1. Data Controller Overview
This web platform is published and maintained by Storycrate Tonsi Nordic Ltd, registered under Norwegian company registry number NO-992834112, headquartered at Bryggestredet 14, 5003 Bergen, Norway. Under European General Data Protection Regulation (GDPR) standards, we act as the Data Controller regarding personal information collected through our web properties.
2. Categories of Information Collected
We restrict data collection exclusively to what is strictly necessary to fulfill technical delivery, support inquiries, and analyze aggregate reader interest:
- Technical Connection Telemetry: Anonymized Internet Protocol (IP) addresses, browser brand and engine version, operating system environment, referring URLs, access timestamps, and device resolution profiles.
- Direct Communication Data: When you complete our contact forms or send correspondence to our editorial address, we record your name, email address, chosen inquiry subject, and the written contents of your communication.
- Browser Storage & Cookie Preferences: Locally stored flags recording your consent or rejection of non-essential cookies.
3. Legal Bases for Processing (GDPR Article 6)
We process personal data in compliance with the following legal foundations:
- Legitimate Interests (Art. 6(1)(f)): Maintaining server security, diagnosing routing errors, and preventing automated abuse of our forms.
- Contractual / Pre-Contractual Inquiry (Art. 6(1)(b)): Providing answers to trail logistical inquiries directly submitted by you.
- Explicit Consent (Art. 6(1)(a)): Placing optional analytical cookies on your browser following an affirmative action on our consent banner.
4. Third-Party Data Processors
We partner with trusted service vendors who adhere to rigorous data protection standards through binding Data Processing Agreements (DPAs):
- Cloud Infrastructure Hosting: Web server hosts and Content Delivery Networks (CDNs) operating within the European Economic Area (EEA) to deliver cached static files.
- Email Routing: Secure SMTP relay infrastructure utilized to deliver messages submitted via the contact form to our Bergen desk.
We do not sell, rent, monetize, or broker personal reader records to data aggregators or advertising networks.
5. Your Statutory Rights (GDPR & CCPA)
Regardless of your geographic location, we provide users with comprehensive rights over their data:
- Right of Access & Portability: You may request a structured, machine-readable transcript of all personal records we maintain about you.
- Right to Rectification: You may request corrections to incomplete or inaccurate personal records.
- Right to Erasure ("Right to Be Forgotten"): You may request the deletion of all contact history and records where retention is no longer required by statutory recordkeeping rules.
- Right to Restrict or Object: You may object at any time to data processing grounded in legitimate interests.
- CCPA Non-Discrimination: California residents will never experience degraded site access or discriminatory conditions for exercising their statutory privacy rights.
6. Retention Schedules
Contact form submissions and correspondence logs are maintained for a maximum duration of 24 months to address ongoing route questions or safety feedback, after which they are permanently deleted. Server log files are purged automatically on a rolling 30-day cycle.
7. Data Protection Officer (DPO) Contact
To exercise your privacy rights, file a formal inquiry, or lodge a data-handling concern, contact our designated privacy team:
Data Protection Office
Storycrate Tonsi Nordic Ltd
Bryggestredet 14, 5003 Bergen, Norway
Email: [email protected] (Subject: Privacy / DPO Inquiry)
You also maintain the right to register a complaint directly with the Norwegian Data Protection Authority (Datatilsynet) at www.datatilsynet.no.