Privacy Policy

Introduction

Papyria AS ("we," "us," or "our") is committed to protecting your privacy. This privacy policy explains how we collect, use, store, and share your personal data when you use our website or services. We comply with applicable data protection laws, including the General Data Protection Regulation (GDPR).

Data Controller

What Data We Collect

We collect and process the following types of personal data:

• Contact Information: Name, email address, phone number, and any other details you provide via our online forms or communications.
• Technical Data: IP address, browser type, operating system, device information, and website usage data.
• Cookies and Tracking Information: See "Cookies and Tracking Technologies" below.

Purpose and Legal Basis for Processing

We process your personal data for the following purposes:

• Responding to Your Requests: To communicate with you if you fill out a contact form or request information (legal basis: consent).
• Providing and Improving Services: To operate, maintain, and improve our website and services (legal basis: legitimate interests).
• Legal Compliance: To comply with legal and regulatory requirements (legal basis: legal obligation).

If the processing of your personal data is based on your consent, you may withdraw your consent at any time by contacting us.

How We Obtain Your Data

• Directly from You: When you fill out a form or contact us.
• Automatically: When you use our website, via cookies and analytics services.

Data Sharing

We may share or disclose your personal data in the following ways:

Cookies and Tracking Technologies

We use cookies and similar technologies to:

• Analyse website usage via Google Analytics (consent required; data is anonymised as far as possible).
• Ensure website security and performance via Cloudflare (strictly necessary).

You can control your cookie preferences via our cookie banner and your browser settings. You may change or withdraw your consent at any time.

Data Retention

We keep your personal data only as long as necessary to fulfill the purposes described in this policy, or as required by law. When we no longer need your data, we will securely delete or anonymize it.

Your Rights Under GDPR

You have the right to:

• Access your personal data
• Request correction (rectification) of your data
• Request deletion (erasure) of your data
• Restrict or object to our processing of your data
• Request data portability (receive a copy of your data in a structured, machine-readable format)
• Withdraw your consent at any time (where processing is based on consent)
• Lodge a complaint with your local supervisory authority

To exercise any of these rights, contact us at [Contact Email].

Data Security

We use appropriate technical and organisational measures to protect your personal data against unauthorised access, loss, misuse, or disclosure.

International Data Transfers

Whenever your data is transferred outside the EEA, we ensure appropriate safeguards are in place, including:

• Transfers to countries with an EU adequacy decision
• Standard Contractual Clauses approved by the European Commission

Changes to This Privacy Policy

We may update this privacy policy from time to time. Any changes will be posted on this page with an updated revision date. We encourage you to review this policy regularly.

Contact Us

If you have any questions or concerns, please contact us at:

If you are unsatisfied with our response, you have the right to lodge a complaint with your national data protection authority.