Privacy policy
Nilsgard Lars Drabløs is the data controller responsible for the processing of personal data as described in this Privacy Policy. In this Privacy Policy, we explain what types of personal data we store and how we process them. This Privacy Policy applies to: www.nilsgard.no
Personal Data We Collect and Process
We process the following categories of personal data:
Contact information: Address, telephone number, email address
Account and profile information: Settings, preferences
Payment information: Transaction information, payment method
Customer history and engagement: Order and delivery details, shopping cart activity, discount codes, loyalty program information, active products and agreements, as well as products and services you have previously had, how much and how often they are used, and the status of products/services
Customer activity: Reading and action history from apps, websites, or electronic communications we send out, as well as technical information about the devices you use
Cookies: See our information about cookies here – https://www.shopify.com/legal/cookies
Personal data is collected directly from you through information you provide to us and in connection with your use of our services and products.
How We Use Personal Data
Delivery of Services / Contract Fulfilment
We use your personal data to fulfil our agreements with you, for example when you order a product or service from us. The legal basis for processing personal data for this purpose is that the processing is necessary to perform a contract with you.
Administration of Customer Relationships
We use your personal data to manage our customer relationship with you. This may include customer service, complaint handling, and troubleshooting related to your customer relationship. The legal basis for processing personal data for this purpose is that the processing is necessary to perform a contract with you.
Analysis, Business Development and Service Improvement
We continuously work to develop and improve our services and products. Much of this work involves analysing various forms of personal data, such as customer activity, customer history, and account and profile information. The legal basis for processing personal data for this purpose is our legitimate interest.
Personalised User Experience
We tailor the user experience and communication to your customer relationship using personal data. The legal basis for processing personal data for this purpose is our legitimate interest.
Sales and Marketing
We use personal data in connection with the sale and marketing of our products and services, for example by sending you emails. The legal basis for processing personal data for this purpose is our legitimate interest. You have the right to opt out of parts of this processing, for example by unsubscribing from emails from us.
In addition, we may ask for your consent to use your personal data for profiling, where we infer interests and needs based on your personal data. The purpose of profiling is to make our marketing more relevant to you.
System Monitoring and Error Correction
We monitor our systems for errors and issues. Some of these processes involve the storage and processing of personal data. The legal basis for processing personal data for this purpose is our legitimate interest.
Security, Fraud Prevention and Criminal Activity Detection
We process personal data in order to protect our users and ourselves against fraud, misuse, and criminal activity. The legal basis for processing personal data for this purpose is our legitimate interest.
Compliance with Legal Obligations
In some cases, we are required to process personal data in order to comply with legal obligations. An example is information related to sales, which we are required to record and retain in accordance with the Norwegian Bookkeeping Act. The legal basis for processing personal data for this purpose is that the processing is necessary to comply with a legal obligation to which we are subject.
Your Rights
If you wish to exercise any of your rights, please contact us at: butikk@nilsgard.no
Right of Access
You may request a copy of all personal data we process about you. Please contact us at the email address above to exercise your right of access.
Right to Rectification
You have the right to request that we correct or supplement information that is inaccurate or misleading.
Right to Erasure
You have the right to have your personal data deleted without undue delay. You may therefore request at any time that we delete information about you. However, please note that information we are required to retain due to legal obligations (for example under the Bookkeeping Act) will not be deleted.
Restriction of Processing
In certain situations, you may also request that we restrict the processing of your personal data. You can do this by managing your consents or reservations in our solutions.
Right to Object
If we process your personal data based on our tasks or on the basis of a balancing of interests, you have the right to object to our processing of your personal data. You can do this by managing your consents or reservations in our solutions.
Data Portability
You have the right to receive your personal data in a structured, commonly used, and machine-readable format. Please contact us at the email address above to receive your personal data.
Complaints
We hope you will contact us if you believe we are not complying with the rules of the Personal Data Act. Please first contact us through the channel you have already established with us.
You may also lodge a complaint regarding our processing of personal data with the Norwegian Data Protection Authority (Datatilsynet).