Privacy policy

1. Data controller

WATAHAR is the data controller for personal data collected through this website. Contact: post@watahar.no, phone +47 99874418. The organisation number is stated in the website footer.

2. What we collect and why

Contact form: name, email, phone (optional), company (optional) and your message. We use this only to answer your enquiry. The data is stored in our Supabase database, and a notification containing the message is sent to post@watahar.no.

Cookies: Necessary cookies are required for the site to work (language, theme and your consent choice). Analytics cookies are set only if you accept them in the cookie banner, and you can withdraw consent at any time.

3. Legal basis

Contact form data is processed on the basis of legitimate interest (GDPR Art. 6(1)(f)) in responding to enquiries, or to take steps prior to entering a contract (Art. 6(1)(b)). Analytics cookies are processed on the basis of consent (Art. 6(1)(a)).

4. Retention

Contact enquiries are kept for up to 12 months, unless they become part of a client relationship. In that case we keep them for the duration of the relationship and as long as accounting law requires. Necessary cookies expire no later than the end of the browser session; the consent choice is stored for up to 12 months.

5. Your rights

You have the right to access, rectification, erasure, restriction, objection and data portability. Email post@watahar.no and we will reply within 30 days.

6. Third parties

We do not sell personal data. We use two processors: Supabase (database and hosting, servers in the EU) and Resend (sending notification emails about new enquiries). Both process data on our instructions.

7. Complaints

If you believe we process your data unlawfully, you may lodge a complaint with the Norwegian Data Protection Authority, Datatilsynet (datatilsynet.no).