Privacy Policy

1. Introduction and company information

This privacy policy explains how Fjordhage Garteservice AS collects, uses, stores, shares, and protects personal data when we provide gardening and related services, communicate with customers and suppliers, operate our website and other digital channels, and otherwise conduct our business.

Controller: Fjordhage Garteservice AS
Address: Industriveien 12, 1337 Sandvika, Norway
Email: [email protected]
Phone: +47 67 54 29 18

We process personal data in accordance with applicable privacy laws, including the General Data Protection Regulation (GDPR) and relevant Norwegian data protection rules.

2. Data collection and processing

We may collect and process the following categories of personal data:

• Contact information: name, address, email address, telephone number, and other contact details.
• Customer and service information: information about requested or delivered gardening services, property details relevant to the assignment, preferences, service history, and correspondence.
• Billing and payment information: invoice details, payment status, and transaction-related information.
• Communication data: inquiries, complaints, feedback, and messages sent to us by phone, email, contact forms, or other channels.
• Technical data: IP address, browser type, device information, log data, and usage data collected through our website or digital services.
• Supplier and business partner data: contact and contractual information relating to suppliers, subcontractors, and other business contacts.

We generally collect personal data directly from you, but we may also receive data from third parties such as business partners, public sources, or service providers when necessary for our operations.

3. Purpose of data processing

We process personal data for the following purposes:

• to provide, manage, and deliver gardening and related services;
• to respond to inquiries and communicate with customers and business contacts;
• to prepare offers, agreements, invoices, and payment follow-up;
• to maintain customer relationships and service records;
• to plan and carry out work at customer properties;
• to comply with legal obligations, including accounting and tax requirements;
• to improve our services, website, and customer experience;
• to prevent misuse, fraud, and unauthorized access;
• to manage supplier and partner relationships;
• to handle disputes, claims, and legal matters.

4. Legal basis for processing

We process personal data only when we have a valid legal basis. Depending on the context, our processing may be based on:

• Performance of a contract: when processing is necessary to enter into or perform a contract with you.
• Legal obligation: when we must process data to comply with accounting, tax, record-keeping, or other legal requirements.
• Legitimate interests: when processing is necessary for our legitimate business interests, such as service administration, customer communication, security, and business development, provided that your interests and fundamental rights do not override those interests.
• Consent: when we rely on your consent, for example for certain marketing communications or optional cookies where required by law.

5. Data sharing and third parties

We may share personal data with third parties only when necessary and appropriate for the purposes described in this policy. Such third parties may include:

• IT and hosting providers: for website hosting, email, cloud storage, and system maintenance.
• Accounting, auditing, and payment service providers: for invoicing, bookkeeping, and payment processing.
• Subcontractors and service partners: where needed to perform gardening or related services.
• Professional advisers: such as lawyers, insurers, or consultants.
• Public authorities: where required by law or lawful request.

We require third parties that process personal data on our behalf to protect the data and use it only according to our instructions and applicable law.

6. Data transfer to third countries

In some cases, personal data may be transferred to or accessed from countries outside the European Economic Area (EEA). If such transfers occur, we will ensure that appropriate safeguards are in place, such as:

• an adequacy decision by the European Commission;
• Standard Contractual Clauses or other approved transfer mechanisms;
• additional technical and organizational measures where necessary.

We take reasonable steps to ensure that any international transfer is carried out in compliance with applicable data protection requirements.

7. Storage duration

We store personal data only for as long as necessary for the purposes for which it was collected, or as required by law. The retention period depends on the type of data and the purpose of processing.

• Customer and contract data: retained for the duration of the customer relationship and for a reasonable period thereafter.
• Accounting and tax records: retained for the period required by applicable law.
• Communication records: retained as long as needed to handle the inquiry or related matter.
• Consent-based data: retained until consent is withdrawn or the data is no longer needed.

When personal data is no longer needed, we will delete, anonymize, or securely archive it in accordance with applicable requirements.

8. User rights

Subject to applicable law, you have the following rights regarding your personal data:

• Right of access: you may request confirmation of whether we process your personal data and obtain a copy of that data.
• Right to rectification: you may request correction of inaccurate or incomplete personal data.
• Right to erasure: you may request deletion of personal data in certain circumstances.
• Right to restriction: you may request that we limit the processing of your personal data in certain situations.
• Right to data portability: you may request to receive certain data in a structured, commonly used, machine-readable format and, where technically feasible, have it transferred to another controller.
• Right to object: you may object to processing based on legitimate interests and to direct marketing at any time.

To exercise your rights, please contact us using the details provided below. We may need to verify your identity before responding to your request.

9. Withdrawal of consent

Where we process personal data based on your consent, you have the right to withdraw that consent at any time. Withdrawal of consent does not affect the lawfulness of processing carried out before the withdrawal.

If you withdraw consent, we will stop the relevant processing unless we have another lawful basis for continuing it.

10. Right to complain

If you believe that our processing of your personal data is not in accordance with applicable law, you have the right to lodge a complaint with the competent data protection authority.

In Norway, this is the Norwegian Data Protection Authority (Datatilsynet). We encourage you to contact us first so that we can try to resolve your concern directly.

11. Data security

We take appropriate technical and organizational measures to protect personal data against unauthorized access, loss, misuse, alteration, disclosure, or destruction. These measures may include access controls, secure storage, encryption where appropriate, staff confidentiality obligations, and regular review of our security practices.

Although we work to protect personal data, no system can be guaranteed to be completely secure. We therefore encourage you to contact us promptly if you suspect any misuse of your personal data.

12. Contact information

If you have questions about this privacy policy or our processing of personal data, or if you wish to exercise your rights, please contact us:

Fjordhage Garteservice AS
Industriveien 12, 1337 Sandvika, Norway
Email: [email protected]
Phone: +47 67 54 29 18

13. Changes to privacy policy

We may update this privacy policy from time to time to reflect changes in our processing activities, legal requirements, or business operations. The updated version will be published when it takes effect.

We encourage you to review this privacy policy periodically to stay informed about how we process personal data.