Privacy Policy

1. Data Controller

Vandalai AS is the data controller responsible for your personal data. If you have questions about this policy or our data practices, contact us at:

Vandalai AS
Email: marius@vandalai.com
Phone: +47 907 09 200
Oslo, Norway

2. What Data We Collect

We collect personal data that you voluntarily provide to us through our contact form:

• Full name
• Email address
• Inquiry type
• Message content

We also collect standard web server logs (IP address, browser type, pages visited) for security and performance purposes.

3. Purpose and Legal Basis

We process your personal data for the following purposes:

• Contact form submissions: To respond to your inquiries and provide information about our products and services. Legal basis: Legitimate interest (Art. 6(1)(f) GDPR).
• Website analytics: To understand how visitors use our website and improve the user experience. Legal basis: Legitimate interest.

4. Data Sharing

We do not sell or share your personal data with third parties for marketing purposes. We may share data with:

• Service providers who assist in operating our website (e.g., hosting, email delivery)
• Professional advisors when required by law

5. Data Retention

Contact form submissions are retained for up to 24 months after the last interaction. Web server logs are retained for up to 12 months.

6. Your Rights

Under the GDPR, you have the right to:

• Access the personal data we hold about you
• Request correction of inaccurate data
• Request deletion of your data
• Object to or restrict processing of your data
• Request data portability
• Withdraw consent at any time (where processing is based on consent)

To exercise these rights, contact us at marius@vandalai.com.

7. Cookies and Third-Party Services

This website uses Google Fonts, which loads font files from Google's servers. We do not set any tracking cookies. For analytics, we use Cloudflare Web Analytics, which is cookie-free and does not track individual users.

8. Data Security

We implement appropriate technical and organizational measures to protect your personal data against unauthorized access, alteration, disclosure, or destruction.

9. Supervisory Authority

If you believe our processing of your personal data violates data protection laws, you have the right to lodge a complaint with the Norwegian Data Protection Authority (Datatilsynet) at datatilsynet.no.

10. Changes to This Policy

We may update this privacy policy from time to time. Any changes will be posted on this page with an updated revision date.