Privacy Policy
This Privacy Policy describes how Pruenlasfospai collects, uses, and protects personal data in
accordance with the General Data Protection Regulation and applicable Norwegian data
protection legislation. It was last updated on November 1, 2026.
Who controls your personal data
The Company, operating pruenlasfospai.world, acts as the data controller for all personal data
processed through this site. The Company is responsible for ensuring that data is
handled lawfully, fairly, and transparently. If users have questions about how their
data is used, they may contact the Company through the details provided on the
site's contact page.
What personal data is collected
Pruenlasfospai collects limited personal data from users who interact with the site. This
may include device identifiers, IP addresses, browser type, pages visited, and time
spent on the site — collected automatically through cookies and server logs. Where
users submit enquiries or consent forms, the Company may also collect names and
contact details voluntarily provided. The Company does not collect sensitive
personal data as defined under Article 9 of the GDPR.
Legal basis for data processing
Personal data is processed under one of the following legal bases as defined in the
GDPR: the user's freely given consent; the legitimate interests of the Company
in understanding how content is used and improving the site; or compliance with a
legal obligation. The Company does not process personal data for purposes
incompatible with those for which it was originally collected. Users may withdraw
consent at any time without affecting the lawfulness of prior processing.
How personal data is used
Data collected on this site is used to maintain and improve site functionality,
analyse visitor behaviour in anonymised form, respond to user enquiries, and ensure
compliance with legal and regulatory obligations. The Company does not use personal
data for direct marketing without explicit consent, nor does it use data for
automated decision-making that produces legal or similarly significant effects for
the user.
Data sharing and third-party processors
The Company does not sell personal data. Data may be shared with carefully selected
third-party service providers — such as hosting providers and analytics tools —
under contractual arrangements that require them to process data only on the
Company's instructions and in compliance with applicable data protection law.
All third-party processors are required to implement appropriate technical and
organisational security measures.
International data transfers
Where personal data is transferred outside the European Economic Area, the Company
ensures that appropriate safeguards are in place as required by Chapter V of the
GDPR. This may include Standard Contractual Clauses approved by the European
Commission or transfers to countries recognised as providing adequate levels of data
protection. Users may request information about specific transfer mechanisms by
contacting the Company.
Data retention periods
Personal data is retained only for as long as necessary to fulfil the purposes for
which it was collected, or as required by applicable law. Analytical data is
retained in anonymised form for a maximum of twenty-six months. Contact enquiry data
is retained for a period sufficient to respond and maintain a record of the
interaction, typically not exceeding twelve months unless a longer retention period
is legally required.
User rights under GDPR
Users located in Norway and the European Economic Area have the right to access,
rectify, or erase their personal data; to restrict or object to its processing; and
to receive a portable copy of their data. Where processing is based on consent,
users may withdraw that consent at any time. Requests relating to these rights may
be submitted to the Company and will be addressed within the timeframes prescribed
by applicable law.
Security measures and data integrity
The Company implements appropriate technical and organisational measures to protect
personal data against unauthorised access, accidental loss, destruction, or
disclosure. These measures are reviewed periodically and updated in response to
evolving security standards. However, no method of data transmission over the
internet can be guaranteed to be entirely secure, and the Company cannot warrant
absolute security for data transmitted to the site.
Updates to this Privacy Policy
This Privacy Policy may be amended from time to time to reflect changes in law,
technology, or operational practice. The current version is always available at this
address, with the date of last revision clearly stated. Where changes are material,
users will be informed through a site notice or updated consent mechanism. Continued
use of the site after a revision constitutes acceptance of the updated policy.