Privacy Policy

Index

1. WHAT IS COVERED BY THIS PRIVACY POLICY, AND DO OTHER POLICIES APPLY TO YOU?
2. WHAT SPECIFIC TERMS APPLY DEPENDING ON THE COUNTRY IN WHICH YOU RESIDE?
3. WHO COLLECTS AND PROCESSES YOUR PERSONAL DATA?
4. WHY DO WE COLLECT YOUR PERSONAL DATA?
5. WHAT PERSONAL DATA DO WE COLLECT?
6. WHEN DO WE COLLECT YOUR PERSONAL DATA?
7. HOW DO WE COLLECT YOUR PERSONAL DATA?
8. WHO ARE OUR THIRD-PARTY SOURCES?
9. ARE YOU ALWAYS REQUIRED TO SHARE YOUR PERSONAL DATA WITH US?
10. HOW LONG DO WE RETAIN YOUR PERSONAL DATA?
11. HOW DO WE PROTECT YOUR PERSONAL DATA?
12. WHERE DO WE TRANSFER AND STORE YOUR PERSONAL DATA?
13. WITH WHOM DO WE SHARE YOUR PERSONAL DATA?
14. WHAT RIGHTS DO YOU HAVE IN RELATION TO YOUR PERSONAL DATA?
15. CAN THIS PRIVACY POLICY BE AMENDED?
16. DO WE USE COOKIES OR OTHER TECHNOLOGIES FOR ONLINE ADVERTISING?
17. HOW CAN YOU CONTACT US?

1. WHAT IS COVERED BY THIS PRIVACY POLICY, AND DO OTHER POLICIES APPLY TO YOU?

This Privacy Policy describes how Hund På Havna Brunes processes personal data when we access, collect, record, store, use, disclose, or otherwise process personal data in connection with our business activities.

This Policy applies, among others, to:

• private customers and prospective private customers;
• business customers and contact persons at our business customers;
• retailers, distributors, and other business partners;
• users of our websites, online stores, and digital services; and
• individuals who contact us by email, telephone, social media, trade fairs, events, or other communication channels.

This Policy also applies where our authorised service providers and business partners process personal data on our behalf. Such parties may include, among others, providers of online store solutions, payment solutions, logistics and delivery services, IT services, customer management systems, marketing services, and accounting services. Where such parties process personal data on our behalf, such processing shall be governed by relevant agreements and instructions issued by us.

In certain cases, separate or supplementary privacy information may apply to specific products, services, events, campaigns, or digital solutions. If this is the case, you will be informed of the relevant policies when using the relevant service or participating in the relevant activity. Such specific policies shall prevail over this Privacy Policy to the extent that they expressly state so.

This Privacy Policy does not apply where other organisations process personal data on their own behalf and as independent controllers. This may, for example, apply to payment providers, carriers, retailers, social media services, or other digital platforms such as WhatsApp, Facebook, Instagram, LinkedIn, and X.

If you share information with such organisations, the processing of your personal data will be governed by the relevant organisation’s privacy policy and terms, rather than by this Privacy Policy.

 2. WHAT SPECIFIC TERMS APPLY DEPENDING ON THE COUNTRY IN WHICH YOU RESIDE?

Hund På Havna Brunes offers products and services to customers in Norway and the other Nordic countries. Personal data is processed in accordance with the Norwegian Personal Data Act and the General Data Protection Regulation (“GDPR”), as well as other relevant legislation applicable to our business.

For customers residing in other countries within the EEA, including Denmark, Sweden, Finland, and Iceland, the GDPR applies as a common data protection framework. Certain national rules may nevertheless supplement the GDPR, including rules relating to electronic marketing, consumer rights, and cookies.

Where mandatory legislation in the country in which you have your habitual residence grants you additional consumer rights, such rights shall apply to the extent provided by the relevant legislation.

For business customers, this Privacy Policy applies to personal data relating to contact persons, representatives, employees, and other natural persons acting on behalf of the business. This Privacy Policy does not apply to information concerning legal entities as such.

3. WHO IS THE CONTROLLER OF YOUR PERSONAL DATA?

Hund På Havna Brunes is the controller responsible for the processing of your personal data. This means that we determine the purposes and means of the processing, that is, why and how your personal data is collected, used, stored, and shared.

The controller is:

Hund På Havna Brunes
Tømmerlia 3A
1684 Vesterøy
Norway

Organisation number: 935 512 530
Email: post@pataljanis.com
Telephone: 33201100

In order to provide products and services, manage customer relationships, process orders and payments, deliver goods, operate the online store, and provide customer service, we may use external service providers and business partners.

Where a supplier processes personal data exclusively on our behalf and in accordance with our instructions, the supplier acts as a processor. Such processors are contractually required to process personal data in accordance with our instructions, safeguard confidentiality, and implement appropriate technical and organisational security measures.

Depending on the services we use, this may include providers of, among other things:

• online store and IT services;
• payment solutions;
• warehousing, logistics, and delivery services;
• customer management systems and customer service tools;
• accounting and auditing services;
• email, newsletter, and marketing services; and
• operation, security, and storage of digital solutions.

Certain business partners process personal data for their own purposes and therefore act as independent controllers. This may, for example, apply to payment intermediaries, banks, carriers, retailers, social media services, and advertising platforms. The processing of personal data by such parties is governed by their own privacy policies and terms.

Further information regarding the categories of recipients with whom we may share personal data is provided in section 13 of this Privacy Policy.

4. WHY DO WE COLLECT YOUR PERSONAL DATA?

Hund På Havna Brunes processes personal data only where we have a lawful basis for processing and a clearly defined purpose.

We may, among other things, collect, record, store, use, update, combine, disclose, or otherwise process personal data for the purposes described in this section. We do not process your personal data for purposes that are incompatible with the purpose for which it was originally collected, unless such processing is permitted under applicable law.

Our legal bases for processing may include:

• Performance of a contract, where processing is necessary in order to enter into or perform a contract with you.
• Compliance with a legal obligation, where processing is necessary to comply with requirements laid down in legislation or regulations, such as requirements under accounting legislation.
• Legitimate interests, where processing is necessary to pursue a legitimate interest held by us, provided that our interests are not overridden by your interests or fundamental rights and freedoms.
• Consent, where this is required under data protection legislation, electronic communications legislation, or marketing legislation.

If you would like further information about the purposes of the processing or our legal bases for processing, you may contact us at post@pataljanis.com.

A) To Process Orders and Provide Products and Services

We process personal data in order to handle orders from private customers, business customers, retailers, distributors, and other business partners.

This includes, among other things, order processing, invoicing, payment, picking, packing, delivery, returns, complaints, customer communications, and the administration of the contractual relationship.

Where you act on behalf of a business, we process personal data relating to you in your capacity as a contact person, such as your name, email address, telephone number, job title, and communications related to the order or customer relationship.

We may share necessary information with payment providers, carriers, warehousing and logistics providers, IT providers, and other service providers that assist us in delivering the products or services.

 B) To Administer a Customer Account or Customer Profile

If you create a customer account with Hund På Havna Brunes, we process the personal data necessary to create, administer, and secure your account.

This may include your name, contact details, login details, order history, delivery information, and preferences that you have provided. If you act on behalf of a business, the information may also include your role as a contact person and information relating to the business’s orders and customer relationship.

We use this information to enable you to log in, view and manage previous orders, update your details, and complete purchases more easily.

We may use your email address or telephone number to link orders and enquiries to your customer account. This may, among other things, apply when you make purchases online, in a physical store, at a stand, at a trade fair, or at other events, provided that you have supplied your contact details and there is a basis for linking the information to your customer account.

If you make a purchase as a guest and subsequently create a customer account using the same contact details, we may link the relevant purchase to your customer account. We do not create a customer account or customer profile solely because you visit a physical store, stand, trade fair, or event, unless you request this yourself or another valid legal basis for processing applies.

In order to ensure that the information is accurate and up to date, we may correct obvious errors, update information following a request from you, and remove duplicate information in our customer management system. You have the right to request the rectification of inaccurate or incomplete personal data.

C) To Provide Tailored Customer Service and Assistance

We seek to provide you with a seamless and consistent customer experience, regardless of how you interact with us. This applies whether contact takes place in a physical store, at a stand, at trade fairs or events, through our website, via chat, telephone, video chat, email, text message, or social media.

In order to provide relevant and tailored customer service, we may process personal data that enables us to identify you, understand your enquiry, and manage your relationship with us. This may include your name, contact details, the content of your enquiry, information about orders and purchases, delivery information, preferences you have provided, and previous contact with us.

If you have a customer account or customer profile, we may use relevant information from it in order to provide more efficient customer service. This may, for example, be relevant when you enquire about a previous order, delivery status, return, complaint, warranty, product information, or availability.

When you contact us, we may link your enquiry to your customer account or customer profile where this is relevant and we are able to identify you. If we are unable to identify you, we may create a temporary record containing the information necessary to follow up on your enquiry and to avoid requiring you to provide the same information more than once.

We do not create a customer account or customer profile solely because you visit a physical store, stand, trade fair, or event. If you ask us to follow up on an enquiry, reserve a product, notify you when a product becomes available, send you information, or otherwise contact you, we may record the information necessary for that purpose.

At your request, our employees may contact you in relation to products or services that you have purchased or enquired about. This may, for example, apply where an order is ready for collection, a product is back in stock, or you have requested further product information.

In order to improve the quality, security, and efficiency of our customer service, we may monitor and document interactions with customer service. This may include audio recording, video recording, real-time monitoring, or subsequent review of telephone calls and video chats. You will receive clear information before any such recording or monitoring takes place.

During video chats, we may process your image and voice, as well as other information disclosed during the conversation. If other individuals are visible or audible during a video chat, we ask you to ensure that they are informed and that you have a necessary basis for sharing information about them.

Certain customers and prospective customers may receive specific follow-up, such as invitations to events, product launches, or other relevant activities. Such follow-up may be based on information about previous purchases, product interests, or contact with us. Where such follow-up constitutes direct marketing, we will obtain consent where required under applicable law. You may opt out of such marketing at any time.

The purposes of the processing of your personal data are as follows:

D) To send relevant information and marketing content

We may send you information concerning Hund På Havna Brunes, our products and services, news, campaigns, events, offers, and surveys. Such communication may be sent by email, SMS, telephone, post, social media, or other relevant communication channels.

We send electronic marketing where you have consented to this, or where we otherwise have a valid legal basis under applicable law, including the rules relating to existing customer relationships. If you are a contact person for a corporate customer, dealer, distributor, or other business partner, we may send relevant information concerning products, prices, orders, services, and cooperation, where such communication is relevant to your role and to the customer or business relationship with us.

You may object to marketing or withdraw your consent at any time. You may use the unsubscribe link in our emails, follow the instructions in an SMS, change the settings in your customer account where available, or contact us at post@pataljanis.com.

An objection to marketing does not affect the sending of necessary information relating to orders, delivery, security, your customer account, or other matters connected to the customer relationship.

Personalised marketing and profiling

Where you have consented to this, we may personalise marketing on the basis of information such as purchase history, product interests, geographical area, language preferences, responses to previous communications, and preferences you have provided yourself.

We may use such information to group customers and contact persons with similar interests or needs. This may involve profiling. The profiling is used to make communications, product recommendations, and offers more relevant.

We do not carry out automated decision-making that produces legal effects concerning you or similarly significantly affects you.

If you withdraw your consent to personalised marketing, we will no longer use personal data processed on the basis of that consent to personalise marketing. You may still receive general marketing where we have another valid legal basis for doing so, for example within the framework of an existing customer relationship and in accordance with applicable law.

Cookies and online advertising

Where you consent to marketing or analytics cookies, we may use information about your use of our website in order to measure the effectiveness of our marketing and display more relevant online advertisements.

This may include information concerning visits to the website, which pages or products you view, technical information about your device, and responses to advertisements or newsletters. Further information about the use of cookies and how you may change your choices is set out in Section 16.

Social media platforms, advertising platforms, and other third-party services also process personal data in accordance with their own privacy policies and terms.

Customer list advertising and lookalike campaigns

Where you have consented to marketing and to the relevant use of your data, we may use contact details such as your email address or telephone number in order to display advertisements to you on advertising platforms and social media. We may also use such information to create audiences consisting of persons who may have interests similar to those of our existing customers, so-called “lookalike” audiences.

Before contact details are transferred to an advertising platform, they may be converted into a cryptographic hash value. This does not mean that the data are anonymised. The information may still constitute personal data and will be processed in accordance with applicable data protection law.

You may withdraw your consent to such use of your data at any time by contacting us at post@pataljanis.com or by changing your cookie settings where relevant.

The purposes of the processing of your personal data are as follows:

E) To send communications that are not marketing-related

We may send you communications that are not marketing-related where this is necessary in order to follow up an inquiry, perform a contract with you, administer your customer account, safeguard the security of our services, or comply with legal obligations.

You may receive such communications even if you have objected to marketing. An objection to marketing does not affect our ability to send necessary information concerning orders, payment, delivery, returns, complaints, your customer account, security, or other matters connected to the customer relationship.

Non-marketing communications may include, among other things:

• order confirmations, invoices, payment information, and delivery updates;
• information concerning collection, returns, complaints, warranties, or refunds;
• responses to inquiries and requests you have sent to us;
• identity verification, creation of a customer account, and resetting of passwords or usernames;
• notifications of technical errors, security incidents, or service interruptions that may affect an order, your customer account, or our services;
• information concerning material changes to the privacy policy, terms of use, or other terms applicable to the customer relationship;
• practical information for contact persons at corporate customers, dealers, distributors, and other business partners.

We will never contact you in order to ask for your password. If you receive an email, SMS, telephone call, or other message asking you to disclose your password, you must not share it. Instead, please contact us directly using the contact details on our website.

The purposes of the processing of your personal data are as follows:

F) To administer our social media

Hund På Havna Brunes uses social media to communicate about our business, products, services, events, and offers, and to respond to inquiries from customers and other interested persons.

When you interact with our accounts or pages on social media, for example by following a page, liking, commenting, sharing, or sending us a message, we may process information that you make available to us. This may include your name or username, profile picture, the content of messages and comments, and other information that you choose to share with us.

We use such information in order to:

• respond to questions and inquiries;
• communicate with you through the relevant platform;
• administer comments and other content published on our pages;
• provide information about products, services, events, and activities;
• prepare statistics and analyses concerning the use of our pages and the effectiveness of our communications.

We may remove comments or other content that are offensive, threatening, unlawful, spam, advertising for unrelated businesses, or otherwise contrary to our social media guidelines.

Social media platforms process personal data in accordance with their own privacy policies and terms. When you use such platforms, the relevant platform may process information about you, including for its own purposes such as operation, analytics, advertising, and security. We do not control such processing.

Certain platforms provide us with access to statistics about visitors and users of our pages, for example information about reach, interactions, demographics, and geographical area. We normally receive such information in aggregated form. For certain analytics functions, including page insights functions provided by Meta, we and the platform provider may act as joint controllers for the initial collection and transmission of data to the platform. The platform provider is normally responsible for the subsequent processing of the data within its own systems.

If you send us an inquiry via social media concerning an order, complaint, or another customer matter, we may ask you to continue the dialogue by email or another suitable channel for reasons of privacy and security. You should not share personal identification numbers, payment details, passwords, or other sensitive information in comments or direct messages on social media.

The purposes of the processing of your personal data are as follows:

G) To operate our business securely and protect our business, employees, and customers

We process personal data in order to prevent, detect, and investigate fraud, misuse, security incidents, and breaches of our terms. This is necessary in order to protect our customers, employees, systems, networks, products, services, and business relationships.

Such measures may include, among other things, checks relating to orders, payments, returns, complaints, and other activity connected to the customer relationship. We may also verify your identity where this is necessary in order to prevent fraud, protect customer accounts, secure transactions, or comply with legal obligations.

We may process information concerning suspected or actual breaches of our terms of sale, campaign terms, offers, events, or other services. Where we have reason to believe that fraud, misuse, or a breach of terms has occurred, we may implement necessary and proportionate measures. This may include closer scrutiny of orders, rejection or cancellation of an order where permitted, or restriction of access to particular services.

We implement administrative, organisational, and technical security measures in order to protect our website, customer accounts, systems, networks, transactions, and personal data against unauthorised access, misuse, loss, alteration, or disclosure.

In order to protect our employees and ensure an appropriate communication environment, we may also process information concerning serious inappropriate conduct, for example harassment, insults, hate speech, or direct threats directed at our employees or representatives.

Where such incidents occur, we may record the information necessary concerning the incident, assess which measures are necessary, and issue a warning to the person concerned. In the event of repeated or serious conduct, we may, where necessary and proportionate, restrict contact through particular communication channels. The person will still be able to contact us through alternative appropriate channels, unless special circumstances indicate otherwise.

For purposes of quality assurance, security, training, documentation, and the handling of complaints or disputes, we may monitor and document contact with customer service. This may include audio recordings, video recordings, real-time listening, or subsequent review of calls and video chats. You will receive clear information before any such recording or monitoring is carried out.

We may also process personal data in order to protect and enforce our rights, property, intellectual property rights, and business interests, as well as to handle complaints, disputes, legal claims, and matters before relevant authorities.

The purposes of the processing of your personal data are as follows:

H) To administer, assess, and develop our business

We process personal data where necessary in order to administer our business, perform contracts, comply with legal obligations, and develop products, services, and customer experiences.

This may include, among other things, financial management, accounting, bookkeeping, invoicing, inventory management, procurement, logistics, internal control, audit, legal advice, and the handling of complaints or disputes.

We may also use personal data for business analyses and market research. This may, for example, involve analysing sales data, purchasing patterns, product categories, geographical areas, or customer types in order to understand how our products and services are used and demanded.

Where possible, we use aggregated or anonymised information in analyses and reporting. Where personal data are used, we limit the processing to what is necessary for the relevant purpose.

We may send surveys or questions concerning customer satisfaction in order to obtain feedback on products, customer service, delivery, events, or other aspects of our business. Participation in such surveys is voluntary.

We may also analyse the effect of marketing and communication activities. Where such analysis takes place using cookies or other tracking technology, this will occur only where you have given the necessary consent. See Section 16 for further information concerning cookies.

If we carry out a business transfer, merger, acquisition, reorganisation, refinancing, or other similar transaction, it may be necessary to share limited and relevant personal data with actual or potential purchasers, investors, advisers, or other involved parties. We will in such case limit the information to what is necessary and implement appropriate measures to safeguard confidentiality and privacy.

The purposes of the processing of your personal data are as follows:

I) To administer, secure, and improve the website and our digital communication channels

We process personal data where necessary in order to operate, secure, maintain, and improve our website, online store, customer accounts, chat solutions, and other digital communication channels that we provide.

This may include the processing of technical information, such as IP address, browser type, device type, session information, error messages, security logs, and information concerning how our website and services are used.

The purpose is, among other things, to ensure that the website and online store function properly, to prevent and remedy technical errors, to protect the services against misuse and unauthorised access, and to improve the user experience.

Where we use cookies or other tracking technology requiring consent, we obtain valid prior consent before such technology is activated. Further information concerning cookies and how you may change your choices is set out in Section 16.

We may also use information from customer accounts, inquiries, or technical logs in order to investigate and resolve specific operational problems, for example errors relating to login, ordering, payment, the customer account, or other functions on the website.

The purposes of the processing of your personal data are as follows:

5. WHAT PERSONAL DATA DO WE COLLECT?

When you interact with Hund På Havna Brunes, we may collect personal data within the categories set out below. We collect only such personal data as are necessary for the relevant purpose and for which we have a valid legal basis for processing.

The personal data we process will depend on how you interact with us, for example whether you shop in our online store, in a physical store, at a stand, at a trade fair or event, create a customer account, contact customer service, or represent a corporate customer, dealer, or distributor.

A) Identification and contact data, and data related to the customer account

We may process data that make it possible to identify you, contact you, administer your customer account, and manage the customer relationship.

Such data may include, among other things:

• first name and surname;
• email address;
• telephone number;
• postal address, delivery address, and billing address;
• username and login credentials for the customer account;
• customer number or other customer identifier;
• order and delivery references;
• language preferences and country of residence;
• information concerning your role as a contact person for a corporate customer, dealer, distributor, or other business partner, including the name of the undertaking, your position or role, and work-related contact details;
• communication preferences and consents, for example consent to newsletters or marketing;
• IP address and technical identifiers, when you use the website, the online store, or your customer account; and
• image and audio data where these arise if you participate in a video chat with us, or where such processing takes place in accordance with information provided to you in advance.

These data may be used in order to create and administer your customer account, process orders, deliver goods, provide customer service, respond to inquiries, handle payment, returns, and complaints, and send information or marketing where lawful. We may use your email address, telephone number, or other customer identifier in order to associate orders and inquiries with your customer account or customer profile, where relevant and lawful.

We do not collect or use national identity numbers, passport numbers, driving licence numbers, or other public identification numbers unless this is necessary in a specific case and the processing has a valid legal basis. We may process special categories of personal data only where this is necessary and we have a specific legal basis for processing under applicable data protection law. We therefore ask you to avoid sharing health data or other sensitive personal data with us unless this is necessary and we expressly request it.

B) Transaction data, commercial data, and recordings of customer communications

We may process data relating to purchases, orders, and other transactions in order to provide products and services, administer the customer relationship, provide customer service, handle payment, delivery, returns, and complaints, and for accounting purposes and the proper operation of the business.

Such data may include, among other things:

• products and services you have purchased, ordered, received, or requested;
• product reference, product category, size, variant, price, and quantity;
• order date, order number, delivery method, and delivery status;
• information concerning payment, invoicing, refunds, and any payment status;
• information concerning returns, complaints, warranties, product defects, and customer matters;
• comments, feedback, or reviews you provide regarding products, services, or customer service;
• purchase history and order history;
• information relating to offers, agreements, orders, and invoicing for corporate customers, dealers, distributors, and other business partners; and
• audio or video recordings of customer communications, together with any written transcript, where such recording or monitoring has been notified in advance.

We may process limited payment data necessary in order to complete a payment or refund. Card payments and other payment transactions are normally processed by our payment service providers. We do not store complete card details unless this is necessary and permitted under applicable law.

We limit the processing of transaction and commercial data to what is necessary for the relevant purpose. Data concerning payments, purchases, and customer relationships are processed using appropriate technical and organisational security measures.

Certain data may be of a private or financial nature and may therefore require particular protection. We process such data in accordance with applicable data protection law and on the legal basis applicable to the relevant processing activity.

C) Preferences, interests, and inferred data

We may process data concerning your interests and preferences where you provide such data to us yourself, or where such data follow from your interactions with us. The purpose may be to provide relevant customer service, offer product guidance, administer your customer account, and, where lawful, send relevant and tailored marketing.

Such data may include, among other things:

• preferences relating to dog care, grooming, dog shows, or dog-related products;
• information concerning products you have purchased, requested, or shown an interest in;
• product preferences, for example product category, variant, size, or brand;
• feedback, survey responses, and information you voluntarily share with us;
• preferences relating to language, means of communication, or events; and
• information concerning how you use our website, where you have consented to cookies or other tracking technology used for that purpose.

Information concerning your dog does not necessarily constitute personal data in itself. However, where such information can be linked to you, for example through your customer account, your order, or your contact details, it will nevertheless be processed as personal data.

Where you have consented to personalised marketing, we may use data concerning purchases, interests, and preferences in order to tailor product recommendations, offers, information, and invitations. This may involve grouping customers with similar interests or needs. Such processing may constitute profiling.

We do not carry out automated decision-making that produces legal effects concerning you or similarly significantly affects you.

If you share personal data relating to other persons with us, for example in connection with a gift, an invitation, or an event, we ask you to ensure that you have the necessary basis for sharing such data. We ask you not to share more information concerning others than is necessary.

We ask you to avoid sharing health data or other special categories of personal data unless this is necessary and we expressly request it. If such data are nevertheless processed, this will take place only where we have a valid specific legal basis under applicable data protection law.

D) User-generated content

We may process personal data that you choose to share with us yourself, for example through our website, customer service, competitions, events, or our social media accounts.

Such data may include, among other things:

• images or videos of you, your dog, or other persons;
• texts, comments, reviews, feedback, and opinions;
• content that you submit to us in connection with competitions, campaigns, events, or customer communications;
• comments, reactions, shares, tags, or other interactions with our social media accounts and publications; and
• other content or information that you voluntarily make available to us.

We may use such content in order to respond to inquiries, administer competitions or events, follow up customer communications, moderate content on our digital platforms, or, where you have provided the necessary consent, publish or share the content in our communication and marketing channels.

If you send us images, videos, or other content containing personal data relating to other persons, you are responsible for ensuring that you have the necessary basis for sharing such data with us. This applies in particular where the content depicts or identifies other persons, including children.

You may request that we remove content that you have submitted or published by contacting us at post@pataljanis.com. Where the content has been published on a third-party platform, such as a social media platform, it may in some cases also be necessary for you to delete the content directly on the relevant platform. We cannot guarantee that content that has already been shared, stored, or further disseminated by others can be completely removed.

We ask you to avoid sharing national identity numbers, payment data, passwords, health data, or other sensitive personal data through comments, direct messages, or open digital channels.

E) Technical, electronic, and location-related data

We may process technical and electronic data when you use our website, online store, customer account, chat functions, or other digital services. Such data are necessary in order to operate and secure our services, administer customer accounts, process orders, provide customer service, and improve the website and user experience.

We collect only such data as are necessary for the relevant purpose and for which we have a valid legal basis for processing.

Such data may include, among other things:

• IP address;
• device type and operating system;
• browser type and browser settings;
• unique device or browser identifiers;
• time zone and general geographic location, for example country or city;
• language preferences;
• date and time of visits, logins, and activities within the customer account;
• information concerning which pages, products, or functions you use on the website;
• referral source, for example whether you arrived at the website via a search engine, advertisement, or link;
• technical logs, error messages, security incidents, and information necessary for troubleshooting; and
• information concerning interaction with emails, newsletters, advertisements, or other digital content, where you have provided the necessary consent.

When you shop in a store, at a stand, trade fair, or event, we may record where the purchase or inquiry took place where this is necessary for the order, delivery, return, complaint, or follow-up of the customer relationship. Such data may be linked to your customer account or customer profile where relevant and lawful.

We may also process information concerning which communication channel you use when contacting us, for example email, telephone, chat, video chat, or social media, as well as information concerning the time and content of the inquiry.

Certain technical data may be received automatically from your device, your browser, or providers of digital services that you use. Where you interact with us through social media or other third-party platforms, personal data are also processed by the relevant platform in accordance with its own privacy policy and terms.

We use cookies and similar technologies in accordance with Section 16. Analytics, marketing, and targeting cookies requiring consent are activated only where you have given valid consent through our cookie settings.

6. WHEN DO WE COLLECT YOUR PERSONAL DATA?

When you interact with us, whether online or in person, you may share personal data with us in the following circumstances:

• when you purchase a product or order a service;
• when you create a Hund På Havna profile, enrol in our customer loyalty programme, participate in a competition, join a benefits programme, or link your social media account to your Hund På Havna profile;
• when you subscribe to our newsletter;
• when you interact with us or seek advice and share personal data through our websites, our social media pages, with our sales staff in store, or via chat, telephone or video calls, at trade fairs, events, or through customer service, including telephone inquiries;
• when you use your device to browse across different websites;
• when a personal shopper or other representative acting on your behalf interacts with us, in particular to purchase a product or order a service on your behalf; and
• when information about you is shared with us by our approved partners, with your prior consent where this is required.

7. HOW DO WE COLLECT YOUR PERSONAL DATA?

We collect personal data primarily directly from you when you interact with us. This may take place online, in store, at stands, at trade fairs or events, or through other communication channels.

We may also collect certain information automatically when you use our website, online store, or customer account, for example through the use of necessary cookies, technical logs, and similar technologies. Where consent is required for the use of cookies or comparable technologies, we obtain such consent before those technologies are used.

A) Sales staff, stores, stands, and events

We may collect personal data when you make a purchase from us or interact with our sales staff in store, at a stand, at trade fairs, or at other events.

This may occur, for example, when you:

• make a purchase or place an order;
• request product guidance or customer service;
• ask us to reserve a product or follow up on an inquiry;
• provide contact details for delivery, collection, complaints, or other follow-up;
• create or use a customer account or customer profile; or
• participate in competitions, events, or other activities.

B) Website, online store, and customer account

We may collect personal data through our website, online store, and your customer account, regardless of whether you are registered as a customer or complete a purchase as a guest.

This may occur, for example, when you:

• create or manage a customer account;
• complete a purchase or place items in your shopping basket;
• complete contact forms, registration forms, or other forms;
• subscribe to newsletters or consent to marketing;
• participate in surveys, competitions, or events;
• use chat functions or other digital customer service channels; or
• set or amend your cookie preferences.

We may also collect technical information, as described in Section 5(E), through cookies, technical logs, and similar technologies.

C) Customer service and other communication channels

We may collect personal data when you contact us by email, telephone, text message, chat, video chat, social media, or through other communication channels.

Such data may include your name, contact details, the content of your inquiry, information relating to an order or purchase, and any other information that you choose to share with us.

Where calls or video chats are recorded or monitored, you will be informed in advance, as described in Sections 4(C) and 4(G).

D) Payment, delivery, and purchase channels

When you make a purchase, we may collect the information necessary to process your order. This may include the purchase amount, date of purchase, product reference, order or invoice number, delivery details, and payment status.

Payment transactions are normally processed by our payment service providers. We do not store full card details unless this is necessary and permitted under applicable law. Where you request a refund, we may collect the bank details necessary to process that refund.

E) Third-party sources and business contacts

In certain circumstances, we may receive personal data from third parties. This may include, for example:

• payment service providers, carriers, and logistics providers;
• dealers, distributors, and other business partners;
• organisers or partners involved in trade fairs and events;
• social media platforms and other digital platforms, where you choose to interact with us through such channels;
• contact persons at corporate customers, dealers, or distributors; and
• persons acting on your behalf, such as a representative or personal shopper.

We obtain personal data from third parties only where this is permitted under applicable law.

Social media platforms, payment service providers, and other third-party services process personal data in accordance with their own privacy policies and terms. Where such parties process data on their own behalf, that processing is governed by their own rules.

8. WHO ARE OUR THIRD-PARTY SOURCES?

We collect personal data primarily directly from you. In certain circumstances, we may also receive personal data from third parties.

We receive such data only where the third party is permitted to share them with us under applicable law, for example because you have consented, because the disclosure is necessary for the performance of a contract, or because the third party has another valid legal basis.

Our third-party sources may include, among others, the following:

A) Dealers, distributors, and other business partners

We may receive information concerning contact persons, orders, delivery, invoicing, or other matters relating to customer relationships and cooperation from dealers, distributors, corporate customers, or other business partners.

B) Payment, delivery, and logistics providers

We may receive information from payment service providers, carriers, warehousing providers, and logistics providers where this is necessary in order to process orders, complete payments, deliver goods, handle returns and refunds, or investigate errors and discrepancies.

C) Organisers and partners at trade fairs, stands, and events

We may receive contact details or other relevant information from organisers or partners involved in trade fairs, stands, and events where you have registered, participated in an activity, requested follow-up, or otherwise consented to or been informed of such sharing.

D) Social media and other digital platforms

Where you interact with us through social media or other digital platforms, we may receive information made available through the relevant platform, such as your name or username, profile picture, the content of messages or comments, and information that you choose to share with us.

Social media platforms and other platforms process personal data in accordance with their own privacy policies and terms.

E) Technology, analytics, and marketing providers

We may receive technical data, analytics data, and information concerning interactions with the website, advertisements, or newsletters from providers of e-commerce services, analytics tools, cookies, marketing services, or other digital services.

Where consent is required for such collection, the data will be processed only where you have provided the necessary consent.

F) Contact persons and representatives

We may receive information from persons acting on your behalf, or from contact persons at corporate customers, dealers, distributors, or other business partners.

This may, for example, be relevant where a representative places an order, identifies you as the recipient of goods, or asks us to contact you in connection with a customer relationship.

G) Public authorities and other parties with a legal basis

In certain circumstances, we may receive personal data from public authorities, courts, the police, supervisory authorities, or other parties where this follows from law, is necessary in order to handle a dispute, prevent fraud, or safeguard our rights and obligations.

9. ARE YOU ALWAYS REQUIRED TO PROVIDE YOUR PERSONAL DATA TO US?

You are not always required to provide us with personal data. Where specific data are necessary in order to enter into or perform a contract, deliver a product, process an order, create a customer account, or comply with a legal obligation, this will be made clear when we request the data.

If you do not wish to provide certain personal data, you may refrain from doing so or object to the processing where this is possible and the processing is based on consent or legitimate interests.

Please note, however, that in some cases we may be unable to provide the product, service, or follow-up you request without the necessary data. This may, for example, apply where we do not receive your name and delivery address in order to dispatch an order, contact details in order to handle a complaint, or the information necessary to create and secure a customer account.

Where you act on behalf of a corporate customer, dealer, distributor, or other business, it may be necessary for you to provide work-related contact details, such as your name, email address, telephone number, and role, in order for us to administer orders, delivery, invoicing, and the business relationship.

We may also request personal data where this is necessary in order to comply with statutory requirements, for example requirements under bookkeeping, accounting, or tax legislation. In such cases, we will, where relevant, inform you whether the data are mandatory and of the possible consequences if they are not provided.

10. HOW LONG DO WE RETAIN YOUR PERSONAL DATA?

We retain your personal data only for as long as is necessary for the purposes for which they were collected and processed, or for as long as we are required to retain them under applicable law. The retention period depends on the type of data, the purpose of the processing, the nature of the customer relationship, and any statutory retention periods.

A) Customer account, customer profile, and newsletters

Where you have a customer account or customer profile with Hund På Havna Brunes, or subscribe to newsletters, we will as a general rule retain relevant personal data for up to five years from the last documented contact or activity in the customer relationship.

This may, for example, include where you:

• complete a purchase or place an order;
• log into your customer account;
• contact us by email, telephone, chat, social media, or in store;
• participate in an event or request follow-up;
• click on a link in a newsletter or other marketing communication, excluding unsubscribe links; or
• respond to an inquiry from us concerning an order, the customer relationship, or other relevant follow-up.

Opening an email or visiting the website without logging in or taking any other active step will not normally, in itself, be regarded as the last documented contact or activity.

If you withdraw your consent to newsletters or other marketing, we will cease such marketing. We may nevertheless retain limited information concerning your objection, such as your email address and the date of the objection, in order to document and respect your choice.

B) Customer service, inquiries, and recordings

Data that you share with us through customer service, email, chat, text message, video chat, social media, or other communication channels will be retained for as long as is necessary in order to respond to and follow up on the inquiry, and as a general rule for up to five years from the last documented contact or activity.

Audio or video recordings of customer communications will as a general rule be retained for 45 days, unless the recording is necessary in order to handle a complaint, claim, security incident, dispute, or other matter requiring a longer retention period. In such cases, the recording will be retained only for as long as is necessary for the relevant purpose.

C) Orders, invoices, and accounting records

Data relating to orders, payments, invoices, returns, and other accounting documentation will be retained for the period required under the Bookkeeping Act, tax legislation, and other relevant rules. This means that certain data may be retained for longer than the data contained in the customer account or customer communications.

D) Corporate customers, dealers, distributors, and other business partners

Personal data concerning contact persons at corporate customers, dealers, distributors, and other business partners will be retained for as long as the contact person has a relevant role in the customer or business relationship with us.

The data will be deleted or anonymised when they are no longer necessary, unless continued retention is necessary in order to comply with legal obligations, handle disputes, or safeguard our rights.

E) Data relating to disputes, claims, and security incidents

Where there is a complaint, claim, dispute, suspicion of fraud, security incident, or potential legal claim, we may retain relevant personal data for longer than the ordinary retention periods. In such cases, the data will be retained for as long as is necessary in order to handle the matter and, where relevant, in accordance with applicable limitation periods.

Where personal data are no longer necessary for the purpose for which they were collected, and there is no statutory obligation or other valid basis for continued retention, the data will be securely deleted or anonymised.

Personal data in paper form will be destroyed by shredding or by another appropriate method. Electronically stored data will be deleted or anonymised using technical methods designed to prevent unauthorised recovery or further use.

11. HOW DO WE PROTECT YOUR PERSONAL DATA?

Hund På Havna Brunes works to protect your personal data against accidental or unlawful destruction, loss, alteration, unauthorised access, disclosure, or other unlawful processing.

We have implemented appropriate technical and organisational security measures adapted to the type of personal data we process, the risks associated with the processing, and our technical solutions.

These measures may include, among other things:

• access controls, so that only persons with a work-related need are granted access to personal data;
• the use of passwords, multi-factor authentication, and other security mechanisms where relevant;
• encryption or secure connections when transferring data, including the use of HTTPS on our website;
• secure storage, backup, and updating of systems;
• logging, monitoring, and measures designed to detect and manage security incidents;
• agreements with data processors and other suppliers governing requirements relating to confidentiality, information security, and data protection; and
• training procedures for staff with access to personal data.

We limit access to personal data to employees, contractors, and suppliers who require such data in order to perform their duties or provide services to us. Persons with access to the data are subject to confidentiality obligations or equivalent contractual obligations.

When you use the website or your customer account, we use secure connections where relevant. We may also reset your password where this is necessary in order to protect your customer account or where we detect or suspect unauthorised access.

If a personal data breach occurs, we will handle the incident in accordance with our internal procedures and applicable data protection law. Where required, we will notify the relevant supervisory authority and inform affected individuals without undue delay.

Although we continuously work to protect your personal data, no transmission or storage of information can be guaranteed to be completely secure. You should therefore also protect your devices and accounts, including by using a strong and unique password, not sharing your login credentials with others, and keeping devices and software up to date.

12. WHERE DO WE TRANSFER AND STORE YOUR PERSONAL DATA?

Hund På Havna Brunes is established in Norway and primarily processes personal data within the EEA. In order to operate our business, provide products and services, administer the online store and customer accounts, process orders, complete payments, deliver goods, and provide customer service, we may use service providers and partners that process personal data on our behalf or for their own purposes.

Personal data may be stored or processed on servers located in Norway, other countries within the EEA, or other countries in which our service providers or partners are established. Where the data are processed will depend, among other things, on which services and suppliers we use.

Where we transfer personal data to countries outside the EEA, we will ensure that the transfer takes place in accordance with applicable data protection law. This means that we transfer personal data only where there is a valid transfer mechanism.

Transfers may, among other things, take place:

• to a country covered by an adequacy decision of the European Commission or a relevant EEA authority;
• on the basis of the European Commission’s Standard Contractual Clauses; or
• on the basis of another valid transfer mechanism under the General Data Protection Regulation, where relevant.

Where personal data are transferred to South Korea, the transfer will take place in accordance with the applicable rules governing transfers of personal data to countries outside the EEA. We will implement appropriate technical, organisational, and contractual measures in order to protect the data.

We limit the transfer of personal data to what is necessary for the relevant purpose and require our data processors and partners to maintain an adequate level of data protection and information security.

If you would like further information about where your personal data are stored, which categories of recipients may process the data, or which safeguards apply to transfers outside the EEA, you may contact us at post@pataljanis.com.

13. WITH WHOM DO WE SHARE YOUR PERSONAL DATA?

We may share personal data with recipients where this is necessary in order to provide products and services, administer customer relationships, operate the business, comply with legal obligations, or safeguard our rights and interests.

We share personal data only where there is a valid legal basis for doing so, and we limit the disclosure to data that are necessary for the relevant purpose.

Certain recipients process personal data on our behalf as data processors. Other recipients, such as payment service providers, banks, carriers, and social media platforms, may process data for their own purposes and may therefore act as independent controllers.

If you would like further information about the categories of recipients with whom we may share personal data, you may contact us at post@pataljanis.com.

A) Service providers processing personal data on our behalf

We use service providers that may process personal data on our behalf. Such providers act as data processors where they process the data solely in accordance with our instructions.

We enter into data processing agreements with relevant providers. These agreements regulate, among other things, how personal data may be processed, requirements relating to information security and confidentiality, and the deletion or return of data when the service ends.

Personal data may be shared with the following categories of service providers where necessary:

• providers of e-commerce services, customer account solutions, IT systems, operational services, and cloud storage;
• providers of customer service, chat, telephone, and video chat solutions;
• payment service providers and providers of invoicing and financial systems;
• carriers, warehousing providers, and logistics providers;
• providers of email, newsletters, marketing, and analytics tools;
• accountants, auditors, lawyers, and other professional advisers; and
• providers of security, backup, and technical support services.

Pataljanis Dogshow Products AS and affiliated companies

Pataljanis Dogshow Products AS and any affiliated companies may assist with, among other things, wholesale administration, sales processes, customer service, IT services, the operation of customer accounts, logistics, and business administration.

Where such companies process personal data solely on our behalf and in accordance with our instructions, they act as data processors and are subject to relevant agreements concerning data protection, confidentiality, and information security.

Where an affiliated company processes personal data for its own purposes, that company will act as an independent controller in respect of that processing. In such cases, the company’s own privacy policy will apply.

Providers of payment, delivery, logistics, and other transaction services

We may share necessary personal data with providers that assist us in processing orders, payments, invoicing, delivery, returns, and refunds.

This may include, among others, payment service providers, banks, suppliers of invoicing and financial systems, carriers, warehousing and logistics providers, and other transaction partners.

The data shared may include, among other things, name, contact details, delivery address, order information, invoice information, payment status, and information necessary for returns, complaints, or refunds.

Some of these parties process personal data solely on our behalf and in accordance with our instructions. Others, such as banks, payment service providers, and carriers, may process personal data for their own purposes and therefore act as independent controllers.

This may, for example, be the case where a payment service provider takes measures to prevent fraud, comply with legal obligations, or process payment transactions. Where a party processes personal data on its own behalf, such processing is governed by that party’s own privacy policy and terms.

Where a supplier assists with the creation or administration of your customer account, that supplier may, among other things, process the data necessary to create the account, link orders to the customer account, or make the account available to you.

Providers of marketing, communications, and analytics services

We may use providers that assist us in sending newsletters, emails, SMS messages, other customer communications, postal mailings, marketing communications, and analytics.

Such providers may process personal data such as name, email address, telephone number, communication preferences, consents, information concerning communications sent, and—where lawful—information concerning responses to communications, such as the opening of emails or the clicking of links.

We may also use providers of analytics and advertising services in order to measure the effectiveness of campaigns and improve our communications. The use of analytics, marketing, and targeting technologies on the website takes place only in accordance with the choices you have made in the cookie settings, where consent is required.

Social media and advertising platforms

We may use social media and advertising platforms in order to communicate with customers, respond to inquiries, publish content, and—where lawful—display advertisements and marketing content.

Where you contact us through social media, interact with our content, or visit our pages, the relevant platform may process personal data concerning you for its own purposes. This may include, among other things, operation of the platform, analytics, security, advertising, and profiling.

Social media and advertising platforms have their own privacy policies and cookie policies. Where such parties process data on their own behalf, that processing is governed by their own rules and not by this Privacy Policy.

Where we use customer list advertising or “lookalike” audiences on social media or advertising platforms, this takes place only where we have the necessary legal basis and in accordance with Section 4(D) of this Privacy Policy.

IT service providers and digital operational services

We use IT service providers and other digital service providers in order to operate, maintain, secure, and develop the website, online store, customer accounts, and other digital services.

Such providers may, among other things, assist with:

1. the operation and maintenance of the website, online store, customer accounts, databases, cloud storage, and other IT systems;
2. the administration of orders and customer data, including making the customer account available, linking orders to the customer account, and handling technical inquiries;
3. customer service and communication solutions, such as email, chat, telephone, video chat, SMS, and other messaging functions;
4. the sending of necessary communications and, where lawful, newsletters and other marketing communications;
5. information security, backup, access control, logging, troubleshooting, and measures designed to prevent unauthorised access, misuse, and security incidents;
6. payment and transaction support, including technical solutions that contribute to the secure processing of orders and payments. Payment service providers and banks may, however, process personal data as independent controllers for their own purposes; and
7. analytics tools, reporting, and technical insights enabling us to understand and improve the website, online store, customer service, and business operations. Where such tools use analytics or marketing cookies, the processing takes place only in accordance with your cookie choices, where consent is required.

Where IT service providers process personal data solely on our behalf and in accordance with our instructions, they act as data processors. We enter into relevant data processing agreements and impose requirements relating to confidentiality, information security, and data protection.

Auditors, accountants, lawyers, and other professional advisers

We may share necessary personal data with auditors, accountants, lawyers, insurers, debt collection agencies, and other professional advisers where this is necessary in order to operate the business properly, comply with legal obligations, or establish, exercise, or defend legal claims.

This may include, among other things, the processing of data in connection with accounting, auditing, bookkeeping, tax and VAT matters, legal advice, insurance matters, debt recovery, complaints, disputes, and other control or documentation purposes.

We may also use providers of analytics and reporting services in order to understand and improve our business, products, services, and communications. Where such providers process personal data on our behalf, they are subject to relevant agreements concerning data protection, confidentiality, and information security. Where the analysis takes place through the use of analytics, marketing, or targeting cookies, the processing takes place only in accordance with your cookie choices, where consent is required.

B) Partners processing personal data for their own purposes

Certain partners may process personal data for their own purposes and may therefore themselves determine the purposes and means of the processing. Such parties act as independent controllers in respect of their processing of personal data.

Where a partner acts as an independent controller, that partner’s own privacy policy and terms will govern the processing of personal data.

Social media and advertising platforms

We use social media and advertising platforms in order to communicate about our business, products, services, events, and offers, and to respond to inquiries from customers and other interested persons.

When you interact with our accounts or pages on social media, for example by following, liking, commenting, sharing, or sending us a message, we may process information that you make available to us. This may include, among other things, your name or username, profile picture, the content of messages and comments, and other information that you choose to share.

We may use statistics and analytics functions made available by social media platforms in order to understand how our accounts and posts are used, for example reach, interactions, and demographic information. Such information is normally received in aggregated form.

For certain analytics functions, including Meta Page Insights, we and the platform provider may act as joint controllers in relation to the initial collection and transmission of data to the platform. The platform provider is normally responsible for the subsequent processing within its own systems.

Social media and advertising platforms also process personal data for their own purposes, including the operation of the platform, analytics, security, profiling, and advertising. Such processing is governed by the relevant platform’s own privacy policy, cookie policy, and terms.

Where we use social media or advertising platforms for targeted advertising, customer list advertising, or “lookalike” audiences, this takes place only where we have the necessary legal basis and in accordance with Sections 4(D) and 16 of this Privacy Policy.

Dealers, online retailers, resellers, and distributors

We cooperate with dealers, online retailers, resellers, and distributors in connection with the sale and distribution of our products in Norway and other Nordic countries.

Such parties may process personal data relating to you for their own purposes, for example where you purchase products directly from them, create a customer account with them, contact their customer service, or receive marketing from them. In such cases, the relevant party will normally act as an independent controller.

Where a dealer, reseller, or distributor processes personal data on its own behalf, such processing is governed by that party’s own privacy policy and terms. Our Privacy Policy does not apply to such processing.

Where a dealer or distributor processes personal data solely on our behalf and in accordance with our instructions, such processing will be governed by the relevant agreement between us and that party.

C) Actual or prospective purchasers in connection with a business transfer

We may share necessary and relevant personal data with actual or prospective purchasers, investors, lenders, advisers, or other involved parties in connection with the sale of a business, merger, demerger, acquisition, joint venture, refinancing, insolvency, dissolution, reorganisation, or other similar business transaction.

Such disclosure will take place only where necessary and in accordance with applicable law. We will limit the scope of the data shared and implement appropriate measures in order to safeguard confidentiality and privacy.

D) Authorities, courts, and other parties where disclosure is required by law or necessary in order to safeguard rights

We may disclose personal data to the police, supervisory authorities, public bodies, courts, lawyers, debt collection agencies, or other relevant third parties where this:

1. is required by law, regulation, a valid order, or another legal obligation;
2. is necessary in order to establish, exercise, or defend legal claims;
3. is necessary in order to prevent or detect fraud, misuse, or security incidents; or
4. is necessary in order to protect our rights, your rights, or the rights, safety, or interests of others.

We will limit such disclosure to the data necessary for the relevant purpose and process the data on the basis of the applicable legal basis.

E) Other recipients

In certain circumstances, we may share personal data with other recipients where:

• you have consented to the disclosure;
• the disclosure is necessary in order to perform a contract with you or to take steps at your request prior to entering into a contract;
• the disclosure is necessary in order to comply with a legal obligation;
• the disclosure is necessary in order to safeguard our legitimate interests or those of a third party, provided that such interests are not overridden by your interests or fundamental rights and freedoms; or
• the disclosure is necessary in order to protect vital interests, to the extent relevant.

Top of Form

Bottom of Form

14. WHAT RIGHTS DO YOU HAVE IN RELATION TO YOUR PERSONAL DATA?

You have rights in relation to our processing of your personal data. These rights arise under the General Data Protection Regulation (GDPR) and other applicable data protection legislation.

You may exercise your rights yourself or through a representative authorised to act on your behalf. Hund På Havna Brunes will not discriminate against you for exercising your rights.

If you wish to exercise any of your rights, have questions about our processing of personal data, or wish to lodge a complaint, you may contact us at post@pataljanis.com.

A) Right of access, rectification, and erasure

You have the right to request confirmation as to whether we process personal data concerning you. Where we do process personal data concerning you, you may request access to the data and receive a copy of them.

The right of access includes, among other things, the right to receive information about:

• the purposes of the processing;
• the categories of personal data we process;
• the recipients or categories of recipients with whom the data are shared;
• how long the data are expected to be stored, or the criteria used to determine the retention period;
• the source of the data, where they have not been collected directly from you;
• any transfer of data to countries outside the EEA and the safeguards applicable to such transfer; and
• any automated processing, including profiling, where relevant.

You have the right to request that inaccurate or incomplete personal data concerning you be corrected or completed.

You may also have the right to request that your personal data be erased. The right to erasure applies, among other things, where the data are no longer necessary for the purpose for which they were collected, where you withdraw your consent and there is no other legal basis for the processing, or where the data have been processed unlawfully.

The right to erasure does not apply where we are required to retain the data in order to comply with a legal obligation, for example under bookkeeping or tax legislation, or where the data are necessary in order to establish, exercise, or defend legal claims.

You may update certain information through your customer account. You may also contact us at post@pataljanis.com if you wish to request access to, rectification of, or erasure of personal data.

B) Right to withdraw consent

Where the processing of your personal data is based on consent, you may withdraw that consent at any time.

If you no longer wish to receive electronic marketing, you may, among other things, use the unsubscribe link in our emails, follow the instructions in SMS messages, change the settings in your customer account where available, or contact us at post@pataljanis.com.

You may also withdraw your consent to analytics, marketing, or targeting cookies through the “Cookie Settings” on our website.

The withdrawal of consent does not affect the lawfulness of processing already carried out before the consent was withdrawn.

C) Right to data portability

Where the processing is based on consent or on the performance of a contract, and the processing is carried out by automated means, you may have the right to receive the personal data that you have provided to us in a structured, commonly used, and machine-readable format.

Where technically feasible, you may also request that we transfer the data directly to another controller.

D) Right to restriction of processing

You may have the right to require that we restrict the processing of your personal data where:

1. you contest the accuracy of the personal data, while we investigate or verify the data;
2. the processing is unlawful, but you do not wish the data to be erased;
3. we no longer need the data for the purpose of the processing, but you require them in order to establish, exercise, or defend a legal claim; or
4. you have objected to processing based on legitimate interests, while we assess whether our legitimate interests override your interests, rights, and freedoms.

Where processing has been restricted, we will as a general rule only store the data. Further processing may take place only with your consent, in order to establish, exercise, or defend legal claims, in order to protect the rights of another natural or legal person, or for reasons of important public interest.

E) Right to object to processing

Where we process personal data on the basis of legitimate interests, you may have the right to object to such processing.

If you object, we will cease the processing for the relevant purpose unless we can demonstrate compelling legitimate grounds for the processing which override your interests, rights, and freedoms. We may also continue the processing where it is necessary in order to establish, exercise, or defend legal claims.

Where your personal data are processed for direct marketing purposes, you have the right to object at any time. This also applies to profiling to the extent that such profiling is related to direct marketing.

If you wish to opt out of electronic marketing, you may use the unsubscribe link in our emails, follow the instructions in SMS messages, change the settings in your customer account where available, or contact us at post@pataljanis.com. We will then cease such marketing.

F) Processing of data relating to deceased persons

As a general rule, the General Data Protection Regulation does not apply to personal data relating to deceased persons. Certain other rules may nevertheless be relevant, for example rules concerning confidentiality, succession law, or the handling of accounts and customer relationships following death.

If you contact us on behalf of a deceased person, we may request documentation showing that you are entitled to represent the estate or otherwise have a legal basis for your request. This may, for example, include a probate certificate, power of attorney, or other relevant documentation.

G) Right to lodge a complaint

If you consider that our processing of your personal data is in breach of applicable data protection legislation, you have the right to lodge a complaint with the relevant data protection authority.

For customers in Norway, the relevant supervisory authority is:

Datatilsynet
Postboks 458 Sentrum
0105 Oslo
Norway
Website: www.datatilsynet.no

If you are resident in another EEA country, you may also lodge a complaint with the data protection authority in the country where you are resident, work, or where you believe the alleged infringement has taken place.

You may also have the right to bring matters or disputes relating to the processing of personal data before the courts.

H) How to exercise your rights

If you wish to exercise any of your rights, require further information about your rights, or have questions or complaints concerning our processing of personal data, you may contact us at post@pataljanis.com.

In order to protect your privacy and ensure that personal data are not disclosed to unauthorised persons, we may ask you to provide information necessary to verify your identity before we process your request.

You may also appoint a representative to submit a request on your behalf. In such cases, we may ask for written authorisation from you and, where necessary, confirmation of your identity.

We will handle requests without undue delay and, as a general rule, within one month of receipt of the request. If the request is particularly complex or we receive a large number of requests, this period may be extended by up to two further months. If the period is extended, we will inform you of this and of the reasons for the extension within one month of receiving the request.

Exercising your rights is free of charge. If a request is manifestly unfounded or excessive, in particular because it is repetitive, we may, following a specific assessment, charge a reasonable fee or refuse to act on the request, to the extent permitted under applicable data protection legislation.

15. CAN THIS PRIVACY POLICY BE AMENDED?

We may update this Privacy Policy from time to time, for example as a result of changes to our business, our services, technical solutions, suppliers, or applicable law.

The current version of the Privacy Policy will at all times be available on our website. We encourage you to review the policy regularly.

In the event of material changes, we will, where relevant, notify you in an appropriate manner, for example by email, through your customer account, or by means of a clear notice on the website.

If we intend to process your personal data for a new purpose that is incompatible with the purpose for which the data were originally collected, we will inform you of this before the new processing begins. Where required under applicable law, we will also obtain your consent.

Last updated: 01.10.2026

Privacy and Cookies

16. DO WE USE COOKIES OR OTHER TRACKING TECHNOLOGIES?

We use cookies and similar technologies on our website. Such technologies may be necessary in order for the website, online store, and customer account to function and may—where you have given consent, where required—be used for analytics, content personalisation, and marketing.

We may use cookies and similar technologies in order to:

• ensure the basic functionality of the website, online store, and customer account;
• remember settings and preferences;
• analyse the use of the website and improve functionality, content, and user experience;
• measure the effectiveness of advertising and marketing campaigns; and
• display more relevant advertisements on our own and other websites, including through social media and advertising platforms, where you have consented to this.

Where you consent to analytics, marketing, or targeting cookies, we may share limited information concerning your use of the website with providers of analytics, advertising, and social media services. Such providers may process the information in accordance with their own privacy policies and terms.

We use only cookies and similar technologies that are not strictly necessary where you have given valid consent. You may change or withdraw your consent at any time through the “Cookie Settings” on the website.

Further information concerning the cookies and providers we use, their purposes, and the applicable retention periods is available in the “Cookie Settings”.

A) What is a cookie?

A cookie is a small data file, usually a text file, that is stored in your browser or on your device when you visit a website. Cookies may, among other things, be used to remember settings, language preferences, login status, shopping basket contents, or other choices you have made on the website.

Cookies set by Hund På Havna Brunes through our website are referred to as first-party cookies.

We may also use third-party cookies, which are set by domains other than the website you are visiting. Such cookies may, among other things, be used by providers of analytics, advertising, or social media services.

Cookies and similar technologies may, in certain circumstances, involve the processing of personal data, for example IP address, browser identifier, device identifier, information concerning activity on the website, or other technical information. Such processing takes place in accordance with applicable law and the choices you have made in the cookie settings.

B) Why do we use cookies?

We use cookies and similar tracking technologies for different purposes, depending on the category to which the relevant technology belongs.

Cookies may, among other things, be used in order to:

• ensure that the website, online store, shopping basket, and customer account function properly;
• remember language preferences, login status, shopping basket contents, and other preferences;
• make it easier to navigate between pages on the website;
• improve the functionality, content, and user experience of the website;
• analyse traffic and use of the website;
• measure the effectiveness of advertising and marketing campaigns; and
• display more relevant online advertisements, where you have consented to this.

Cookies that are strictly necessary for the basic functions of the website are used without consent where permitted under applicable law. Analytics, functionality, marketing, and targeting cookies are used only where you have provided the necessary consent through the “Cookie Settings”.

C) What types of cookies do we use?

Cookies may have different durations and may be set either by us or by third parties.

1. Session cookies

Session cookies are stored only for the duration of the browser session. They are normally deleted when you close your browser and are used, among other things, to ensure that the website functions properly while you navigate, log in, or use the shopping basket.

2. Persistent cookies

Persistent cookies remain stored on your device after the browser session has ended. They are used, among other things, to remember your preferences on subsequent visits, for example language settings, consent choices, or customer account preferences.

The retention period for each individual cookie is set out in the “Cookie Settings”.

3. First-party cookies

First-party cookies are set by Hund På Havna Brunes through our website. They are used, among other things, to ensure basic functionality, store preferences, and administer services such as the online store, shopping basket, and customer account.

4. Third-party cookies

Third-party cookies are set by providers other than Hund På Havna Brunes. Such cookies may, for example, be used by providers of analytics, advertising, payment, chat, or social media services.

Third-party cookies may be used to analyse traffic, measure the effectiveness of campaigns, provide social media functions, or display relevant advertisements. Where consent is required, such cookies are set only where you have consented through the “Cookie Settings”.

D) What categories of cookies are used on our website?

The cookies and similar tracking technologies we use may serve different purposes and may be divided into the categories set out below.

Strictly necessary cookies

Strictly necessary cookies are required in order for the website, online store, shopping basket, customer account, and privacy settings to function.

Such cookies are usually set in response to actions taken by you, for example when you set your cookie preferences, log into your customer account, place items in the shopping basket, or complete a form.

These cookies cannot be disabled through our cookie settings. You may configure your browser to block or alert you about such cookies, but this may result in parts of the website, online store, or customer account not functioning properly.

Strictly necessary cookies are used only where necessary and permitted under applicable law. They do not normally store information that directly identifies you, but may process technical identifiers necessary to maintain your session, security, and the functionality of the website.

Performance and analytics cookies

Performance and analytics cookies help us understand how the website and online store are used. They may, among other things, be used to:

• measure the number of visits, users, and sessions;
• identify which pages, products, and functions are used most or least;
• understand how visitors navigate the website;
• identify traffic sources, for example whether you arrive at the website through a search engine, an advertisement, a newsletter, or a partner;
• measure the effectiveness of marketing and communication campaigns;
• detect technical errors and improve the functionality, content, and user experience of the website; and
• test different versions of content or functionality on the website, where relevant.

Analytics data are normally used in aggregated form for reporting purposes. Certain analytics tools may nevertheless process technical identifiers, such as IP address, browser identifier, or device identifier, and may therefore involve the processing of personal data.

Performance and analytics cookies

Performance and analytics cookies that are not strictly necessary are activated only where you have provided consent through the “Cookie Settings”.

If you choose not to consent to analytics cookies, we will not use such cookies to analyse your activity on the website. This may limit our ability to understand how the website is used and to improve it.

Functional cookies

Functional cookies enable the website to remember choices and preferences you have made so that we can provide enhanced functionality and a more personalised user experience.

Such cookies may, among other things, be used to remember language preferences, display settings, customer account settings, or other choices you have made on the website.

Functional cookies may be set either by us or by third-party providers delivering services or functions that we have integrated into the website.

If you do not consent to functional cookies, certain functions or services on the website may operate less effectively or may not be available.

Marketing, profiling, and targeting cookies

Marketing, profiling, and targeting cookies may be set by us or our advertising partners through the website.

Such cookies may be used to collect information about how you use the website, which pages or products you view, and what interests you may have. The information may be used to display more relevant advertisements and marketing content on our website, on other websites, on social media, or on advertising platforms.

These cookies may also be used to measure the effectiveness of advertising and campaigns, for example by recording whether an advertisement has been displayed, clicked on, or has led to a visit to or purchase on the website.

Information collected through such technologies may be used to create audiences or groups of users with similar interests. Where we use customer list advertising or “lookalike” audiences, this takes place only where we have the necessary legal basis, as described in Section 4(D).

Such cookies may use unique browser or device identifiers. Although they do not normally store names or contact details directly, the information may nevertheless constitute personal data.

Marketing, profiling, and targeting cookies are activated only where you have provided consent through the “Cookie Settings”.

If you do not consent, you may still see advertisements, but the advertisements will normally be less tailored to your interests.

Social media cookies

Social media cookies may be set by social media services integrated into our website. They may, among other things, enable you to share content from the website with friends and your network, or to use social media functions directly on the website.

Such cookies may enable the provider of the relevant social media service to recognise your browser or device across different websites and to create a profile based on your activities and interests. This may affect the advertisements, content, and messages you see on other websites or platforms.

Social media cookies are activated only where you have consented through the “Cookie Settings”.

If you do not consent to these cookies, certain social media sharing or integration functions may be limited or unavailable.

E) How can you adjust your cookie settings?

You may at any time accept, reject, or change your consent to non-essential cookies through the “Cookie Settings” on our website.

You can access the settings by clicking the “Cookie Settings” button or link available on the website. There you can read more about the different categories of cookies, their purposes, and the providers used.

You may choose not to allow certain categories of cookies. Please note that blocking or withdrawing consent to certain types of cookies may affect how the website functions and may limit certain functions or services.

If you use multiple browsers or multiple devices, you must set your preferences in each individual browser and on each individual device. Cookie settings are normally stored in the browser or on the relevant device.

You may also manage or delete cookies through your browser settings. If you block all cookies in your browser, certain parts of the website, online store, shopping basket, or customer account may function less effectively or may not be available.

For further information about third-party cookies and how you may manage them, please refer to the relevant third party’s privacy policy and policies.

F) Do we share information collected through cookies?

Where you consent to analytics, marketing, targeting, or social media cookies, information concerning your use of the website may be shared with relevant third-party providers.

This may include, among others, providers of analytics tools, advertising services, social media platforms, IT operational services, and website, e-commerce, or hosting services.

The information may include technical identifiers, IP address, browser or device information, information concerning visits to the website, pages or products viewed, and information concerning interaction with advertisements or other digital content.

We share such information only where this is necessary for the relevant purpose and in accordance with the choices you have made in the “Cookie Settings”. Where consent is required, such sharing takes place only after you have provided valid consent.

Certain third-party providers may process data for their own purposes. Such processing is governed by the relevant provider’s own privacy policy and cookie policy.

G) Choices relating to the sharing of personal data through cookies

If you choose to activate third-party cookies through the “Cookie Settings”, analytics, advertising, and social media partners may collect personal data by automated means on our website.

This may be used to analyse the use of the website, measure the effectiveness of advertising, and show you content or advertisements that may be relevant to you.

It is for you to decide whether you wish to consent to such use of cookies. You may at any time refuse or withdraw your consent through the “Cookie Settings”.

If you do not consent to third-party cookies, you may still see advertisements online. However, those advertisements will normally be less tailored to you, because they will not be based on information concerning your activities on our website.

Even if you do not consent to third-party cookies, we may still share necessary information with our service providers, for example providers of e-commerce, hosting, payment, security, and technical operations services. Such sharing does not take place for targeted advertising purposes, but only where necessary in order to provide, secure, or operate our services.

H) How can you contact us?

If you have any questions about our use of cookies, our privacy practices, or how we process your personal data, you may contact us at:

Email: post@pataljanis.com

List of cookies

An updated and detailed overview of the cookies and other tracking technologies we use, including the name of the provider, purpose, category, and retention period, is available in the “Cookie Settings” on our website.

The list is updated whenever we add, change, or remove cookies or other technologies.

Strictly necessary cookies

These cookies are necessary in order for the website, online store, shopping basket, customer account, and privacy settings to function. They cannot be disabled through our cookie settings.

They are usually set in response to actions taken by you, for example when you set privacy preferences, log into your customer account, place items in the shopping basket, or complete forms.

You may configure your browser to block or alert you about such cookies. If you do so, certain parts of the website, online store, or customer account may function less effectively or may not be available.

Strictly necessary cookies do not normally store information that directly identifies you, but may process technical identifiers necessary to maintain your session, security, and the functionality of the website.

Chat and video chat cookies

These cookies are used to enable chat and video chat functions on the website. They may make it possible to maintain your chat session, connect you with our staff, and allow you to communicate with us by chat or video chat.

Where you use chat or video chat, we may process information concerning your session, the content of the communication, technical information, and information necessary in order to follow up on your inquiry. If the chat or video chat solution involves real-time monitoring of your navigation on the website, or the storage, recording, or analysis of communications, you will be clearly informed of this before such processing begins.

Chat and video chat functions may depend on functional or other non-strictly necessary cookies. Where consent is required, such cookies will be activated only after you have consented through the “Cookie Settings”.

If you do not accept cookies necessary for the chat or video chat function, the function may be limited or unavailable. You may still contact us through other communication channels, for example by email or telephone.

Performance and analytics cookies

Performance and analytics cookies help us understand how the website and online store are used. They may, among other things, be used to measure the number of visits, traffic sources, which pages or products are used most or least, and how visitors navigate the website.

The information is normally used in aggregated form for reporting purposes. Certain analytics tools may nevertheless process technical identifiers, such as IP address, browser identifier, or device identifier. Such information may therefore constitute personal data.

Performance and analytics cookies that are not strictly necessary are activated only where you have provided consent through the “Cookie Settings”.

If you do not consent to these cookies, we will not use them to analyse your activity on the website. This may limit our ability to understand how the website is used and to improve functionality, content, and user experience.

Functional cookies

Functional cookies enable the website to remember choices and preferences you have made so that we can provide enhanced functionality and a more personalised user experience.

Such cookies may, among other things, be used to remember language preferences, display settings, customer account settings, or other choices you have made on the website.

Functional cookies may be set either by us or by third-party providers delivering services or functions that we have integrated into the website.

If you do not consent to functional cookies, certain functions or services on the website may operate less effectively or may not be available.

Marketing, profiling, and targeting cookies

Marketing, profiling, and targeting cookies may be set by us or our advertising partners through the website.

Such cookies may be used to collect information about how you use the website, which pages or products you view, and what interests you may have. The information may be used to display more relevant advertisements and marketing content on our website, on other websites, on social media, or on advertising platforms.

These cookies may also be used to measure the effectiveness of advertising and campaigns, for example by recording whether an advertisement has been displayed, clicked on, or has resulted in a visit to or purchase on the website.

Such cookies may use unique browser or device identifiers. Although they do not normally store names or contact details directly, the information may nevertheless constitute personal data.

Marketing, profiling, and targeting cookies are activated only where you have provided consent through the “Cookie Settings”.

If you do not consent, you may still see advertisements, but those advertisements will normally be less tailored to your interests.

Social media cookies

Social media cookies may be set by social media services integrated into our website. They may, among other things, enable you to share content from the website with friends and your network, or to use social media functions directly on the website.

Such cookies may enable the provider of the relevant social media service to recognise your browser or device across different websites and to create a profile based on your activities and interests. This may affect the advertisements, content, and messages you see on other websites or platforms.

Social media cookies are activated only where you have consented through the “Cookie Settings”.

If you do not consent to these cookies, certain social media sharing or integration functions may be limited or unavailable.

HOW CAN YOU CONTACT US?

If you have any questions about our privacy practices, our use of cookies, or how we process your personal data, you may contact us at:

Email: post@pataljanis.com