Privacy policy.

Last Update: 3 December 2024

Previous versions: none

Who we are

The data controller for waivern..com and all its products and services is Gdpragmatic AS, a company registered in Norway. 

waivern.com and Gdpragmatic see it as our absolute obligation to protect the personal data of our users and subscribers.

What data we collect

We use cookies to store data on your device and to collect personal data from our users. We also (using cookies and other means) collect data from our users, including

  • behavioural data as they navigate and click around our website and our online services

  • feedback users give us about our services

  • registrations for newsletter and other email alerts we send

  • registrations of interest from potential clients or potential employees

  • maintain our website, invoice customers, deliver our consultancy services and meet our legal obligations to our employees and contractors.

What we use your data for and our legal basis for that use

  • We use your invoice and payment information to inform you of bills owed to us and to record payment. The legal basis is contractual obligation.

  • We use your behavioural data and your feedback to improve our products.  The legal basis is consent, gathered via our cookie information bar.

  • If your request to us includes your contact information and your consent to contact you with that information, we will use it to interact with you on the service issues or other issues you raise. The legal basis is consent.

  • We also use behavioural data and logs to monitor for security breaches and abuse of our product terms and conditions. The legal basis is legitimate interest.

  • We use your registrations for email newsletters and alerts to keep you informed of developments in our services and products. The legal basis is consent.

How long do we keep your data?

  • Invoices, financial and payment information: as long as legally required by accounting law within Norway, currently 5 years

  • Behavioural and user feedback data: one year

  • Content Creator registrations of interest: 30 days

  • Newsletter and email registrations: 2 years 

Third party vendors and data processors we use to deliver our services

These include

  • Squarespace

  • GoDaddy hosting

  • Google ReCaptcha

These suppliers will change from time to time and we will make best efforts to update this privacy policy as quickly as possibly to reflect those changes.

 

Your rights and how to access them

  • You have the right to request that your personal data be deleted.

  • You have the right to request a copy of all personal data we hold about you.

  • You have the right to object to processing we execute on your data.

    • In many cases, processing can be blocked by users simply using the controls in our cookie bar. This will block all collection of data not considered strictly necessary for the service to operate, including behavioural data for product improvement purposes.

To exercise your rights, contact us via the contact form above and state the nature of your request in the “message” section. We will respond within 30 days. If you are not happy with our response, you can raise a complaint to the Norwegian Data Protection Authority . You can find a link to their website here: Datatilsynet.