Privacy Policy
Controller: Vorgalineixapeu, Olav Tryggvasons gt. 30, 7011 Trondheim, Norway.
Last updated:
Purpose and scope
This policy explains how we collect and use personal data when you browse this website, submit forms, or purchase Vasoray food supplements. We process data in line with the EU General Data Protection Regulation (GDPR) and applicable Norwegian privacy legislation.
Geographic scope
Our services are primarily directed at individuals in Norway and the European Economic Area. Data is usually processed within the EEA. Where processing occurs outside the EEA, we use appropriate safeguards such as Standard Contractual Clauses as referenced below.
Categories of data
We may process identification and contact data (name, email, phone if provided), order details, communication content, technical logs (IP address, browser type, device identifiers), and cookie-related data as described in our Cookie Policy.
Legal bases
We rely on performance of a contract for order handling, legitimate interests for website security and service improvement where proportionate, consent where required (for example optional marketing communications or non-essential cookies), and legal obligations where applicable.
Purposes
Data is used to respond to enquiries, process orders, deliver customer support, maintain accounts, prevent fraud, comply with accounting and tax rules, and improve the clarity of our online information.
Retention
Order and accounting records are kept for the period required by Norwegian bookkeeping and tax rules, typically up to five years after the end of the financial year unless a longer period is mandated. Marketing consents are stored until withdrawn. Enquiry records are kept for twenty-four months after the last contact unless a dispute requires longer retention.
Sharing and processors
We share data with payment providers, logistics partners, and IT hosting providers strictly as needed to operate the store. Processors are bound by written agreements and may not use data for their own purposes. Where data leaves the European Economic Area, we rely on appropriate safeguards such as Standard Contractual Clauses.
Security
We apply access controls, encryption in transit where supported, patching, and organisational measures suitable for the risk. No online service is completely risk-free; please use strong passwords and protect your devices.
Your rights
Under the GDPR you may request access, rectification, erasure, restriction, portability, and object to certain processing. You may withdraw consent at any time where processing is consent-based. You may lodge a complaint with Datatilsynet in Norway.
Online advertising and measurement
We may run online advertising through platforms such as Google Ads. Those tools may process aggregated or pseudonymous campaign data. We do not use data collected through this website to infer sensitive health conditions, and we do not build audience segments based on medical categories. Optional marketing and analytics cookies are described in our Cookie Policy. Product pages describe a food supplement only and must be read together with the site disclaimer and physical label.
Contact
Privacy requests can be sent using the addresses published in the site footer. We respond within one month in ordinary cases.