Privacy Policy

1. Introduction

Wraxylonkrizvor ("we", "us", "our") is committed to protecting your personal data and respecting your privacy. This Privacy Policy explains what personal data we collect, how we use it, on what legal basis, for how long we retain it, and what rights you have under the General Data Protection Regulation (GDPR) (Regulation (EU) 2016/679) and the Norwegian Personal Data Act (Personopplysningsloven).

By using our website at wraxylonkrizvor.world, you acknowledge that you have read and understood this Privacy Policy.

2. Data We Collect

We may collect the following categories of personal data:

• Contact and identification data: Full name, email address, phone number
• Order data: Delivery address, product and order information provided through the order form
• Communication data: Messages or inquiries you send us via the contact or order form
• Technical data: IP address, browser type, device type, pages visited, visit duration (collected via cookies, where consent is given)
• Cookie preference data: Your choices regarding cookie categories, stored in your browser's local storage

We do not collect sensitive categories of personal data (such as health data, biometric data, or data revealing ethnic origin) and do not require you to provide such information.

3. Legal Basis for Processing

Purpose	Legal Basis (GDPR Article 6)
Processing your order and responding to your enquiry	Article 6(1)(b) — Contractual necessity
Compliance with legal obligations (e.g. accounting, consumer law)	Article 6(1)(c) — Legal obligation
Analytics cookies and website usage analysis (with consent)	Article 6(1)(a) — Consent
Marketing communications (with consent)	Article 6(1)(a) — Consent
Legitimate interest in maintaining website security	Article 6(1)(f) — Legitimate interests

4. How We Use Your Data

We use your personal data for the following purposes:

• To process and fulfil your order for Helionil and communicate with you regarding your request
• To respond to enquiries submitted through the website form
• To comply with applicable legal obligations, including record-keeping under Norwegian accounting law
• To analyse website usage and improve the website experience (only with your explicit consent for analytics cookies)
• To maintain the security and integrity of our website

We do not use your personal data for automated decision-making or profiling that produces legal effects or similarly significant effects on you.

5. Data Retention

We retain your personal data only as long as necessary for the purposes for which it was collected, or as required by applicable law:

• Order and transaction data: Retained for 5 years following the transaction, in accordance with Norwegian accounting obligations (Bokføringsloven)
• Communication and enquiry data: Retained for up to 2 years from the date of last contact
• Technical and cookie data: Retained for the duration of the session or as specified in the Cookie Policy
• Consent records: Retained for 3 years from the date consent was given or withdrawn

Upon expiry of the retention period, your data is securely deleted or anonymised.

6. Data Sharing and Third Parties

We do not sell or rent your personal data to third parties. We may share your data in the following limited circumstances:

• Service providers: Third-party providers who assist with website hosting, email delivery, or order management, acting as data processors under written data processing agreements
• Legal requirements: Where disclosure is required by Norwegian law, court order, or a competent authority

All third-party processors are required to implement appropriate technical and organisational security measures and may only process your data according to our documented instructions.

7. International Data Transfers

Our website is hosted within the European Economic Area (EEA). Where any service provider processes data outside the EEA, we ensure adequate safeguards are in place, such as the European Commission's Standard Contractual Clauses (SCCs) pursuant to Article 46 GDPR.

8. Data Security

We implement appropriate technical and organisational measures to protect your personal data against accidental or unlawful destruction, loss, alteration, unauthorised disclosure, or access. These measures include:

• HTTPS encryption for all website communications
• Access controls limiting data access to authorised personnel only
• Regular review of data processing activities and security procedures

In the event of a personal data breach that is likely to result in a risk to your rights and freedoms, we will notify the Norwegian Data Protection Authority (Datatilsynet) within 72 hours and, where required, notify affected individuals without undue delay.

9. Your Rights Under GDPR

You have the following rights regarding your personal data:

• Right of access (Article 15): You may request a copy of the personal data we hold about you
• Right to rectification (Article 16): You may request correction of inaccurate or incomplete data
• Right to erasure (Article 17): You may request deletion of your data where it is no longer necessary, or where you withdraw consent
• Right to restriction of processing (Article 18): You may request that we limit how we process your data in certain circumstances
• Right to data portability (Article 20): You may receive your data in a structured, machine-readable format where processing is based on consent or contract
• Right to object (Article 21): You may object to processing based on legitimate interests
• Right to withdraw consent: Where processing is based on consent, you may withdraw it at any time without affecting the lawfulness of prior processing

To exercise any of these rights, contact us at: call-us-@wraxylonkrizvor.world or write to: Orkdalsveien 58, 7300 Orkanger, Norway.

We will respond to your request within 30 days. In complex cases, we may extend this by a further 60 days and will notify you accordingly.

10. Right to Lodge a Complaint

If you believe we have processed your personal data unlawfully, you have the right to lodge a complaint with the Norwegian Data Protection Authority:

Datatilsynet
Postboks 458 Sentrum, 0105 Oslo, Norway
Website: datatilsynet.no
Phone: +47 22 39 69 00

We encourage you to contact us first so we can address your concern directly.

11. Cookies

We use cookies and similar tracking technologies on this website. Please refer to our Cookie Policy for full details on the types of cookies used, their purposes, and how to manage your preferences.

12. Children's Privacy

Our website and products are intended for adults aged 18 and over. We do not knowingly collect personal data from individuals under 18. If you believe a minor has submitted personal data, please contact us immediately and we will arrange for its deletion.

13. Changes to This Policy

We may update this Privacy Policy from time to time to reflect changes in our practices or applicable law. The updated policy will be posted on this page with a revised "Last updated" date. We encourage you to review this page periodically.

14. Contact

For any questions, concerns, or requests regarding this Privacy Policy or your personal data, please contact:

Wraxylonkrizvor
Orkdalsveien 58, 7300 Orkanger, Norway
Phone: +4772483850
Email: call-us-@wraxylonkrizvor.world