It is voluntary to provide me with personal data, but if you choose not to, I might not be able to provide you with services. I process personal data when you buy products, subscribe to the newsletter, contact me and otherwise use this website. I do not rent, buy or sell personal data from or to others, use automated decisions or profiling in the processing of your personal data or process special category data.

You can always withdraw your consent for any data processing based on consent, and you can also reach out to me at any time if you’d like me to stop processing and/or ask me to delete any of your data.

In this section I describe in detail when and how I process your data, for what purposes and the legal grounds to do so (lawful bases). I also specify the retention periods for the processing.

I process personal data when:

You communicate with me
When you contact me, through this website (comments), e-mail, phone (call, text message), social media and/or give, I process personal data. Depending on where and how you contact me, this may include your name, contact details, IP address and other information you choose to send. The purpose is to be able to respond to your inquiries and, on some occasions, to keep records in case of complaints or legal claims.

You request products
When you request products by contacting me, I process personal data such as your name, contact details, order and purchase history. The purpose is to be able to fulfil my obligation to deliver products you have purchased and to manage the customer relationship. I process the data for as long as I have a legal obligation as per any applicable rules and regulations we are bound by. E.g. we are required by law to store business records, which could include personal data, for 5 years for accounting, tax and other business purposes. Please contact me if you would like to know what is applicable in your case.

You subscribe to email newsletter
I regularly send out email newsletters which sometimes contain information about my products. When you become a subscriber, I process personal data such as your email address. The purpose is to share updates, articles and other useful content. You can easily unsubscribe at any time by clicking the «unsubscribe» link in any such newsletter.

The email service provider I use has integrated analytics showing email opens and clicks. This functionality is native in the system and cannot be disabled. If you do not want your data to be analysed in this way, please do not subscribe to the newsletter. I use this data to analyse the performance of the newsletters and to tailor content to you.
I process the data for as long as you subscribe. I use the email provider Flodesk to store your email and to send newsletters.

You use the website
When you use this website, I may process personal data such as IP address and other technical data collected via cookies and analytics tools. The purpose is to run our website and business effectively, promote products and services and to respond to any inquiries from website visitors. The lawful basis for processing personal data through cookies that are strictly necessary, is consent as per the Norwegian Act relating to electronic communications (The Electronic Communications Act) § 2-7 and as advised by Nkom (May 2020). Read more in our Cookie notice.

I use Google Analytics to analyze how the visitors use this website.

In order to run the business efficiently and securely, I sometimes will have to share your personal data with other parties such as:

— Data processors: providers of various services that process your personal data on my behalf (e.g. for IT and administrative services, accounting, cloud storage, web hosting, e-mailing etc.)

— Professional advisors from industries such as law, finance, accounting, auditing and insurance

— IT and other systems support, e.g. for the website, cloud storage etc.

— Public authorities I am obliged to report to

We require that all such recipients secure data in accordance with good information security and as per the requirements of this Privacy Notice. We enter into a data processing agreement/addendum with anyone who processes data on our behalf.

In some cases, your personal data will be transferred outside the EU/EEA, e.g. where I use data processors to manage cloud storage, email services, web hosting etc.
I only use data processors I trust, that are well known and that I have a data processing agreement/addendum with. I also make sure necessary safeguards are in place like Privacy Shield for American data processors and/or the EU Model Clauses. If you would like to know where your particular data is processed, please contact me.

I take information security seriously and I will always do my utmost to safeguard your personal data in the best possible way. For example, I use strong passwords to secure all data and prevent unauthorized persons from accessing, altering, deleting, or in any way affecting the data I store, including your personal data.
I only allow others to access and/or process your personal data in accordance with my instructions, and only when strictly necessary (e.g. if I require IT support).