Privacy

Are you concerned about how your personal data is handled in this online store? Then you have come to the right place.

Below you will be able to read how we at Smaffelutions.com handle personal data, as well as get information about your rights as registered with us. We hope you find what you are looking for here. You can of course also contact us if you have any questions about our processing of your information. We are concerned with security and transparency in this area, and we take your inquiries seriously!

Data controller
Name: Smaffelutions AS.
Organization number: 931 688 332
Contact person: Sultan Avtajev
Telephone: (+47) 47822894
Email: kontakt@smaffelutions.com
Address: Vestlisvingen 80, 0969 Oslo

Why do we process personal data?
We collect and process personal data in order to be able to offer visitors to our websites the services and products they request. We also want to offer better and more relevant content to the individual customer, as well as create good and long-lasting relationships with our existing customers.

When do we process personal data?
Below you will find a list of when and how we process personal data in the individual cases. Note that all processing is based on consent, with the exception of the collection of data upon purchase, where certain information must be provided in order to complete the purchase. In this case, the processing basis is the conclusion of an agreement.

Newsletter
Where: The online store's newsletter
What is stored: Email address
Area of ​​use for personal data: To send out newsletters
Storage period: Indefinitely. Until you unsubscribe from the newsletter or request deletion
Processing basis: Consent
Security: The information is stored on a secure server. Contact us for further information on security
Data processor (third party): MailChimp

Buy in the online store:
Where: At the store's checkout/cash register
What is stored: First name, last name, telephone number, e-mail, street address, postcode, place, product name, number of products, shipping options selected, name of selected payment method (e.g. Klarna Invoice) and price. Birth and social security numbers are only required when using financing services, and are not stored in the online store. Birth and social security numbers are collected and processed only by payment providers. Company name, organization number and contact person are required for business purchases.
Area of ​​use for personal data: In order to make a purchase in this online store, name, address and contact information are required for the completion of payment and dispatch of goods, as well as the sending of an invoice where this has been selected. The contact information can also be used to contact the buyer in connection with the purchase. Birth and social security numbers are used by financing providers to be able to carry out a credit check in connection with the use of invoices and financing services. The information will also be used for accounting purposes.
Storage period: The personal information is stored in accordance with the Accounting Act, and normally for 10 years after the end of the financial year. If an agreement on an additional guarantee for the product has been entered into, the information will be stored for as long as the guarantee is valid, but not shorter than 10 years.
Basis for processing: Necessary for entering into an agreement/purchase and for bookkeeping.
Security: The information is stored on a secure server. Contact us for further information on security.
Data processor (third party): Klarna, PayPal, Stripe, Posten Norge, Bring, Fiken

Contact form/customer inquiries:
Where: Contact form in online store
What is stored: First name, last name, telephone number, e-mail + inquiry
Area of ​​use for personal data: The information is used to be able to respond to your enquiry. If you have previously submitted an inquiry registered to the same name, telephone number or e-mail address, we will be able to see your inquiry history. We do this to be able to answer your questions better, especially if they relate to previous inquiries or purchases.
Storage period: The information associated with your inquiries is stored for as long as is necessary to be able to answer your inquiries.
Processing basis: Consent.
Security: The information is stored on a secure server. Contact us for further information on security.
Data processor (third party): Gmail, Outlook

Creating a customer profile in the online store:
Where: Under "My account/create customer"
What is stored: First name, last name, address, telephone number, password and e-mail address.
Area of ​​use for personal data: The information is used to create a customer profile for you. In your customer profile, you can see purchases you have entered in the store, as well as edit and adapt personal information you have provided to us. You can also sign up for the newsletter on your customer profile.
Storage period: The information associated with your customer profile is stored until you request that it be deleted.
Processing basis: Consent.
Security: The information is stored on a secure server. Contact us for further information on security.

Cookies
This online store uses cookies to give you a better user experience in all channels. Use of cookies is based on consent through cookie settings in your browser, as well as your continued use of our pages.

What is the online store's processing basis?
Smaffelutions AS processes certain types of personal data. The types of data we process can be found in the overview above. Our processing basis is in most cases consent, with one exception. This means that we collect and process personal data based on the consent of the data subject. In the case of purchases in our online store, on the other hand, the basis for processing is not consent, but the necessity for entering into an agreement in addition to statutory record-keeping requirements.

Processing of certain types of personal data outside the EU and EEA
The online store does not use any third-party suppliers outside the EU and EEA, and does not process personal data outside the EU/EEA.

Your rights
Access to your own personal data: If you are registered in our systems, you have the right to access the data we hold about you, should you wish. This means that you can have the data sent to you, or you can be informed about where you can find this data. In some cases, we may need to request additional information about you in order to verify your identity before you are granted access. Contact the controller if access is desired.

Correction of your own personal data: If you are registered in our systems, and perceive that we have recorded incorrect information about you, you have the right to have this data corrected, or you can gain access to correct it yourself. In some cases, we may need to request additional information about you in order to verify your identity before you are granted access. Contact the controller if correction is desired.

Deletion of your own personal data: If you are registered in our systems, but want us to delete the data we hold about you, you have the right to do so. If you wish to delete your data, please contact us via e-mail address e-mail address here. We reserve the right that in some cases there may be reasons why the data cannot be deleted immediately, if you have entered into a contract with us, and this data is necessary for the maintenance of this contract. In some cases, we may need to request additional information about you in order to verify your identity before you are granted access. Contact the controller if deletion is desired.

Limiting the processing of your own personal data: If you are registered in our systems and wish to limit the processing of your personal data, you have the right to request this. You can request that certain forms of treatment cease, or you can request that we end all treatment. We reserve the right that in some cases there may be legal reasons which mean that such limitation of processing cannot be carried out. Deletion of data may then be an alternative, if general restriction is not possible according to the current regulations. In some cases, we may need to request additional information about you in order to verify your identity before we can make the changes. Contact the data controller if restriction of processing is desired.

Data portability: If you are registered in our systems, and the collection and processing of this personal data is carried out automatically and is based on consent, you have the right to transfer this data to other suppliers. You can request this from us, and you then have the right to receive this information in a structured, commonly used and machine-readable format. You may also have the right to have this data transferred directly from us to another supplier, if this is technically possible. In some cases, we may need to request additional information about you in order to verify your identity before we can do this. Contact the controller if moving or transferring your personal data is desirable.

Withdraw consent to the processing of your own personal data: With the exception of information you provide in connection with a purchase, all processing of personal data at Smaffelutions AS is based on consent. You have the right to withdraw your consent at any time, and the processing of this personal data for the relevant purpose shall then cease. If the information is only used for the purpose for which you withdraw your consent, the information must also be deleted. In some cases, we may need to request additional information about you in order to verify your identity before we can do this. Contact the controller if you wish to withdraw your consent to one or more processing of personal data.

Complain about the processing of your own personal data: If you wish to complain about the way your data is processed, or anything else related to your personal data, you have the right to do so. We hope you would like to send an e-mail or otherwise contact the controller (the contact details for the controller can be found at the top of this page). The data controller is responsible for safeguarding your rights, and helps you with any questions you may have. You also have the right to contact the Norwegian Data Protection Authority if you disagree with decisions or processing methods at Smaffelutions AS.