Privacy
How this site handles your data.
Draft, for review by a Norwegian lawyer. The points in brackets are filled before the site is published.
Who we are.
[Rexxval AS], [organisation number], [Lade Alle 48a, 7041 Trondheim], Norway, runs this site for Retival, and is responsible for the personal data described here. Once Retival AS, a Rexxval company, is registered, it takes over both, as set out below. Questions go to our privacy contact at contact@retival.com.
What this site collects.
What you send us if you write to us, and the short record every web server keeps, each described below. There are no analytics, no cookies and no third party scripts, and the fonts are served from this site.
Why we may.
For the record the server keeps and for the emails you send us, our legitimate interest in running a secure website and answering the people who contact us, under Article 6(1)(f) of the GDPR; you may ask for the assessment in which we weighed our interest against yours.
When Retival AS is registered.
The site passes to Retival AS, which from then on is responsible for your data, under this notice updated with its name.
What the host records.
Like every web server, the one that serves this site records each visitor's IP address, the time, the page asked for and the browser's description of itself. We keep that record for [period] and use it only to serve the site and keep it secure.
If you write to us.
If you email es.hoyem@retival.com or contact@retival.com, we keep what you send so that we can answer you. If nothing comes of the conversation, we delete it 12 months after we last wrote to each other. If we go on working together, we keep it for as long as we do and for three years after, so that we have the record if a question about our work together comes up later. Please leave out personal details about other people.
Who holds it for us.
The site is served by [host] and our email by [mail service], [each] in [region]. [Neither keeps your data outside the European Economic Area. / [Service] may also process it in [country], outside the European Economic Area. The transfer rests on [an adequacy decision of the European Commission / standard data protection clauses adopted by the Commission], and the privacy contact will send you a copy.]
Your right to object.
Where we rely on our legitimate interest, for the server's record and the emails you send us, you may object at any time, on grounds relating to your own situation. We then stop, unless we have compelling grounds that outweigh your interests, or need the data for a legal claim.
Your other rights.
You may ask to see the data we hold about you, and to have it corrected, deleted or its use restricted. We make no automated decisions about you. Write to the privacy contact above. You may also complain to Datatilsynet, the Norwegian Data Protection Authority, at datatilsynet.no, or to the authority where you live or work.
Last updated: [date]