PRIVACY POLICY FOR THE WEBSITE WWW.HANDNESVERK.NO
1. For the owner of this website, protection of users’ personal data is of the highest importance. We make great efforts to ensure that users feel safe when entrusting their personal data while using the website.
1. User means a natural person, legal person or organizational unit that does not have legal personality but is granted legal capacity by law, using electronic services available through the website.
1. This privacy policy explains the principles and scope of processing of the user’s personal data, the rights that belong to the user, as well as the obligations of the data controller for this data, and also informs about the use of cookies.
1. The data controller uses the most modern technical means and organizational solutions that ensure a high level of protection of processed personal data and security against access by unauthorized persons.
I. DATA CONTROLLER
The data controller for personal data is Handnesverk Pawłowski, org.no. 834 864 932, Skagavegen 142, 8724 Saura (hereinafter referred to as the “Owner”).
II. PURPOSE OF PERSONAL DATA PROCESSING
1. The data controller processes the user’s personal data for the following purposes:
To properly execute sales agreements concluded through the online store via the website www.handnesverk.no
1. This means that this data is particularly necessary to:
a. conclude an agreement
b. carry out settlements
c. deliver goods ordered by the user or perform services
1. The user may also give consent to receive information about news and promotions, which will cause the data controller to also process personal data to send the user commercial information regarding, among others, new products or services, promotions or sales.
1. Personal data is also processed as part of fulfilling legal obligations incumbent on the data controller and performing tasks in the public interest, including performing tasks related to security and defense or storing tax documentation.
1. Personal data may also be processed for purposes such as direct marketing of products, securing and pursuing claims or protection against claims from the user or third parties, as well as marketing services and products of third parties or own marketing that is not direct marketing.
III. TYPE OF DATA
1. The data controller processes the following personal data, the provision of which is necessary for:
a. making purchases via the website:
– name
– delivery address
– phone number
– email address
b. Data provided by the user optionally:
– organization number (when requesting the issuance of an invoice for businesses)
IV. LEGAL BASIS FOR PROCESSING PERSONAL DATA
1. Personal data is processed in accordance with the provisions of Regulation (EU) 2016/679 of the European Parliament and of the Council of 27 April 2016 on the protection of natural persons with regard to the processing of personal data and on the free movement of such data, and repealing Directive 95/46/EC (General Data Protection Regulation), hereinafter referred to as “GDPR”.
1. The data controller processes personal data only after obtaining the user’s consent in advance upon confirmation of the transaction performed on the website.
1. Giving consent to the processing of personal data is completely voluntary, however, the lack of it makes it impossible to make purchases through the website.
V. USER RIGHTS
1. The user may at any time request information from the data controller about the scope of processing of personal data.
1. The user may at any time request correction or rectification of their personal data.
1. The user may at any time withdraw their consent to the processing of personal data without giving a reason. The request not to process data may concern a specific purpose indicated by the user, e.g., withdrawal of consent to receive commercial information, or concern all purposes of data processing. Withdrawal of consent for all processing purposes will result in the deletion of the user’s account from the website along with all personal data previously processed by the data controller. Withdrawal of consent does not affect actions already taken.
1. The user may at any time request, without giving a reason, that the data controller delete their data. A request to delete data does not affect actions taken so far. Deletion of data means simultaneous deletion of the user’s account along with all stored and processed personal data so far.
1. The user may at any time object to the processing of personal data, both with regard to all personal data processed by the data controller, as well as only to a limited extent, e.g., regarding the processing of data for a specifically indicated purpose. Objection does not affect actions taken so far. Filing an objection will result in the deletion of the user’s account along with all stored and processed personal data so far.
1. The user may request limitation of the processing of personal data, either for a specific time or without time limitation, but to a specific extent, which the data controller will be obliged to fulfill. This request does not affect actions taken so far.
1. The user may request that the data controller transfer the user’s processed personal data to another entity. For this purpose, the user should write a request to the data controller, indicating which entity (name, address) should receive the user’s personal data and what specific data the user wishes the data controller to transfer. After confirmation by the user of their request, the data controller will transfer the user’s personal data electronically to the indicated entity. Confirmation by the user is necessary for the security of the user’s personal data and to obtain certainty that the request comes from an authorized person.
1. The data controller informs the user about the actions taken within a month of receiving one of the requests mentioned in the previous points.
VI. STORAGE PERIOD FOR PERSONAL DATA
1. In principle, personal data is stored only as long as it is necessary to fulfill contractual or statutory obligations for which it was collected. This data will be deleted immediately when its storage is no longer necessary for evidentiary purposes in accordance with civil law or in connection with statutory storage obligations.
1. Information regarding the contract is stored for evidentiary purposes for three years from the end of the year in which the business relationship with the user was concluded. Data deletion will occur after the expiration of the statutory limitation period for pursuing contractual claims.
1. In addition, the data controller may retain archival information regarding concluded transactions, as their storage is related to the user’s rights, e.g., warranty claims.
VII. ENTRUSTING DATA PROCESSING TO OTHER ENTITIES
1. The data controller may entrust the processing of personal data to entities cooperating with the data controller, to the extent necessary for the implementation of transactions, e.g., for the preparation of ordered goods, issuing invoices and delivering shipments or transferring commercial information originating from the data controller (the latter applies to users who have consented to receive commercial information).
1. Apart from the purposes indicated in this Privacy Policy, users’ personal data will not be made available to third parties in any way or transferred to other entities for the purpose of sending marketing materials from these third parties.
1. Personal data of website users is not transferred outside the European Union area.
1. This Privacy Policy complies with the provisions arising from Article 13 paragraphs 1 and 2 of the GDPR.
VIII. COOKIES
1. The website may use cookies to improve user experience and ensure optimal functionality.
1. The user can manage cookie settings through their browser settings.
IX. CONTACT INFORMATION
For questions regarding this privacy policy or the processing of personal data, you can contact us:
**Handnesverk Pawłowski**
Org.no.: 834 864 932
Skagavegen 142
8724 Saura
E-mail: [hei@handnesverk.no]
This privacy policy came into effect on 6.08.2025 and may be updated as needed.