1. Data Controller Disclosures

The sole data controller responsible for the gathering, processing, and security of personal data collected through your interactions with this online platform is:

• Company Name: Schiager Digital
• Organization Number: 925 963 615
• Address: Fjordveien 83, 3490 Klokkarstua, Norway
• Contact Email: post@schiager.digital

We process all personal identifiable information (PII) strictly in accordance with the General Data Protection Regulation (GDPR) (Regulation (EU) 2016/679) and the Norwegian Personal Data Act (Personopplysningsloven).

2. Data Retention Frameworks

We will only retain your personal data for as long as is strictly necessary to fulfil the operational purposes for which it was originally collected, or to satisfy legal obligations.

• Financial & Purchase Logs: Retained for a mandatory period of 5 years to fully comply with the provisions of the Norwegian Bookkeeping Act (Bokføringsloven).
• Customer Accounts: Maintained continuously until the Customer actively requests account deletion.
• Direct Marketing Lists: Retained until the Customer actively withdraws consent or clicks "unsubscribe".
• Customer Support Logs: Archived and stored for 24 months following the formal closure of the support ticket.

3. Controlled Third-Party Sharing and Cross-Border Transfers

We do not sell, rent, or lease your personal data. Data is shared only with trusted processors essential to running our business operations:

1. Payment Processors: Stripe, Vipps, and PayPal to securely initialize transactions.
2. Logistics Partners: Bring/Posten, DHL, UPS, and FedEx to ensure physical delivery of orders.
3. IT & Cloud Infrastructure Providers: Hosting, database providers, and internal email management tools.
4. Cross-Border Data Flows: If any processing service necessitates the transfer of data outside the EU/EEA, Schiager Digital enforces strict compliance safeguards, ensuring that the recipient party is bound by the European Commission's Standard Contractual Clauses (SCCs) and undergoes rigorous security assessments to ensure an equivalent level of data protection.

4. Mandatory Use of Cookies

Our platform utilizes cookies to enhance functionality, preserve your shopping cart state, and gather anonymous performance analytics. Optional analytical or advertising cookies (such as Google Analytics tracking) will only be activated if the user explicitly consents via the cookie consent banner displayed upon entering the website. Users can modify their cookie choices at any time through their internet browser controls.

5. Your Statutory Rights Under the GDPR

Pursuant to the GDPR, you possess the following core rights regarding your personal data:

• Article 15 (Right of Access): The right to request copies of the personal data we hold about you.
• Article 16 (Right of Rectification): The right to demand correction of inaccurate or incomplete data.
• Article 17 (Right of Erasure): The right to request deletion of your data, provided it is no longer required for overriding legal compliance obligations (such as the Bookkeeping Act).
• Article 18 (Right to Restriction): The right to restrict the processing of your data under specific conditions.
• Article 20 (Right to Data Portability): The right to have your data transferred to another service provider in a structured, machine-readable format.
• Article 21 (Right to Object): The right to object to processing carried out based on legitimate interests.
• Right to Withdraw Consent: The right to instantly revoke marketing consents at any time.

To exercise any of these statutory rights, please submit a clear request to post@schiager.digital. If you believe that Schiager Digital is processing your personal information in violation of the law, you have a formal right to lodge an official complaint with your domestic supervisory authority, which in Norway is the Norwegian Data Protection Authority.

1. Data Controller Disclosures

The sole data controller responsible for the gathering, processing, and security of personal data collected through your interactions with this online platform is:

• Company Name: Schiager Digital
• Organization Number: 925 963 615
• Address: Fjordveien 83, 3490 Klokkarstua, Norway
• Contact Email: post@schiager.digital

We process all personal identifiable information (PII) strictly in accordance with the General Data Protection Regulation (GDPR) (Regulation (EU) 2016/679) and the Norwegian Personal Data Act (Personopplysningsloven).

2. Data Retention Frameworks

We will only retain your personal data for as long as is strictly necessary to fulfil the operational purposes for which it was originally collected, or to satisfy legal obligations.

• Financial & Purchase Logs: Retained for a mandatory period of 5 years to fully comply with the provisions of the Norwegian Bookkeeping Act (Bokføringsloven).
• Customer Accounts: Maintained continuously until the Customer actively requests account deletion.
• Direct Marketing Lists: Retained until the Customer actively withdraws consent or clicks "unsubscribe".
• Customer Support Logs: Archived and stored for 24 months following the formal closure of the support ticket.

3. Controlled Third-Party Sharing and Cross-Border Transfers

We do not sell, rent, or lease your personal data. Data is shared only with trusted processors essential to running our business operations:

1. Payment Processors: Stripe, Vipps, and PayPal to securely initialize transactions.
2. Logistics Partners: Bring/Posten, DHL, UPS, and FedEx to ensure physical delivery of orders.
3. IT & Cloud Infrastructure Providers: Hosting, database providers, and internal email management tools.
4. Cross-Border Data Flows: If any processing service necessitates the transfer of data outside the EU/EEA, Schiager Digital enforces strict compliance safeguards, ensuring that the recipient party is bound by the European Commission's Standard Contractual Clauses (SCCs) and undergoes rigorous security assessments to ensure an equivalent level of data protection.

4. Mandatory Use of Cookies

Our platform utilizes cookies to enhance functionality, preserve your shopping cart state, and gather anonymous performance analytics. Optional analytical or advertising cookies (such as Google Analytics tracking) will only be activated if the user explicitly consents via the cookie consent banner displayed upon entering the website. Users can modify their cookie choices at any time through their internet browser controls.

5. Your Statutory Rights Under the GDPR

Pursuant to the GDPR, you possess the following core rights regarding your personal data:

• Article 15 (Right of Access): The right to request copies of the personal data we hold about you.
• Article 16 (Right of Rectification): The right to demand correction of inaccurate or incomplete data.
• Article 17 (Right of Erasure): The right to request deletion of your data, provided it is no longer required for overriding legal compliance obligations (such as the Bookkeeping Act).
• Article 18 (Right to Restriction): The right to restrict the processing of your data under specific conditions.
• Article 20 (Right to Data Portability): The right to have your data transferred to another service provider in a structured, machine-readable format.
• Article 21 (Right to Object): The right to object to processing carried out based on legitimate interests.
• Right to Withdraw Consent: The right to instantly revoke marketing consents at any time.

To exercise any of these statutory rights, please submit a clear request to post@schiager.digital. If you believe that Schiager Digital is processing your personal information in violation of the law, you have a formal right to lodge an official complaint with your domestic supervisory authority, which in Norway is the Norwegian Data Protection Authority.