Categories of data we collect Depending on how you interact with our platform, we may collect various types of information. We always limit collection to what is strictly necessary for the purpose.

Legal basis for processing We only process your personal data when we have a valid legal basis to do so. This includes:

How we use your information The collected data is primarily used to manage your account and provide you with access to our services. Furthermore, the data is used to detect and prevent fraud, monitor platform security, perform analyses to improve website functionality, and to communicate important updates or offers (provided you have consented to the latter).

Storage period for your data We retain your personal data only for as long as necessary to fulfill the purposes for which it was collected. When your account is closed, we will delete or anonymize your data, unless national legislation requires us to keep certain records for a specified period (e.g., for accounting purposes or to resolve legal disputes).

Sharing of information with third parties We never sell your personal data. However, information may be shared with carefully selected service providers who act as our data processors. This includes companies that provide cloud services, IT support, analytics tools, or payment solutions. These parties are subject to strict confidentiality agreements and are only permitted to process data in accordance with our instructions.

International data transfers Since the Internet is a global network, your data may be transferred to, and stored on, servers located outside Norway and the European Economic Area (EEA). In such cases, we implement appropriate security measures, such as standard contractual clauses, to ensure that your privacy maintains a level of protection equivalent to what is required locally.

Security measures on our platform We have implemented comprehensive technical and organizational measures to protect your information against unauthorized access, loss, or alteration. This includes encryption of data during transfer and strict access controls to our databases. Despite our reasonable efforts, no method of data transmission over the internet will ever be one hundred percent flawless, and we therefore cannot provide absolute guarantees of security.

Your privacy rights As a user, you have strong rights related to your own information. You can at any time request access to what data we have stored about you. You also have the right to demand incorrect information corrected, request data deletion (the right to be forgotten), object to specific processing, and request data portability where technically feasible. If our processing is based on consent, this can be withdrawn whenever you wish.

Changes to the privacy policy This document may be updated to reflect changes in our practices or legal framework. We recommend that you review the policy periodically to stay informed about how we protect your privacy.

How to contact us about privacy To exercise your rights or if you have concerns about our privacy work, please contact us: Email: [email protected] Phone: +47 22 33 44 55 Address: Karl Johans gate 22, 0159 Oslo, Norway