1. Introduction
Quezriondraxia ("we," "our," or "us") is committed to protecting your privacy. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you visit our website quezriondraxia.world (the "Site") and purchase our products.
This policy complies with the General Data Protection Regulation (GDPR) (EU) 2016/679, the Norwegian Personal Data Act (Personopplysningsloven of 2018), Chapter 2 of the Norwegian Electronic Communications Act (Ekomloven) on privacy in electronic communications where relevant to cookies and similar technology, and other applicable data protection laws in Norway and the EEA.
2. Data Controller
The data controller responsible for your personal data is:
Quezriondraxia
Elgtråkket 9, 2676 Heidal, Norway
Email: connect@quezriondraxia.world
Under Norwegian transparency rules for traders, we provide the identification details above. If you require our organization number (organisasjonsnummer) from the Brønnøysund Register Centre, you may request it using the contact email above.
3. Information We Collect
3.1 Personal Data You Provide
We collect information you voluntarily provide when you:
- Place an order (name, email address, phone number, shipping address, payment information)
- Contact us through our website forms
- Subscribe to our newsletter
- Create an account
3.2 Automatically Collected Data
When you visit our Site, we may automatically collect certain information:
- IP address and device identifiers
- Browser type and version
- Operating system
- Pages visited and time spent on pages
- Referring website addresses
- Geographic location (country/city level)
4. Legal Basis for Processing
We process your personal data based on the following legal grounds:
| Purpose | Legal Basis |
|---|---|
| Order processing and delivery | Contract performance (Art. 6(1)(b) GDPR) |
| Customer support | Contract performance / Legitimate interest |
| Marketing communications | Consent (Art. 6(1)(a) GDPR) |
| Analytics and website improvement (where implemented) | Consent when using non-essential cookies or similar tracking (Art. 6(1)(a) GDPR); otherwise legitimate interest only for strictly necessary, aggregated server logs where applicable (Art. 6(1)(f) GDPR) |
| Legal compliance | Legal obligation (Art. 6(1)(c) GDPR) |
5. How We Use Your Information
We use your personal data for the following purposes:
- Processing and fulfilling your orders
- Communicating with you about orders, products, and services
- Providing customer support
- Sending marketing communications (with your consent)
- Improving our website and services
- Analyzing usage patterns and trends
- Preventing fraud and ensuring security
- Complying with legal obligations
6. Data Sharing and Disclosure
We may share your personal data with:
- Service Providers: Third parties who perform services on our behalf (payment processors, shipping companies, email service providers)
- Legal Requirements: When required by law, court order, or governmental authority
- Business Transfers: In connection with a merger, acquisition, or sale of assets
We do not sell your personal data to third parties.
7. International Data Transfers
Your personal data may be transferred to and processed in countries outside the European Economic Area (EEA). When we transfer data outside the EEA, we ensure appropriate safeguards are in place, including:
- Adequacy decisions by the European Commission
- Standard Contractual Clauses (SCCs)
- Other legally recognized transfer mechanisms
8. Data Retention
We retain your personal data only for as long as necessary to fulfill the purposes for which it was collected:
- Order data: 5 years after the last transaction (for tax and accounting requirements)
- Marketing data: Until you withdraw consent or 3 years of inactivity
- Website analytics: 26 months
- Customer support records: 3 years after resolution
9. Your Rights
Under GDPR and the Norwegian Personal Data Act, you have the following rights regarding your personal data:
- Right of Access: Request a copy of your personal data
- Right to Rectification: Request correction of inaccurate data
- Right to Erasure: Request deletion of your data ("right to be forgotten")
- Right to Restrict Processing: Request limitation of processing
- Right to Data Portability: Receive your data in a structured, machine-readable format
- Right to Object: Object to processing based on legitimate interests or for direct marketing (including profiling related to direct marketing under Norwegian and EU rules)
- Right to Withdraw Consent: Withdraw consent at any time where processing is based on consent
Where processing is based on consent, withdrawal does not affect the lawfulness of processing before withdrawal. You may also lodge a complaint with Datatilsynet (see below).
Automated decision-making: We do not use automated decision-making or profiling that produces legal or similarly significant effects solely by automated means within the meaning of Article 22 GDPR.
To exercise any of these rights, please contact us at connect@quezriondraxia.world. We will respond to your request without undue delay and in principle within one month (this may be extended by two further months in complex cases, as permitted by law).
10. Data Security
We implement appropriate technical and organizational measures to protect your personal data, including:
- SSL/TLS encryption for data transmission
- Secure server infrastructure
- Access controls and authentication
- Regular security assessments
- Employee training on data protection
11. Cookies
Our website uses cookies and similar technologies. For detailed information about the cookies we use and how to manage them, please see our Cookie Policy.
12. Children's Privacy
Our website and products are not intended for children under 16 years of age. We do not knowingly collect personal data from children. If you believe we have collected data from a child, please contact us immediately.
13. Complaints
If you are not satisfied with how we handle your personal data, you have the right to lodge a complaint with a supervisory authority. In Norway, this is:
Datatilsynet (Norwegian Data Protection Authority)
Postboks 458 Sentrum, 0105 Oslo, Norway
Website: https://www.datatilsynet.no
14. Changes to This Policy
We may update this Privacy Policy from time to time. We will notify you of any material changes by posting the new policy on this page and updating the "Last updated" date. We encourage you to review this policy periodically.
15. Contact Us
If you have any questions about this Privacy Policy or our data practices, please contact us:
Quezriondraxia
Elgtråkket 9, 2676 Heidal, Norway
Email: connect@quezriondraxia.world