Privacy Policy

Last updated: 18 March 2025

This Privacy Policy describes how Quarrionwrzleao ("we", "us", "our") collects, uses, stores and protects your personal data when you use our website https://quarrionwrzleao.world and related services. We process personal data in accordance with the EU General Data Protection Regulation (GDPR), the Norwegian Personal Data Act (personopplysningsloven), and other applicable data protection laws.

1. Data controller

The data controller responsible for your personal data is:

Quarrionwrzleao
Jernbanetorget 4B, 0154 Oslo, Norway
Email: info@quarrionwrzleao.world
Phone: +47 23 35 81 00

2. Purposes and legal basis for processing

We process your personal data only for specified, explicit and legitimate purposes. The main purposes and corresponding legal bases are:

Order and customer service: To process orders, deliver products, and handle enquiries. Legal basis: performance of a contract (Art. 6(1)(b) GDPR) and, where applicable, your consent (Art. 6(1)(a) GDPR).
Communication: To respond to your messages sent via contact forms or email. Legal basis: legitimate interest (Art. 6(1)(f) GDPR) in providing customer support, or performance of pre-contractual steps at your request.
Legal compliance: To comply with legal obligations (e.g. accounting, tax, consumer rights). Legal basis: legal obligation (Art. 6(1)(c) GDPR).
Website operation and security: To ensure technical operation, security and abuse prevention. Legal basis: legitimate interest (Art. 6(1)(f) GDPR).
Cookies and similar technologies: As described in our Cookie Policy. Legal basis: consent where required (Art. 6(1)(a) GDPR), or legitimate interest for strictly necessary cookies.

3. Categories of personal data we collect

Depending on your interaction with us, we may collect:

Identity and contact data: name, email address, phone number (if provided), delivery address.
Transaction data: order details, payment-related information (we do not store full payment card numbers; payment processing may be handled by third-party providers).
Technical and usage data: IP address, browser type, device information, pages visited, date and time of access (see Cookie Policy for details).
Communication data: content of messages you send us via forms or email.

4. Retention periods

We retain your data only for as long as necessary to fulfil the purposes above or to comply with legal obligations:

Customer and order data: generally for the duration of the contractual relationship and thereafter as required by Norwegian accounting and tax law (e.g. up to 5 years).
Enquiry and correspondence: until the matter is closed and any applicable limitation periods have expired.
Technical and access logs: as necessary for security and troubleshooting, typically not longer than 12 months unless a longer period is required by law.
Cookie and analytics data: as set out in our Cookie Policy.

After the retention period, personal data is securely deleted or anonymised.

5. Your rights under GDPR and Norwegian law

You have the following rights in relation to your personal data:

Right of access (Art. 15 GDPR): You may request a copy of the personal data we hold about you.
Right to rectification (Art. 16 GDPR): You may request correction of inaccurate or incomplete data.
Right to erasure (Art. 17 GDPR): You may request deletion of your data where the legal grounds for processing no longer apply (e.g. withdrawal of consent, unlawful processing), subject to exceptions (e.g. legal obligations).
Right to restriction of processing (Art. 18 GDPR): You may request that we limit how we use your data in certain circumstances.
Right to data portability (Art. 20 GDPR): Where processing is based on contract or consent and carried out by automated means, you may request to receive your data in a structured, commonly used format.
Right to object (Art. 21 GDPR): You may object to processing based on legitimate interest; we will cease unless we demonstrate compelling legitimate grounds. You may object at any time to processing for direct marketing.
Right to withdraw consent: Where processing is based on consent, you may withdraw it at any time without affecting the lawfulness of processing before withdrawal.
Right to lodge a complaint: You have the right to lodge a complaint with a supervisory authority. In Norway, the relevant authority is Datatilsynet (www.datatilsynet.no).

To exercise any of these rights, contact us at info@quarrionwrzleao.world or at the address above. We will respond within one month, extendable by two months where necessary.

6. Recipients and international transfers

We may share your data with:

Service providers (e.g. hosting, payment, shipping) who process data on our behalf under a data processing agreement.
Public authorities when required by law.

Where we transfer data to countries outside the EEA, we ensure appropriate safeguards (e.g. adequacy decision, standard contractual clauses, or other approved mechanisms) in accordance with Chapter V GDPR.

7. Security measures

We implement appropriate technical and organisational measures to protect your personal data against unauthorised access, alteration, disclosure or destruction, including:

Use of HTTPS and secure connections for data in transit.
Access controls and limitation of access to personal data to authorised personnel only.
Regular review of our security practices and, where applicable, use of encryption and secure storage.

8. Children

Our services are not directed at individuals under 16. We do not knowingly collect personal data from children. If you believe we have collected data relating to a child, please contact us so we can delete it.

9. Changes to this policy

We may update this Privacy Policy from time to time. The current version will always be available on this page with an updated "Last updated" date. We encourage you to review it periodically.

10. Contact

For any questions about this Privacy Policy or our processing of your personal data, contact us:

Quarrionwrzleao
Jernbanetorget 4B, 0154 Oslo, Norway
Email: info@quarrionwrzleao.world
Phone: +47 23 35 81 00