Privacy Policy

This policy explains how Ghunexarvik processes personal data in line with GDPR, the Norwegian Personal Data Act and related privacy obligations.

Data controller

Website owner: Ghunexarvik
Address: Kristiansands gate 2, 0463 Oslo, Norway
Phone: +4793886734
Email: reachus@ghunexarvik.world
Domain: ghunexarvik.world

Data we collect

We may collect name, email address, and message details when you submit forms, plus technical data such as device type, browser, and consent preferences.

Purposes of processing

Data is processed to respond to inquiries, manage order requests, maintain website security, document legal compliance, and improve site performance based on consented analytics.

Legal bases

We rely on consent, contractual necessity, legal obligations, and legitimate interests for secure operation and abuse prevention. Sensitive categories of personal data are not requested in standard forms.

Retention periods

Form submissions are retained up to 24 months unless legal obligations require longer storage. Consent records are retained up to 36 months. Accounting-related records are retained in line with mandatory Norwegian bookkeeping requirements.

User rights

You may request access, correction, deletion, restriction, portability, and objection to processing, and you may withdraw consent at any time.

Security measures

We apply HTTPS transport security, access controls, data minimization, and regular technical checks to reduce unauthorized access risks.

International transfers

If data is processed outside your jurisdiction, we apply appropriate safeguards, including contractual protections where required.

Contact and complaints

To exercise rights, contact reachus@ghunexarvik.world. In Norway, you may also submit a complaint to Datatilsynet if you believe your rights were not handled correctly.