Privacy policy
How we handle your personal data under the GDPR.
Data controller
Nedre Foss AS, Nordre gate 2, 0551 Oslo, Norway (Registro Mercantil 915335020). Contact: [email protected], +47 21 09 59 90.
Data we collect
- Order data: name, email, delivery address, phone (optional), ordered items.
- Messages you send us.
Purposes and legal bases
- Processing and delivering orders — performance of a contract (Art. 6(1)(b) GDPR).
- Accounting and tax records — legal obligation (Art. 6(1)(c)).
Recipients
We share data only with service providers needed to run the shop (hosting, payment and delivery providers), bound by data-processing agreements. We do not sell personal data.
Retention
Order data is kept as long as required by Norwegian accounting and tax law.
Your rights
You have the right to access, rectify, erase, restrict and port your data and to object to processing. Write to [email protected]. You may also complain to the Norwegian Data Protection Authority (Datatilsynet, www.datatilsynet.no).