1. Introduction

At FungyBar, we are committed to protecting your privacy and ensuring that your personal data is handled responsibly. This Privacy Policy outlines how we collect, use, and protect your information when you use our website and services, in accordance with the General Data Protection Regulation (GDPR) and Norwegian privacy laws.

2. Data Controller

• Company Name: FungyBar
• Organization Number: 933186121
• Address: Gydasvei 14, 1614 Fredrikstad, Østfold, Norway
• Email: contact@fungybar.com
• Phone: +47 48133704

3. Data Collection

We collect and process various types of personal data to provide our services effectively. The data we collect includes:

• Personal Information: Name, address, email address, phone number, and payment information when you place an order or create an account on our website.
• Technical Information: IP address, browser type, operating system, and other technical data collected through cookies and similar technologies when you visit our website.
• Purchase History: Details of your orders, including products purchased, order dates, and delivery details.
• Communication Data: Records of any communication you have with us, including emails, phone calls, and messages through our customer service channels.

4. Purpose of Data Processing

We process your personal data for the following purposes:

• Order Fulfillment: To process and deliver your orders, including sending order confirmations, shipping notifications, and handling returns or refunds.
• Customer Service: To respond to your inquiries, manage your account, and provide support.
• Marketing: To send you promotional offers, newsletters, and updates about our products and services, if you have opted in to receive such communications.
• Website Improvement: To analyze and improve the performance and functionality of our website, and to personalize your browsing experience.
• Legal Compliance: To comply with legal obligations, including accounting, tax, and regulatory requirements.

5. Legal Basis for Data Processing

We process your personal data based on the following legal grounds:

• Performance of a Contract: Processing is necessary for the performance of a contract with you, such as fulfilling your orders and providing customer service.
• Legitimate Interests: Processing is necessary for our legitimate interests, such as improving our services and preventing fraud, provided these interests do not override your rights and freedoms.
• Consent: We rely on your consent for sending marketing communications and using certain cookies. You have the right to withdraw your consent at any time.

6. Data Sharing

We may share your personal data with third parties under the following circumstances:

• Service Providers: We share your data with trusted service providers who assist us in operating our website, processing payments, delivering orders, and providing customer support. These providers are bound by confidentiality agreements and are not permitted to use your data for any other purpose.
• Legal Obligations: We may disclose your data if required by law or in response to legal processes, such as a court order or government request.
• Business Transfers: In the event of a merger, acquisition, or sale of all or part of our business, your data may be transferred to the new owners as part of the transaction.

7. Data Retention

We retain your personal data only for as long as necessary to fulfill the purposes for which it was collected, or to comply with legal obligations. The retention periods vary depending on the type of data and the purpose of processing:

• Order Information: Retained for 5 years to comply with accounting and tax regulations.
• Customer Account Data: Retained as long as your account is active. You may request account deletion at any time.
• Marketing Data: Retained until you unsubscribe or withdraw your consent.

8. Your Rights

Under GDPR and Norwegian privacy laws, you have the following rights regarding your personal data:

• Right to Access: You have the right to request a copy of the personal data we hold about you.
• Right to Rectification: You have the right to request correction of any inaccurate or incomplete data.
• Right to Erasure: You have the right to request the deletion of your data under certain circumstances.
• Right to Restrict Processing: You have the right to request that we restrict the processing of your data under certain conditions.
• Right to Data Portability: You have the right to receive your data in a structured, commonly used format and to transfer it to another data controller.
• Right to Object: You have the right to object to the processing of your data for direct marketing purposes or based on legitimate interests.
• Right to Withdraw Consent: If we rely on your consent to process your data, you have the right to withdraw that consent at any time.

To exercise any of these rights, please contact our Data Protection Officer at postkasse@datatilsynet.no.

9. Cookies

Our website uses cookies and similar technologies to enhance your browsing experience and provide personalized services. Cookies are small text files stored on your device when you visit our website. We use the following types of cookies:

• Essential Cookies: Necessary for the basic functioning of our website, such as enabling secure login and shopping cart functionality.
• Performance Cookies: Collect information about how you use our website, allowing us to improve its performance.
• Marketing Cookies: Used to deliver personalized advertisements and track your engagement with our marketing campaigns.

You can manage your cookie preferences through your browser settings. Please note that disabling certain cookies may affect the functionality of our website.

10. Data Security

We implement appropriate technical and organizational measures to protect your personal data against unauthorized access, loss, or misuse. These measures include:

• Encryption: We use encryption technologies to secure your personal data during transmission.
• Access Control: We limit access to your data to authorized personnel only.
• Regular Audits: We regularly review our security practices to ensure the ongoing protection of your data.

11. Changes to this Privacy Policy

We may update this Privacy Policy from time to time to reflect changes in our practices or legal requirements. Any updates will be posted on this page, and we will notify you of significant changes via email or through a notice on our website. We encourage you to review this policy periodically to stay informed about how we protect your data.

12. Contact Information

If you have any questions or concerns about this Privacy Policy or how we handle your personal data, please contact us at:

• Email: contact@fungybar.com
• Phone: +47 48133704

You also have the right to lodge a complaint with the Norwegian Data Protection Authority (Datatilsynet) if you believe that your data protection rights have been violated.

13. Children’s Privacy

Our services are not intended for use by children under the age of 16. We do not knowingly collect or process personal data from children. If we become aware that we have inadvertently collected personal data from a child under the age of 16, we will take steps to delete such data as soon as possible. If you believe that we may have collected data from a child under 16, please contact us immediately at contact@fungybar.com.

14. International Data Transfers

As part of our operations, your personal data may be transferred to and processed in countries outside of Norway and the European Economic Area (EEA) where data protection laws may differ from those in your country. In such cases, we ensure that appropriate safeguards are in place to protect your data, in accordance with GDPR requirements. These safeguards may include:

• Standard Contractual Clauses: We use Standard Contractual Clauses approved by the European Commission to ensure adequate protection when transferring data outside the EEA.
• Binding Corporate Rules: Where applicable, our service providers may adhere to Binding Corporate Rules approved by the relevant data protection authorities.

You can request more information about these safeguards by contacting our Data Protection Officer at postkasse@datatilsynet.no.

15. Automated Decision-Making and Profiling

We do not engage in automated decision-making or profiling that significantly affects you as a data subject. If we introduce any such processes in the future, we will inform you and provide the necessary information, including your rights in relation to such processing.

16. Third-Party Links

Our website may contain links to third-party websites. Please note that this Privacy Policy does not apply to any external websites that you may access through our links. We encourage you to review the privacy policies of these third-party sites to understand how they handle your personal data. We are not responsible for the privacy practices or content of third-party websites.

17. Your Consent

By using our website and providing your personal data, you consent to the collection, processing, and sharing of your information as described in this Privacy Policy. If you do not agree with this policy, please do not use our website or services.

18. Complaints and Dispute Resolution

If you have any complaints about how we handle your personal data, we encourage you to contact us first so that we can try to resolve the issue. If you are not satisfied with our response, you have the right to lodge a complaint with the Norwegian Data Protection Authority (Datatilsynet):

• Norwegian Data Protection Authority (Datatilsynet)
  • Website: https://www.datatilsynet.no
  • Phone: +47 22 39 69 00
  • Email: postkasse@datatilsynet.no

19. Conclusion

Protecting your personal data is important to us. We are committed to ensuring that your privacy is respected and that your data is handled in a secure and transparent manner. We thank you for trusting us with your personal information and for taking the time to read this Privacy Policy.

---

Please note that by using our website and services, you agree to this Privacy Policy. We recommend reviewing it periodically to stay informed about how we protect your data and any changes that may occur.