Privacy Policy

Last updated:

1. Data Controller

The data controller responsible for the processing of your personal data is:

Vomrelonnriz
Bryggetorget 10, 0250 Oslo, Norway
Email: ask@vomrelonnriz.world
Website: https://vomrelonnriz.world

2. What Data We Collect

We may collect and process the following categories of personal data:

  • Identity Data: Full name as provided in the order form.
  • Contact Data: Email address and, optionally, phone number.
  • Communication Data: Messages submitted through the order form.
  • Technical Data: IP address, browser type and version, operating system, referral source, pages visited, time and date of visit, and time spent on pages (collected via cookies with your consent).
  • Consent Data: Records of consent given for data processing and cookie usage.

3. How We Collect Your Data

We collect data through the following methods:

  • Directly from you when you submit the order form on our website.
  • Automatically through cookies and similar technologies when you browse our website (with your consent where required).

4. Legal Basis for Processing

We process your personal data based on the following legal grounds under the General Data Protection Regulation (GDPR):

  • Consent (Article 6(1)(a) GDPR): Where you have given consent for specific purposes, such as marketing cookies or receiving communications.
  • Performance of a Contract (Article 6(1)(b) GDPR): Where processing is necessary to fulfill your order or to take steps at your request prior to entering into a contract.
  • Legitimate Interests (Article 6(1)(f) GDPR): Where processing is necessary for our legitimate interests, such as improving our website, provided these interests are not overridden by your rights.
  • Legal Obligation (Article 6(1)(c) GDPR): Where processing is necessary to comply with legal obligations to which we are subject.

5. Purposes of Processing

We use your personal data for the following purposes:

  • To process and manage your orders.
  • To communicate with you regarding your order or inquiries.
  • To improve our website functionality and user experience.
  • To analyze website traffic and usage patterns (with consent).
  • To comply with legal and regulatory obligations.
  • To manage cookie preferences and consent records.

6. Data Retention

We retain your personal data only for as long as necessary to fulfill the purposes for which it was collected:

  • Order data: Retained for up to 5 years after the last transaction to comply with accounting and tax regulations under Norwegian law (Bookkeeping Act/bokføringsloven).
  • Communication data: Retained for up to 2 years after the last communication.
  • Technical and analytics data: Retained for up to 26 months.
  • Consent records: Retained for as long as the consent is valid, plus an additional 3 years for record-keeping purposes.

After the retention period expires, your data will be securely deleted or anonymized.

7. Your Rights

Under the GDPR, you have the following rights regarding your personal data:

  • Right of Access (Article 15): You have the right to request a copy of the personal data we hold about you.
  • Right to Rectification (Article 16): You have the right to request correction of inaccurate or incomplete personal data.
  • Right to Erasure (Article 17): You have the right to request deletion of your personal data under certain circumstances.
  • Right to Restriction of Processing (Article 18): You have the right to request restriction of processing in certain situations.
  • Right to Data Portability (Article 20): You have the right to receive your personal data in a structured, commonly used, and machine-readable format.
  • Right to Object (Article 21): You have the right to object to processing based on legitimate interests or for direct marketing purposes.
  • Right to Withdraw Consent (Article 7(3)): Where processing is based on consent, you may withdraw your consent at any time without affecting the lawfulness of processing carried out before withdrawal.

To exercise any of these rights, please contact us at ask@vomrelonnriz.world. We will respond to your request within 30 days.

8. Data Sharing and Transfers

We do not sell your personal data. We may share your data with:

  • Service providers: Third-party processors who assist us in operating the website, processing orders, or analyzing data. These processors act only on our instructions and are bound by data processing agreements.
  • Legal authorities: If required by applicable law, regulation, or legal proceeding.

If your data is transferred outside the European Economic Area (EEA), we ensure that adequate safeguards are in place, such as Standard Contractual Clauses (SCCs) approved by the European Commission, or an adequacy decision.

9. Data Security

We implement appropriate technical and organizational measures to protect your personal data against unauthorized access, alteration, disclosure, or destruction. These measures include:

  • Encryption of data in transit (HTTPS/TLS).
  • Access controls and restricted authorization.
  • Regular security assessments and updates.
  • Secure data storage with backup procedures.

10. Cookies

Our website uses cookies. For detailed information about the types of cookies we use, their purposes, and how to manage your cookie preferences, please refer to our Cookie Policy.

11. Children's Privacy

Our website and products are not directed at individuals under the age of 18. We do not knowingly collect personal data from children. If you believe a child has provided us with personal data, please contact us and we will take steps to delete such information.

12. Complaints

If you believe that our processing of your personal data violates the GDPR, you have the right to lodge a complaint with a supervisory authority. In Norway, the relevant authority is:

Datatilsynet (Norwegian Data Protection Authority)
Website: www.datatilsynet.no

13. Changes to This Policy

We may update this Privacy Policy from time to time. Any changes will be posted on this page with an updated "Last updated" date. We encourage you to review this policy periodically.

14. Contact Us

If you have any questions about this Privacy Policy or our data processing practices, please contact us:

Vomrelonnriz
Bryggetorget 10, 0250 Oslo, Norway
Email: ask@vomrelonnriz.world