Who is the data controller
Norrloop AS is the data controller for the data described here. Norrloop AS is a Norwegian limited company, and the processing is governed by Norwegian law and the General Data Protection Regulation (GDPR).
Norrloop AS, Norwegian organisation number 937 687 451
Åsveien 34, 3425 Reistad, Norway
Email for privacy questions: alexander@norrloop.no
We are a small company and have not appointed a data protection officer. Privacy requests are answered by the managing director.
Which data we process, and when
When you use the contact form
The form on the website has these fields:
- name, email address and message, which are required
- what the enquiry is about, chosen from a list
- company and phone number, which are optional
When you submit the form, the content is sent to us as an email. The data is not stored in a database on the website. After that it is held in the mailboxes of the people who receive the enquiry.
The form is intended for enquiries from businesses. Please do not include sensitive information in the message field.
When you email us or contact us in another way
We process the information you give us, usually your name, employer, contact details and the content of the enquiry.
When you visit the website
The web server records technical information about each visit in a server log: IP address, time, which page was requested, which page you came from, and which browser and operating system you use. The hosting provider produces simple visitor statistics from these logs. We do not use the logs to find out who you are.
We use the statistics tool Umami to count visits. The tool does not use cookies and does not follow you across websites. It records which pages are viewed, which page you came from, the type of browser, operating system and device, and which country the visit comes from.
Product images are fetched from our supplier's image server at Shopify when a product page is displayed. Your browser fetches the images directly, which means Shopify sees your IP address and the page the request came from. Fonts and all other files are served from our own server.
What we use the data for
| Purpose | Data | Legal basis |
|---|---|---|
| Answering enquiries and following them up | Data from the form and from email | Legitimate interest in answering the person who contacts us (GDPR Article 6(1)(f)). If you ask for a quote, the basis is also steps taken before entering into a contract (Article 6(1)(b)) |
| Entering into and performing contracts with customers and suppliers | Contact details of contact persons | Article 6(1)(b) and (f) |
| Meeting bookkeeping obligations | Data shown on invoices and vouchers | Legal obligation (Article 6(1)(c)) |
| Operation, security and troubleshooting of the website | Server logs | Legitimate interest in a secure and stable website (Article 6(1)(f)) |
| Simple visitor statistics | Data from the statistics tool | Legitimate interest in understanding how the website is used (Article 6(1)(f)) |
We do not use the data for automated decisions or profiling. We do not sell personal data and we do not send newsletters.
Who receives the data
The data is handled by the people who work at Norrloop AS. We also use suppliers who process data on our behalf:
- Webhuset AS, Norway: hosting of the website and email, including server logs and visitor statistics
- Google (Gmail): email sent to us is read and kept in Gmail
- Fiken AS, Norway: accounting system, for data that appears on invoices and vouchers
- Umami Software, Inc., USA: visitor statistics without cookies
If an enquiry concerns a product from one of our suppliers, we may share the necessary information with that supplier in order to answer you. Apart from this, we only disclose data when the law requires it.
Some of the services mentioned above are provided by companies in the USA. Technical information such as your IP address may therefore be processed outside the EEA.
How long we keep the data
- Enquiries that do not lead to a customer relationship are deleted within 12 months of the last contact
- Data connected to quotes, contracts and deliveries is kept for as long as the customer relationship lasts, and for as long as it is needed to document the delivery and handle warranty claims
- Accounting records are kept for five years after the end of the financial year, as required by the Norwegian Bookkeeping Act
- Server logs are kept by Webhuset according to their routines
Cookies
The website does not set any cookies. For that reason we do not ask for cookie consent.
Your rights
You have the right to
- know which data we hold about you, and receive a copy
- have incorrect data corrected
- have data deleted when we no longer have a reason to keep it
- ask us to restrict the processing
- object to processing based on legitimate interest
- receive data you have given us in a commonly used format, when the processing is based on a contract
Send an email to alexander@norrloop.no to use your rights. We reply as soon as we can, and within one month at the latest. We may ask you to confirm your identity before we release any data.
Complaints to the supervisory authority
If you believe we process personal data in breach of the rules, please contact us first so that we can put it right. You have the right to lodge a complaint in any case.
Norrloop AS is established in Norway, so the Norwegian Data Protection Authority is the lead supervisory authority. Guidance and a complaint form are available at datatilsynet.no. Postal address: Datatilsynet, Postboks 458 Sentrum, 0105 Oslo, Norway.
If you live in another EEA country, you may also complain to the data protection authority in the country where you live or work.
Applicable rules
The processing is governed by the Norwegian Personal Data Act and the General Data Protection Regulation (GDPR), which applies in Norway through the EEA Agreement.
Changes
We update this policy when the website or our processing changes. The date at the top shows when the text was last changed.