Astra Studio AS is the data controller responsible for the processing of personal data as described in this privacy policy. In this document, we explain what types of personal data we collect and how we process them. This privacy policy applies to:

www.astrastudio.no

We process the following categories of personal data:

• Basic information: name, date of birth
• Contact Information: address, phone number, email address
• Account and profile details: settings, preferences
• Payment information: transaction details, payment methods
• Customer History and engagement: order and delivery information, cart activity, discount codes, loyalty program data
• Customer activity: products and agreements currently active or previously held, usage frequency, and product/service status
• Usage data: reading and interaction history from apps, websites, or electronic communication we send out, as well as technical data about the devices you use

Providing Services / Fulfilling Agreements

We use your personal data to fulfill our agreements with you, for example when you order a product or service. The legal basis for this is that processing is necessary to perform a contract with you.

Customer Relationship Management

We use your personal data to manage our relationship with you, including customer service, complaint handling, and issue resolution. The legal basis is the performance of a contract.

Analysis, Business Development, and Service Improvement

We continuously work to improve our services and products. Much of this involves analyzing various forms of personal data such as customer activity, history, and profile settings. The legal basis is our legitimate interest.

Personalized User Experience

We tailor the user experience and our communications based on your relationship with us. The legal basis for this processing is our legitimate interest.

Sales and Marketing

We may use your personal data in connection with marketing and sales of our products and services, such as sending you emails. The legal basis is our legitimate interest. You may opt out of such communications at any time (e.g., unsubscribe from emails).

In addition, we may ask for your explicit consent to use your data for profiling purposes, allowing us to better tailor marketing efforts to your interests and needs.

System Monitoring and Error Correction

We monitor our systems for errors and issues. Some of these processes involve the storage and processing of personal data. The legal basis is our legitimate interest.

Security, Fraud Prevention, and Crime Detection

We process personal data to protect both our users and ourselves from fraud, misuse, and criminal activity. The legal basis is our legitimate interest.

Legal Obligations

In some cases, we are legally required to process certain personal data. For example, we must store sales-related data to comply with the Norwegian Bookkeeping Act. The legal basis is compliance with a legal obligation.

f you wish to exercise your rights, please contact us at: info@astrastudio.no

• Right to access your data: You may request a copy of all personal data we hold about you.
• Right to rectification: You may request that we correct or complete inaccurate or misleading information.
• Right to erasure: You may request that we delete your personal data. However, data we are legally required to retain (e.g., for accounting purposes) will not be deleted.
• Right to restrict processing: You may request limitations on how we process your personal data by managing your consents or preferences in our systems.
• Right to object: If we process data based on legitimate interests or public tasks, you may object to such processing via your consent settings.
• Right to data portability: You have the right to receive your personal data in a structured, commonly used, and machine-readable format. Contact us via email to request this.
  

If you believe we are not complying with applicable data protection laws, we encourage you to contact us first through your established communication channel or directly at info@astrastudio.no.