Privacy statement
Astra Studuio AS is responsible for the processing of personal data as described in this privacy policy. In this privacy policy, we explain what kind of personal data we store and how we process it. This privacy policy applies to: www.astrastudio.no
Personal data we collect and process
We process the following categories of personal data:
- Basic information: name, date of birth
- Contact information: address, telephone number, email address
- Account and profile information: Settings, preferences,
- Payment information: Transaction information, means of payment
- Customer history and customer engagement: order and delivery information, shopping cart movements, discount codes, loyalty program information,
- Customer history and customer engagement: active products and agreements as well as products and services you have had in the past, how much and how often they are used, status of products/services,
- Customer activity: reading and action history from apps, websites or electronic communications we send out. As well as technical information about the devices you use.
- Cookies: see our information about cookies here: <URL to cookie statement>
In most cases, the personal information is collected directly from you or it is generated in connection with your use of our services and products. When we collect personal data from other sources, we collect personal data from the following sources:
How we use the personal data
Delivery of service/contract conclusion
We use your personal data to fulfill our agreements with you, i.e. when you have ordered a product or service from us. The legal basis for processing personal data for this purpose is that the processing is necessary to fulfill an agreement with you.
Administration of customer relations
We use your personal data to manage our customer relationship with you. This could be, for example, customer service, complaint handling and error correction regarding your customer relationship. The legal basis for processing personal data for this purpose is that the processing is necessary to fulfill an agreement with you.
Analysis, business development and improvement of services
We work continuously to develop and improve our services and products. Much of this work involves analyzing various forms of personal data, such as customer activity, customer history and account and profile information. The legal basis for processing personal data for this purpose is our legitimate interest.
Customized user experience
We adapt the user experience and communication to your customer relationship and we use personal data for this. The legal basis for processing personal data for this purpose is our legitimate interest.
Sales and marketing
We use personal data in connection with the sale and marketing of our products and services, for example when you receive e-mails from us. The legal basis for processing personal data for this purpose is our legitimate interest. You have the option of opting out of parts of this processing by, for example, opting out of receiving emails from us. In addition to this, we may also ask you for consent to use your personal data for so-called profiling, where we derive interests and needs on the basis of your personal data. The purpose of profiling will be to make our marketing more relevant.
System monitoring, error correction, etc.
We monitor our systems for errors and problems. Part of these processes involves the storage and processing of personal data. The legal basis for processing personal data for this purpose is our legitimate interest.
Security, detection of fraud and criminal acts
We process personal data in our work to protect our users and ourselves against fraudulent activity, abuse and criminal acts. The legal basis for processing personal data for this purpose is our legitimate interest.
Comply with legal obligations
In some cases, we are required to process personal data for reasons of other legal obligations. An example of this is information related to sales, which we are obliged to account for and store in accordance with the Bookkeeping Act. The legal basis for processing personal data for this purpose is that the processing is necessary to fulfill a legal obligation incumbent on us.
Your rights
If you wish to exercise any of your rights, contact us at info@astrastudio.no
Right to access your own information
You can request a copy of all information we process about you. Contact us at the email address above to exercise your right of access.
Right to correction of personal data
You have the right to ask us to correct or supplement information that is incorrect or misleading.
The right to delete personal data
You have the right to have your personal data deleted without undue delay. You can therefore ask us to delete information about yourself at any time. But please note that information that we are required to keep due to other legal obligations (such as the Bookkeeping Act) will not be deleted.
Limitation of processing of personal data
In some situations, you can also ask us to limit the processing of information about you. You do this by managing consents or reservations in our solutions.
Protest against the processing of personal data
If we process information about you based on our tasks or on the basis of a balancing of interests, you have the right to object to our processing of information about you. You do this by managing consents or reservations in our solutions.
Data portability
You have the right to receive your personal data in a structured, commonly used and machine-readable format. Contact the email address above to have your personal information disclosed.
You can complain about our processing of personal data
We hope you will speak up if you think we are not complying with the rules in the Personal Data Act. Please let us know first through the contact or channel you have already established with us. You can also complain about our processing of personal data. You do this to the Norwegian Data Protection Authority.