Privacy policy

1. Data controller

Viva North AS is the controller for the personal data processed in connection with this website. Contact details:

Viva North AS, Skogroveien 8A, 1178 Oslo, Norway. Company registration number 991 912 258. Email tap@vivanorth.com. Telephone +47 488 95 692.

We process personal data in accordance with the General Data Protection Regulation (GDPR) and the Norwegian Personal Data Act.

2. Cookies

This website sets no cookies and stores nothing in your browser. It uses no analytics, no tracking pixels and no advertising networks, and it embeds nothing from other websites.

The language is decided by the address: Norwegian pages are at vivanorth.com and English pages at vivanorth.com/en, so nothing needs to be remembered and there is no consent box. See the cookie statement for the details.

3. What we process, and why

Server logs

Our web server records standard technical information about every request: IP address, the time of the request, the page requested, response code, and the browser's user agent string. An IP address is personal data. We use these logs only to operate the site, diagnose faults and protect against attacks and abuse. The logs are not used for analytics, profiling or marketing.

Enquiries

If you contact us by telephone or email, we process the contact details and the content you give us, for the sole purpose of handling your enquiry.

What we do not do

The site contains no forms, no login, no newsletter and no payment. We use no analytics tools, no tracking pixels, no advertising networks and no social media plugins. No scripts, fonts or images are loaded from external providers, so no third party learns that you visited this site. We do not sell personal data, and we do not use automated decision-making or profiling.

4. Legal basis

Server logs are processed on the basis of our legitimate interest in operating a secure and functioning website, under Article 6(1)(f) of the GDPR. Enquiries are processed on the basis of our legitimate interest in answering people who contact us, or in order to take steps at your request prior to entering into an agreement, under Article 6(1)(b) or (f).

5. Retention

Server logs are deleted automatically after 14 days. Enquiries are kept for as long as is necessary to handle the matter, and are then deleted unless we are required to keep them under other legislation, for example the Norwegian Bookkeeping Act.

6. Sharing and processors

We do not disclose personal data to others, except to suppliers who process data on our behalf and under a data processing agreement, or where we are required to disclose it by law or by a decision of a public authority.

The website is hosted by One.com Group AB (Carlsgatan 3, 211 20 Malmö, Sweden), which acts as our data processor and has access to the server logs described above. The servers themselves are operated by its sister company dogado GmbH in Dortmund, Germany. Both companies belong to the group.ONE group and both are established within the EEA, so no personal data is transferred to a third country.

7. Security

We use appropriate technical and organisational measures to protect personal data against unauthorised access, alteration and deletion. The site is served over an encrypted connection, and access to the server is limited to those who need it.

8. Your rights

Under the GDPR you have the right to:

• request access to the personal data we hold about you, and a copy of it
• have inaccurate data corrected, and incomplete data completed
• have data erased, where the conditions for erasure are met
• request that we restrict the processing of your data
• object to processing that rests on our legitimate interest
• receive your data in a machine-readable format, where the processing rests on consent or on a contract

To exercise any of these rights, contact us using the details in section 1. We will normally reply within one month. We may need to verify your identity before we act on a request.

9. Complaints

If you believe we process your personal data unlawfully, we would like to hear from you first. You also have the right to lodge a complaint with the Norwegian Data Protection Authority, Datatilsynet. You will find contact details and a complaint form at datatilsynet.no.

Viva North AS is not required to appoint a data protection officer and has not appointed one.

10. Changes to this policy

We may update this privacy policy, for example if the website changes or the rules do. The date at the top of the page shows when it was last changed.