Privacy Policy

Introduction

SKANDI BYGG AS ("we", "us", or "our") is committed to protecting your privacy. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you visit our website skandibygg.no or use our services. Please read this privacy policy carefully.

Data Controller

SKANDI BYGG AS is the data controller for the personal data we process. Our contact details are provided at the end of this policy.

Information We Collect

Legal Basis for Processing

We process your personal data based on the following legal grounds under GDPR:

• Consent: When you provide explicit consent for specific processing activities
• Legitimate interests: For business operations, website analytics, and improving our services
• Contract performance: When processing is necessary to fulfill our contractual obligations
• Legal obligation: When required by law or regulation

How We Use Your Information

We use the collected information for the following purposes:

• Responding to your inquiries and providing customer support
• Processing and managing construction project requests
• Improving our website and services
• Analyzing website usage and performance
• Sending relevant business communications (with your consent)
• Complying with legal obligations

Data Sharing and Disclosure

We do not sell, trade, or rent your personal information to third parties. We may share your information in the following circumstances:

• Service providers: With trusted third-party service providers who assist in our operations
• Legal requirements: When required by law, court order, or government request
• Business transfers: In connection with a merger, acquisition, or sale of assets
• Consent: When you have given explicit consent for specific sharing

Data Retention

We retain your personal data only for as long as necessary to fulfill the purposes outlined in this policy:

• Contact form submissions: 3 years from submission date
• Website analytics data: 26 months (Google Analytics default)
• Email communications: 5 years for business correspondence
• Legal obligations: As required by applicable laws and regulations

Your Rights Under GDPR

As a data subject, you have the following rights:

• Right of access: Request copies of your personal data
• Right to rectification: Request correction of inaccurate data
• Right to erasure: Request deletion of your personal data
• Right to restrict processing: Request limitation of data processing
• Right to data portability: Request transfer of your data
• Right to object: Object to processing based on legitimate interests
• Right to withdraw consent: Withdraw consent at any time

To exercise these rights, please contact us using the information provided below.

Data Security

We implement appropriate technical and organizational measures to protect your personal data against unauthorized access, alteration, disclosure, or destruction. However, no method of transmission over the internet is 100% secure.

International Data Transfers

Your personal data may be transferred to and processed in countries outside the European Economic Area (EEA). When we transfer data internationally, we ensure appropriate safeguards are in place.

Changes to This Privacy Policy

We may update this Privacy Policy from time to time. We will notify you of any changes by posting the new Privacy Policy on this page and updating the "Last updated" date.