Privacy

When you buy a work: name, email address, delivery address and telephone number. In addition, what you bought, what it cost and when. The telephone number is needed for the shipment, because the carrier notifies you by text message.

If you send an email, its contents are processed for as long as necessary to reply to you.

No information about you is collected for any purpose other than these.

The information is used to complete the purchase, send the work and reply to you. The basis is that it is necessary to perform the contract with you, cf. GDPR article 6(1)(b).

Order information is also retained because Norwegian bookkeeping law requires it, cf. article 6(1)(c).

The information is not used for marketing, and is not sold or shared for that purpose.

Order and sales documentation is kept for five years after the end of the financial year, as required by section 13 of the Norwegian Bookkeeping Act.

Emails that are not part of an order are deleted when no longer necessary.

The information is shared only with those needed to deliver and operate the shop. They fall into two groups, and the difference matters for whom you should turn to.

Data processors — they process the information on the seller's behalf, under contract, and do not use it for their own purposes: PureFlow Kousis-Furuhaug (operation and maintenance of the site), Vercel (hosting), Neon (database, servers in Frankfurt), Resend (sending email) and Domene AS (mailbox).

Independent controllers — they decide for themselves how they process the information, because they have their own obligations in law: Vipps MobilePay (payment, with obligations under financial regulation) and Posten or another carrier (delivery). Their own privacy policies apply, and rights against them must be directed to them.

Data is stored within the EU/EEA. Should a provider transfer data outside the EEA, this takes place on a valid transfer basis.

Cookies are small files the site stores in your browser. They are used here for two quite different purposes, and the difference decides whether you are asked.

NECESSARY — these are needed for the site to work and do not require consent: “kurv” remembers what you have put in your cart, “okt” keeps the artist signed in to the administration, and “samtykke” remembers your answer to the question below so you are not asked again.

MARKETING — these are used to measure how advertising performs, and are set only if you say yes. They are “_fbp” and “_fbc” from Meta, the company behind Facebook and Instagram. They make it possible to see that a visit came from an advert.

If you say no, they are not set, and the code is not loaded at all — it simply is not present on the page. The site works exactly as well.

You can change your mind at any time by selecting “Cookies” at the bottom of the page. You will be asked again, and a “no” also removes cookies that have already been set.

No other analytics tools are used, and the information is not shared with anyone other than those named above.

You have the right to see what information is held about you, to have errors corrected, to have information erased where there is no legal duty to keep it, to receive it in a common file format, and to object to the processing.

Contact studio@ingemundsen.com to exercise your rights. You will receive a reply within one month.

If you believe your data is being processed unlawfully, you may complain to the Norwegian Data Protection Authority (Datatilsynet).