Inquire

Regulatory Compliance

Privacy Policy

Effective Date: January 1, 2026. Standardized in accordance with the EU/EEA General Data Protection Regulation (GDPR) and the Norwegian Personal Data Act (Personopplysningsloven).

1. Identity of the Data Controller

This website is owned and operated by Sortsptshowmeadow Nordic Media AS, a registered company in Norway under organization number NO 934 812 705 MVA, located at Havnegata 14B, 6003 Ålesund, Norway. In this document, "we", "us", and "our" refer to Sortsptshowmeadow Nordic Media AS. For any data protection inquiries, you may reach our Data Protection Officer (DPO) at [email protected].

2. Categories of Personal Data Collected

We believe in strict data minimization. We only collect personal information when provided voluntarily or when strictly necessary for technical server communication:

  • Directly Provided Data: When you complete our contact inquiry form, we collect your submitted full name, email address, thematic subject interest, and the body text of your message.
  • Technical Protocol Logs: Our web servers record standard HTTP request headers, including your IP address, browser user-agent string, referring URL, timestamp of request, and HTTP status response. These logs are stored for security analysis and intrusion mitigation.
  • Telemetry & Local Storage: We use client-side storage keys to remember your cookie consent preferences across subsequent visits without tracking your cross-site behavior.

3. Legal Bases for Processing Under GDPR

In accordance with Article 6 of the GDPR, we process personal information exclusively under the following lawful conditions:

  • Article 6(1)(b) (Contractual & Pre-contractual): Processing inquiries submitted through our contact form in order to provide road safety guidance and editorial responses.
  • Article 6(1)(f) (Legitimate Interests): Processing server logs to preserve firewall stability, prevent denial-of-service attempts, and ensure content availability.
  • Article 6(1)(c) (Legal Obligation): Retaining accounting records or correspondence logs where mandated by Norwegian statutory commercial regulations.
  • Article 6(1)(a) (Consent): Processing non-essential analytical cookies only after you provide unambiguous consent via our cookie banner.

4. Third-Party Processors and International Transfers

We do not sell, lease, or monetize your personal details. Data is transferred only to trusted infrastructure subcontractors who operate under standard data processing agreements (DPAs):

  • Hosting Infrastructure: Static site assets and server instances are provisioned within secure data centres situated inside the European Economic Area (EEA).
  • Email Dispatch: Inquiries sent through our contact channels are routed through enterprise email servers adhering to TLS 1.3 encryption in transit.
  • External Links: Our guides may link to official agencies such as the Norwegian Public Roads Administration (Statens vegvesen). We are not responsible for the privacy practices of external domains.

5. Retention Periods

Server access logs are automatically rotated and purged after 30 days. Inquiries transmitted via the contact form are retained for up to 12 months to maintain editorial continuity, after which they are securely deleted unless active commercial or legal proceedings require continued preservation.

6. Your Statutory Rights (GDPR & CCPA)

As a data subject, you enjoy enforceable statutory rights regarding your personal information:

  • Right of Access (Art. 15 GDPR): Request a copy of any personal record held in association with your identity.
  • Right to Rectification (Art. 16 GDPR): Request corrections to inaccurate or incomplete contact records.
  • Right to Erasure ("Right to be Forgotten", Art. 17 GDPR): Request the permanent deletion of your inquiry logs when processing grounds expire.
  • Right to Restriction of Processing (Art. 18 GDPR): Limit how your information is handled while a dispute is being investigated.
  • Right to Data Portability (Art. 20 GDPR): Receive an export of your provided details in a structured, machine-readable format.
  • Right to Object (Art. 21 GDPR): Object to any processing based on legitimate interests.
  • Supervisory Authority Complaints: You retain the right to lodge a complaint with the Norwegian Data Protection Authority (Datatilsynet, P.O. Box 458 Sentrum, 0105 Oslo, Norway, www.datatilsynet.no).

7. Data Protection Officer Contact

To exercise any of your privacy rights or request formal confirmation of our technical safeguards, please write to: [email protected] or address physical correspondence to Data Protection Office, Sortsptshowmeadow Nordic Media AS, Havnegata 14B, 6003 Ålesund, Norway.