Privacy Policy & Personal Data Protection

1. Identity & Contact Details of the Data Controller

The controller of your personal data is BERGEN.KIDS DA, with its registered office located at Stokkedalen 109, 5151 Straumsgrend, Bergen, Norway, registered in the Norwegian Central Coordinating Register for Legal Entities (Enhetsregisteret) under organization number: 937 436 440.

For any inquiries concerning data privacy and the exercise of your GDPR rights, contact our Data Protection Officer electronically at: [email protected] or by telephone at: +47 55 98 24 10.

2. Scope & Legal Grounds for Data Processing

Your personal data may be processed for the following lawful purposes:

• Processing Inquiries & Correspondence (Contact Form): name, email address, phone number, message text — based on Art. 6(1)(f) GDPR (legitimate interest of the controller in responding to reader and institutional communications).
• Distribution of Educational Guides & Monographs: email address, name — based on Art. 6(1)(b) GDPR (taking steps at the request of the data subject prior to entering into a service agreement) or Art. 6(1)(a) GDPR (explicit user consent).
• Website Security & Server Maintenance: IP address, timestamp, browser user-agent, server access logs — based on Art. 6(1)(f) GDPR (ensuring technical resilience against brute-force attacks and service disruptions).

3. Cookie Files & Tracking Technologies

Our portal utilizes strictly necessary technical cookies to facilitate responsive rendering, form session protection, and language preferences. We do not deploy non-essential tracking mechanisms without prior user consent. Detailed information is provided in our Cookie Policy.

4. Data Retention Period

Data submitted via the inquiry form is retained only as long as necessary to provide a comprehensive response, and subsequently for the statutory limitation period of potential claims (maximum 3 years), or until a legitimate objection is lodged.

5. Data Recipients & International Transfers

Data may be shared with trusted technical service providers (hosting infrastructure, IT system operators) operating under Data Processing Agreements (DPA) within the European Economic Area (EEA). Norway, as an EEA member state, provides an equivalent high level of data protection recognized across the European Union.

6. Rights of the Data Subject

Under Chapter III of the GDPR, you possess the following rights:

• Right of access to your personal data and to obtain a copy thereof (Art. 15 GDPR),
• Right to rectification of inaccurate data (Art. 16 GDPR),
• Right to erasure (“right to be forgotten”) (Art. 17 GDPR),
• Right to restriction of processing (Art. 18 GDPR),
• Right to object to data processing (Art. 21 GDPR),
• Right to data portability (Art. 20 GDPR),
• Right to lodge a complaint with a supervisory authority (Datatilsynet in Norway or the relevant Data Protection Authority in your EU country of residence).

7. Technical Data Security & SSL Encryption

We employ state-of-the-art 256-bit TLS/SSL encryption to secure all transmissions between your browser and our server, protecting your personal communications against unauthorized interception.