Privacy Policy

1. Data Controller

Gransvilla is the data controller for personal data collected through this website. Please contact us at the email address provided on the website if you have any questions.

2. Personal Information We Collect

• Newsletter: Email address, stored with Mailjet (our newsletter provider), based on your explicit consent.
  
• Online Store: Order data is processed by Shopify. We do not store payment information on our own servers.
  
• Visitor Statistics: With your consent, we use Google Analytics with anonymized IP addresses to understand visitor patterns.
  
• Fonts: We load fonts from Adobe Typekit (use.typekit.net). Adobe may collect basic usage data.

3. Legal Basis

• Consent (GDPR Art. 6(1)(a) for newsletters, analytics, and marketing cookies.)
• Eligible interest (GDPR Art. 6(1)(f) for necessary cookies that ensure the website's functionality.)
• Agreement (GDPR Art. 6(1)(b) for processing related to purchases in the online store.)

4. Sharing of Information

We share personal information with the following third parties, solely for the purpose of providing our services:

• Shopify (online store and payment)
• Mailjet (newsletter distribution)
• Google (visitor statistics, with consent)
• Adobe (fonts)
• Sanity (content management, no personal data)

5. Storage and Deletion

• Newsletter: Your email address will be stored until you unsubscribe.
• Order Data: Stored by Shopify in accordance with their guidelines and Norwegian accounting law.
• Cookies: See the table below for the duration of each cookie.

6. Your Rights

You have the right to access, correct, delete, restrict, and transfer your data, as well as the right to withdraw your consent. Contact us at janne@gransvilla.no to exercise your rights.

If you believe we are processing personal information in violation of the regulations, you may file a complaint with The Data Protection Authority.

7. Changes

We may update this statement. The date of the last update is shown at the top of the page.