Privacy Policy

1. Data Manager

This privacy policy explains how we collect and use (process) personal data within our business. FUNGYBAR AS, represented by the general manager, is responsible for processing the data.

Our contact information is:

FUNGYBAR AS
Business address: Gydas vei 14, 1614 FREDRIKSTAD, Norway
Organization number: 834605732
Email address: contact@fungybar.com

We take your privacy seriously and have taken several measures to ensure that we provide you with clear information about how we process your data and what rights you have. If you feel that anything is unclear or missing, please do not hesitate to contact us. 

2. Your Rights

Please contact us if you have any questions or wish to exercise your rights. You are entitled to a response within 30 days. Learn more on the Norwegian Data Protection Authority’s website.

  • Access to and correction of personal data: You may request a copy of all the data we process about you and ask us to correct any inaccurate information.
  • Deletion or restriction: In certain situations, you may request that we delete or restrict the processing of your personal data, but we cannot delete data that we are legally required to process.
  • Objection to processing: If we process your data based on legitimate interest, you have the right to object to this.
  • Data portability: If we process your data based on consent or a contract, you may ask us to transfer your data to you or another data manager.

You also have the right to withdraw your consent at any time.

If you are not satisfied with how your data is handled, you can file a complaint with the Norwegian Data Protection Authority. However, we hope you will first contact us so we can try to resolve the issue.

3. Who We Process Personal Data About

We process personal data about:

  • Customers
  • Potential customers
  • Email marketing subscribers
  • Affiliates
  • People who have contacted us via the contact forms on our websites
  • Other website visitors

4. How We Collect Personal Data

Providing personal data to us is voluntary; however, to complete a transaction, we require specific information from you.

We process personal data when you:

  • Purchase our products/services
  • Contact us via phone, SMS, our website, email, or social media
  • Subscribe to our newsletter
  • Register for our events
  • Respond to a survey
  • Use our website
  • Apply for a job with us or work for us
  • Are a supplier or business partner

5. Purpose, Legal Basis, and Storage

According to Article 6, Paragraph 1 of the GDPR, personal data may be processed based on:

  • Your consent
  • A contract we have entered into
  • A legal obligation we must comply with
  • Protection of the vital interests of the data subject or another person
  • The performance of a task in the public interest or the exercise of official authority
  • A legitimate interest we believe we have

As a general rule, personal data should not be processed or stored longer than necessary to fulfill the purpose of processing. If we process your personal data based on a legitimate interest, you may object to the processing by contacting us, and we will evaluate your objection and respond promptly.

We retain data as long as legally required under accounting, tax, employment, or other relevant laws and regulations. You may request that we stop processing or delete your personal data at any time, but we cannot delete data that we are legally obligated to retain.

Accounting records are retained for up to five years in accordance with the Norwegian Bookkeeping Act.

6. How We Process Personal Data

This section details when and how we process your personal data, for what purposes, on what legal basis, and for how long. We process personal data when:

 

You Communicate with Us

When you provide us with your business card or contact us via the website (contact form, comment section, chat, or similar), by email, phone (calls, text messages), or social media, we process personal data. Depending on how and where you contact us, this may include your name, contact details, IP address, and any other information you choose to send us.

The purpose is to respond to your inquiries, maintain records, and have documentation in case we receive complaints, claims, or legal demands.

The legal basis may be:

      • Your consent.

      • A contract we have entered into.

      • A legal obligation we must comply with.

      • To protect the vital interests of the data subject or another natural person.

      • A legitimate interest, where our legitimate interest is to respond to inquiries, maintain records, and have documentation in case of complaints, claims, or legal demands.

      • To perform a task in the public interest or exercise official authority.

    We review, archive, and delete inquiries as needed, but at least once per year.

     

    You Purchase Our Products and Services

    When you purchase products and services from us, we process personal data such as name, contact details, order and payment information, and purchase history.

    The purpose is to deliver products and services as ordered, maintain a history of sold products and services, and otherwise manage and follow up on the customer relationship.

    The legal basis may be:

        • Your consent.

        • A contract we have entered into.

        • A legal obligation, including under accounting and tax laws.

        • To protect the vital interests of the data subject or another natural person.

        • A legitimate interest, where our legitimate interest is to respond to inquiries, maintain records, and have documentation in case of complaints, claims, or legal demands.

        • To perform a task in the public interest or exercise official authority.

       

      Marketing for Existing Customer Relationships

      When you become a customer, we process personal data as mentioned above. If you have an existing customer relationship with us, we may send you marketing via email and SMS in accordance with the Marketing Act § 15. The legal basis will be legitimate interest but may also be consent.

      The purpose of marketing is to provide good customer service.

      You can opt out of marketing via email and SMS at any time. Information on how to opt out is included in all marketing emails and SMS messages we send.

       

      You Apply for a Job or Work with Us

      When you apply for a job with us, we process personal data such as name, contact details, CV, and other information needed to assess your application.

      The legal basis may be:

          • Your consent.

          • A contract we have entered into.

          • A legal obligation.

          • To protect the vital interests of the data subject or another natural person.

          • To perform a task in the public interest or exercise official authority.

        The legal basis varies depending on the stage of the recruitment process and the type of position.

        For employees, we process the above-mentioned personal data, as well as information necessary to pay salaries and otherwise administer the employment relationship.

        The legal basis may be:

            • Your consent.

            • A contract we have entered into.

            • A legal obligation.

            • To protect the vital interests of the data subject or another natural person.

            • To perform a task in the public interest or exercise official authority.

          Most employee data is processed based on the employment contract and is generally deleted when the employment relationship ends unless special circumstances (such as a dispute over termination) require longer retention.

           

          You Sign up for an Event

          When you participate in free events with us, we process personal data such as name and contact details. For paid events, we also collect order and payment information. The purpose is to offer relevant courses, lectures, and workshops or fulfill agreements for booked events.

          The legal basis may be:

              • Your consent.

              • A contract we have entered into.

              • A legal obligation, including under accounting and tax laws.

              • To protect the vital interests of the data subject or another natural person.

              • A legitimate interest.

              • To perform a task in the public interest or exercise official authority.

            We may also use your personal data to request event feedback and invite you to similar events. The legal basis is a legitimate interest, with our interest being to continuously improve our products and services and provide good customer support.

            The retention period depends on the type of event, but data is typically deleted within 12 months.

             

            You Respond to a Survey

            We always inform you of the purpose of our surveys and whether they are anonymous. We do not share the information with others or use it for purposes other than stated. Anonymous surveys do not collect personal data.

            The legal basis for non-anonymous surveys may be:

                • Your consent.

                • A contract we have entered into.

                • A legal obligation.

                • To protect the vital interests of the data subject or another natural person.

                • A legitimate interest.

                • To perform a task in the public interest or exercise official authority.

              The retention period depends on the type of survey, but data is typically deleted within 2 years.

               

              You Are a Supplier or Collaborate with Us

              When you enter into an agreement with us as a supplier, partner, or data processor, we process personal data such as name, contact details, and correspondence.

              The purpose is to establish and maintain an agreement with you. The legal basis may be:

                  • Your consent.

                  • A contract we have entered into.

                  • A legal obligation, including under accounting and tax laws.

                  • To protect the vital interests of the data subject or another natural person.

                  • A legitimate interest.

                  • To perform a task in the public interest or exercise official authority.

                Data is retained as long as we have an ongoing relationship. We process personal data related to general correspondence and communication as described above.

                 

                You Use Our Website

                When you use our website, we process personal data in accordance with our cookie policy. The purpose is to manage our website, promote the business, and respond to visitor inquiries. The legal basis for cookies that store or process information under the Electronic Communications Act § 2-7b is consent through a browser preset, in line with the Norwegian Communications Authority’s recommendations as described here.

                7. Who We Share Personal Data With

                To operate our business efficiently and securely, we sometimes need to share your personal data with parties such as:

                • Data Processors: Suppliers of various services who process your personal data on our behalf.*
                • Public Authorities: Entities we are legally required to report to.
                • Professional Advisors: Experts in fields such as law, finance, accounting, auditing, and insurance.
                • Support Services: Providers of IT and administrative system support like WooCommerce and WordPress. 

                We require all parties with whom we share your personal data to ensure data security in accordance with best practices and the requirements of the General Data Protection Regulation (GDPR). We enter into data processing agreements with all entities processing data on our behalf and sign confidentiality agreements as needed.

                *We use data processors for:

                • Email, calendar, and digital meetings
                • Bookkeeping, accounting, and invoicing
                • Cloud storage
                • Newsletters
                • Electronic signing
                • Surveys

                For security reasons, we have not specified these processors by name, but please contact us if you would like more details.

                8. Transfer of Personal Data Outside the EU/EEA

                In some cases, your personal data may be transferred outside the EU/EEA. For example, we have providers outside the EU/EEA for:

                • Managing newsletter distribution
                • Processing customer data
                • Making products and services available on our website
                • Enabling payments
                • Ensuring website security
                • Managing the affiliate system on our website
                • And generally operating our business in a secure and efficient manner

                Transfers of personal data outside the EU/EEA are only permitted to countries approved by the European Commission or under necessary safeguards in accordance with the General Data Protection Regulation (GDPR). These safeguards may include the EU’s standard contractual clauses.

                For security reasons, we have not specified these providers by name. Please contact us if you would like more details about the data processors we use, the necessary safeguards applicable to such transfers, and the additional security measures we have implemented.

                9. Security

                We take information security seriously, and we will always do our utmost to protect your personal data in the best possible way. Among other things, we use:

                • strong passwords
                • data encryption
                • access control
                • backups

                to secure our data and prevent unauthorized individuals from accessing, altering, deleting, or in any way affecting the data we store, including your personal information.

                We only use reputable providers of IT and administration services, such as web hosting, website and PC security, antivirus software, email providers, backups, and more. We only allow others to access and/or process your personal data according to our instructions, and only where strictly necessary (e.g., for IT support).

                This privacy policy was last updated: 21.01.2025