Privacy Policy

Gullvegen is the data controller for the processing of personal data as described in this privacy policy. In this privacy policy we explain what kind of personal data we store and how we process it. This privacy policy applies to: www.gullvegen.com


Personal data we collect and process

We process the following categories of personal data:

  • Basic information: Name, date of birth
  • Contact information: Address, telephone number, email address
  • Customer history and customer engagement: Order and delivery information, shopping cart movements, discount codes, loyalty program information, active products and agreements, as well as products and services you have had in the past, how much and how often they are used, status of products/services
  • Customer activity: Reading and action history from apps, websites or electronic communications we send out. As well as technical information about the devices you use.


Personal data is collected directly from you through information you provide to us and in connection with your use of our services and products. When we obtain personal data from other sources, we obtain personal data from the following sources:

  • Directory information services
  • New item


How we use personal information

Customer relationship management

We use your personal data to administer our customer relationship with you. This may include, for example, customer service, complaint handling and error correction regarding your customer relationship. The legal basis for processing personal data for this purpose is that the processing is necessary to fulfill a contract with you.


Customized user experience

We adapt the user experience and communication to your customer relationship and we use personal data for this. The legal basis for processing personal data for this purpose is our legitimate interest.


System monitoring, error correction, etc.

We monitor our systems for errors and problems. Part of these processes involves the storage and processing of personal data. The legal basis for processing personal data for this purpose is our legitimate interest.


Comply with legal obligations

In some cases, we are required to process personal data for other legal obligations. An example of this is information related to sales, which we are obliged to record and store in accordance with the Norwegian Accounting Act. The legal basis for processing personal data for this purpose is that the processing is necessary for compliance with a legal obligation to which we are subject.


Your rights

If you wish to exercise any of your rights, please contact us at sindlar@hotmail.com.


Right to access your own information

You can request a copy of all information we process about you. Please contact us at the email address above to exercise your right of access.


Right to correction of personal data

You have the right to ask us to correct or supplement information that is incorrect or misleading.


The right to erasure of personal data

You have the right to have your personal data deleted without undue delay. You can therefore ask us to delete information about you at any time. However, please note that information that we are required to retain due to other legal obligations (such as the Norwegian Accounting Act) will not be deleted.


Restriction of processing of personal data

In some situations, you can also ask us to restrict the processing of your information. You do this by managing consents or reservations in our solutions.


Object to the processing of personal data

If we process information about you on the basis of our tasks or on the basis of a balancing of interests, you have the right to object to our processing of information about you. You do this by managing consents or reservations in our solutions.


Data portability

You have the right to receive your personal data in a structured, commonly used and machine-readable format. Please contact us at the email address above to receive your personal data.


You can complain about our processing of personal data.

We hope you will let us know if you believe we are not complying with the rules in the Personal Data Act. Please first let us know through the contact or channel you have already established with us. You can also complain about our processing of personal data. You can do this to the Norwegian Data Protection Authority.


This privacy policy is based on a privacy policy template from gdprcontrol.no