Last modified: 26.02.2021
The privacy statement applies to the processing of personal information performed by Heddal Stave church when you visit and use our website «www.heddalstavkirke.no» or contact us via our contact forms. We process personal data in accordance with the privacy laws in force at any given time so that you can be sure that we handle your personal data properly. The privacy statement gives you information about how we process your personal information, what the information is used for and what rights you have towards us.
1. Responsible for treatment
The tourism manager is responsible for the processing of all personal data processed in our portal. If you have questions about the declaration or our processing of personal data in general, you can contact us:
Phone: (+47) 922 04 435
Address: Heddalsvegen 412, 3676 Notodden
2. About whom we process personal data
We process personal information about the following registered:
– Visitors to our websites (Cookies)
– People who send inquiries to us via contact form
3. Our processing of personal data
Below we provide a description of what are the purposes of our processing of personal data, what types of personal data we process to fulfill the purposes and what legal basis we have for processing the data:
We do not collect information about how you use our website by using analysis tools such as Google Analytics. We also do not keep the statistics spm gives us answers on how many people visit our pages, which pages are visited, how long the visit lasts or which browsers are used and approximate geographical location.
If you send us an inquiry, we will process information about your name and e-mail address in order to respond to your e-mail. The basis for processing is the Privacy Ordinance, Article 6 (1) (f), which provides access to the processing of personal data that is necessary to safeguard our legitimate interest. The legitimate interest is to be able to answer inquiries to the company. All inquiries that do not result in the establishment of a customer relationship will be deleted 3 months after the last contact.
Safety and operation
Personal information related to the processing described in this privacy statement is stored in our IT systems operated by our data processors (www.domeneshop.no).
This means that they can not do anything else with the personal data without our permission, nor do they have the right to share your information further or use the information for purposes other than performing system updates, maintenance, troubleshooting and security. The personal information is returned to us and deleted by the data processor when the agreement is terminated.
The basis for processing is the Privacy Ordinance, Article 6 (1) (f), which provides access to the processing of personal data that is necessary to safeguard our legitimate interest. The legitimate interest is to safeguard security and operational purposes, and our legal obligation to have satisfactory information security, cf. the Privacy Ordinance, Article 6 (1) (c) and Article 32.
Heddal Stavkirke has its own company pages on Facebook to be available to people who want to follow the company, and who are used to share content, such as blog articles and news, with our followers. The basis for processing is the Privacy Ordinance, Article 6 (1) (f), which provides access to the processing of personal data that is necessary to safeguard our legitimate interest. The legitimate interest is to be able to market the company, share content and be available to people who want to follow the company.
4. Disclosure of personal information
We will not transfer or otherwise disclose personal information to others unless there is a legal basis for such disclosure.
5. Storage time
Your personal information will not be stored longer than is necessary to fulfill the purpose of the processing, unless there is a statutory duty of retention or it is necessary to store the information in order to defend us against any legal claims. The personal information will in all cases be deleted when the storage period has expired.
6. Your rights
When companies process personal data about you, you have the right to be informed about the processing, cf. the Privacy Ordinance Articles 13 and 14. We fulfill the information obligation in this privacy statement, and will refer to this when requesting information.
You also have several rights in relation to our processing of personal data about you. Here you can read more about what rights you have and how you proceed to make use of your rights towards us:
Right of access: You have the right to access your own personal information, and the right to receive a copy of your information
Right to correction (correction): You have the right to have incorrect or incomplete information registered about you corrected
Right to delete: In some cases, you have the right to have information about you deleted before our general deletion deadlines are met.
Right to restrict processing: In some cases, you have the right to have the processing of your personal data restricted. If the processing is restricted, we are only allowed to store the information, unless you agree or there is another legal basis that allows us to process your information further.
If you wish to make use of your rights, you can contact us by e-mail firstname.lastname@example.org or by telephone 922 04 435. We will respond to the inquiry as soon as possible and no later than 30 days from when we receive your inquiry.
If necessary, we will ask you to provide identification or other information that will allow us to verify your identity before we can fulfill your rights.
7. Information security
We take information security seriously and have established appropriate technical, physical and organizational security measures to protect your personal information. We conduct periodic security reviews to ensure that we maintain a sound level of security.
If you are not satisfied with the way we process your personal data or believe that we are violating the privacy regulations, you have the right to complain to the Norwegian Data Protection Authority. You can find more information on how to proceed to complain at www.datatilsynet.no
We will update this privacy statement as needed. You will always find the latest version on our website.