Privacy policy

Privacy Policy for Norsk Pharma AS

Last updated: November 19, 2024

Norsk Pharma AS takes your privacy seriously. This policy explains how we collect, use, and protect your personal data in compliance with applicable laws, including the General Data Protection Regulation (GDPR). By using our services, you consent to the processing of your personal data as described herein.

1. Data Controller

The data controller responsible for your personal data is:

Norsk Pharma AS
Myklerudveien 35
1454 Fagerstrand, Norway
Email: post@norskpharma.no
Org. No.: 913 520 793

2. What Personal Data We Collect

We process the following types of personal data:

a. Data you provide directly:

Name
Address
Phone number
Email address
Payment information (processed by third-party providers)

b. Data collected automatically:

IP address
Information about your device (browser type, operating system, device type)
Website activity (visited pages, clicks, time spent)

c. Data from third parties:

Payment and delivery information from providers such as Klarna, Vipps, or carriers (e.g., Posten/Bring).
Data from social media interactions (e.g., comments, messages, or shares).

3. Purpose and Legal Basis for Processing

We process personal data for the following purposes and based on the following legal grounds:

To provide our services:

Processing orders, payments, and deliveries (necessary for the performance of a contract).
Responding to customer service inquiries (necessary for the performance of a contract).

For marketing purposes:

Sending newsletters, offers, and promotions (based on your consent).

To improve our services:

Analyzing user behavior to optimize the website and personalize user experience (based on legitimate interest).

To comply with legal obligations:

Retaining information in accordance with accounting laws (necessary for legal compliance).

4. Automated Decision-Making and Profiling

We may use automated systems to provide product recommendations or tailor marketing based on purchase history and activity.

You have the right to object to profiling. Contact us at post@norskpharma.no for more information.

5. Storage and Protection of Data

We retain your personal data only as long as necessary to fulfill the purposes described in this policy:

Purchase data is stored for 5 years in compliance with accounting laws.
Marketing data is retained until consent is withdrawn.

Security Measures:

Data transmission is encrypted using SSL.
Personal data is stored on secure servers with restricted access.
Only authorized personnel and data processors have access to your data.

6. Sharing of Personal Data

We share your personal data only with:

Payment providers: Klarna, Vipps, or similar providers to process payments.
Carriers: Posten/Bring or equivalent providers for delivery.
IT providers: For the operation and maintenance of our systems (acting as data processors under GDPR).

We ensure that all third parties adhere to GDPR through data processing agreements.

7. Data Transfers to Third Countries

If we transfer data to countries outside the EU/EEA (e.g., through IT providers), we ensure compliance with GDPR through standard contractual clauses approved by the European Commission.

8. Use of Cookies

We use cookies to enhance your user experience and personalize website content:

Essential cookies: For website functionality.
Analytical cookies: To understand how the website is used.
Marketing cookies: To tailor ads and offers.

You can manage or disable cookies through your browser settings. For more details, see our Cookie Policy.

9. Your Rights

Under GDPR, you have the following rights:

Access: Obtain information about the data we have about you.
Correction: Request correction of inaccurate data.
Deletion: Request deletion of data we no longer have a legal basis to process.
Data portability: Receive a copy of the data you have provided in a machine-readable format.
Objection: Object to the processing of your data for marketing purposes or other profiling.
Restriction: Request restriction of data processing in certain circumstances.

To exercise your rights, contact us at post@norskpharma.no.

If you believe we have not handled your data in accordance with the law, you can file a complaint with the Norwegian Data Protection Authority. For more information, visit www.datatilsynet.no.

10. Changes to the Privacy Policy

We reserve the right to update this privacy policy as necessary. Any significant changes will be communicated via email or on our website.

11. Contact Information

If you have questions about how we process your data, please contact us:

Norsk Pharma AS
Email: post@norskpharma.no
Address: Myklerudveien 35, 1454 Fagerstrand, Norway