Privacy Policy

1. Data Controller

Volkrannvorm.world is the data controller responsible for the processing of your personal data in connection with this website and our services.

For any questions regarding data protection, you may contact us using the details above. We aim to respond to all enquiries within 14 working days.

2. Personal Data We Collect

We collect and process personal data in a transparent and lawful manner. The types of data we may collect include:

• Identity and contact data: Your name, email address, and any other information you voluntarily provide when submitting an order, enquiry, or feedback form.
• Communication data: The content of messages you send to us, including questions, comments, or requests for support.
• Technical data: Your IP address, browser type and version, device information, operating system, time zone, and pages visited on our website. This data may be collected via cookies and similar technologies, subject to your consent where required.
• Usage data: Information about how you interact with our website, such as pages viewed, time spent on pages, and navigation paths. This is collected only with your explicit consent for analytics purposes.

We do not collect special categories of personal data (e.g. health data, racial or ethnic origin) unless you voluntarily provide such information and we have a lawful basis to process it.

3. Purposes and Legal Basis

We process your personal data for the following purposes and legal bases:

4. Data Retention

We retain personal data only for as long as necessary to fulfil the purposes for which it was collected, and in accordance with applicable law.

• Order and enquiry data: Retained for up to 24 months after your last interaction with us, unless a longer retention period is required for legal or regulatory purposes.
• Analytics data: Retained for up to 14 months when you have consented to analytics cookies.
• Marketing data: Retained until you withdraw consent or for up to 24 months, whichever occurs first.
• Technical and security logs: Retained for a limited period as necessary for security and fraud prevention, typically up to 12 months.

After the retention period ends, we securely delete or anonymise your personal data so that it can no longer identify you.

5. Your Rights (GDPR)

Under the General Data Protection Regulation (EU 2016/679) and applicable Norwegian law, including the Personal Data Act, you have the following rights:

• Right of access: You may request a copy of the personal data we hold about you.
• Right to rectification: You may request that we correct any inaccurate or incomplete personal data.
• Right to erasure: In certain circumstances, you may request that we delete your personal data ("right to be forgotten").
• Right to restrict processing: You may request that we limit the way we use your data in certain situations.
• Right to data portability: Where processing is based on consent or contract, you may receive your data in a structured, commonly used, machine-readable format.
• Right to object: You may object to processing based on legitimate interests, including profiling. We will stop processing unless we can demonstrate compelling legitimate grounds.
• Right to withdraw consent: Where processing is based on consent, you may withdraw that consent at any time. This does not affect the lawfulness of processing before withdrawal.
• Right to lodge a complaint: You have the right to lodge a complaint with a supervisory authority. In Norway, this is Datatilsynet (www.datatilsynet.no).

To exercise any of these rights, please contact us at admin@volkrannvorm.world. We will respond within one month of receiving your request. In complex cases, we may extend this period by up to two further months and will inform you of any delay.

6. Data Sharing

We do not sell, rent, or trade your personal data. We may share your data with trusted third-party service providers who assist us in operating our website and delivering our services. Such providers act only on our instructions and are bound by contractual obligations to protect your data.

Categories of recipients may include:

• Hosting and infrastructure providers
• Email delivery services
• Analytics providers (only when you have given consent)
• Customer support and communication tools

We may also disclose your data where required by law, such as in response to a court order, subpoena, or legal process, or to protect our rights, property, or safety.

7. Security Measures

We implement appropriate technical and organisational measures to protect your personal data against unauthorised access, alteration, disclosure, or destruction. Our security measures include:

• Encryption: All data transmitted between your browser and our servers is encrypted using HTTPS (TLS/SSL).
• Access controls: Access to personal data is restricted to authorised personnel who need it to perform their duties.
• Secure storage: Data is stored on secure servers with appropriate physical and logical safeguards.
• Regular reviews: We periodically review and update our security practices to address new threats and best practices.

While we strive to protect your personal data, no method of transmission over the internet or electronic storage is 100% secure. We encourage you to use strong passwords and keep your login credentials confidential.

8. International Transfers

Your personal data is primarily processed within the European Economic Area (EEA). Where we transfer data to countries outside the EEA, we ensure that appropriate safeguards are in place, such as:

• Standard Contractual Clauses approved by the European Commission
• Adequacy decisions recognising that the destination country provides an adequate level of data protection

You may request a copy of the safeguards we use for international transfers by contacting us.

9. Policy Updates

We may update this Privacy Policy from time to time to reflect changes in our practices, legal requirements, or the services we offer. When we make material changes, we will update the "Last updated" date at the top of this page and, where appropriate, notify you by email or through a prominent notice on our website.

We encourage you to review this Privacy Policy periodically. Your continued use of our website after any changes indicates your acceptance of the updated policy.