, where transfers outside the EEA are necessary, appropriate safeguards are in place, including Standard Contractual Clauses (SCCs) approved by the European Commission.

8. International Data Transfers

Your personal data is primarily processed within Norway and the European Economic Area (EEA). If it is necessary to transfer your data outside the EEA, we will ensure that adequate safeguards are in place, in accordance with Chapter V of the GDPR. These safeguards may include:

  • Transfers to countries recognized by the European Commission as providing an adequate level of data protection.
  • Standard Contractual Clauses (SCCs) adopted by the European Commission.
  • Other appropriate safeguards as permitted by GDPR.

9. Your Rights

Under the GDPR and Norwegian data protection law, you have the following rights regarding your personal data:

  • Right of access (Article 15): You have the right to request a copy of the personal data we hold about you.
  • Right to rectification (Article 16): You have the right to request correction of inaccurate or incomplete personal data.
  • Right to erasure (Article 17): You have the right to request deletion of your personal data, subject to legal retention obligations.
  • Right to restriction (Article 18): You have the right to request that we restrict the processing of your personal data in certain circumstances.
  • Right to data portability (Article 20): You have the right to receive your personal data in a structured, commonly used, and machine-readable format.
  • Right to object (Article 21): You have the right to object to the processing of your personal data based on legitimate interests or for direct marketing purposes.
  • Right to withdraw consent (Article 7): Where processing is based on consent, you have the right to withdraw your consent at any time without affecting the lawfulness of processing carried out prior to withdrawal.

To exercise any of these rights, please contact us at service@svyxaronghakthol.world. We will respond to your request within 30 days, as required by GDPR.

10. Right to Lodge a Complaint

If you believe that the processing of your personal data infringes your rights under the GDPR, you have the right to lodge a complaint with the Norwegian Data Protection Authority (Datatilsynet):

Datatilsynet
Postboks 458 Sentrum
0105 Oslo, Norway
Website: https://www.datatilsynet.no

11. Security Measures

We implement appropriate technical and organizational measures to protect your personal data against unauthorized access, alteration, disclosure, or destruction. These measures include, but are not limited to:

  • Use of HTTPS encryption for all data transmitted between your browser and our Website.
  • Secure storage of personal data with access restricted to authorized personnel only.
  • Regular security assessments and updates to our systems and processes.
  • Staff training on data protection best practices and confidentiality obligations.

12. Cookies and Tracking Technologies

Our Website uses cookies and similar technologies to provide and improve our services. For detailed information about the types of cookies we use, their purposes, and how you can manage your preferences, please refer to our Cookie Policy.

13. Children's Privacy

Our Website and services are not directed at individuals under the age of 18. We do not knowingly collect personal data from children. If we become aware that we have collected personal data from a child without verifiable parental consent, we will take steps to delete that data promptly.

14. Changes to This Privacy Policy

We reserve the right to update this Privacy Policy from time to time to reflect changes in our practices, legal requirements, or for other operational reasons. When we make material changes, we will update the "Last updated" date at the top of this page. We encourage you to review this policy periodically to stay informed about how we protect your data.

15. Contact Us

If you have any questions, concerns, or requests regarding this Privacy Policy or our data processing practices, please contact us:

Svyxaronghakthol
Storgata 40, 9008 Tromsø, Norway
Email: service@svyxaronghakthol.world