Last updated: August 14, 2026
The General Data Protection Regulation (GDPR) grants you specific rights regarding your personal data. As a Norwegian business serving European customers, Fjord Tehus is committed to upholding these rights.
You have the right to request confirmation of whether we process your personal data and to obtain a copy of that data. We will provide this information in a structured, commonly used, and machine-readable format.
If your personal data is inaccurate or incomplete, you have the right to request correction or completion of that information.
Also known as the "right to be forgotten," you may request deletion of your personal data under certain circumstances, including:
You may request that we limit the processing of your personal data in specific situations, such as when you contest the accuracy of the data or object to processing.
You have the right to receive your personal data in a structured, commonly used format and to transmit that data to another controller without hindrance.
You may object to processing of your personal data based on legitimate interests or for direct marketing purposes. We will cease processing unless we can demonstrate compelling legitimate grounds.
Where processing is based on consent, you have the right to withdraw that consent at any time. This does not affect the lawfulness of processing based on consent before withdrawal.
If you believe we have not handled your data in accordance with GDPR, you have the right to lodge a complaint with the Norwegian Data Protection Authority (Datatilsynet).
Datatilsynet
Postboks 458 Sentrum
0105 Oslo, Norway
Website: datatilsynet.no
The data controller responsible for your personal data is:
Fjord Tehus
Bryggen 47
5003 Bergen, Norway
Email: [email protected]
We process personal data for the following purposes:
Your personal data is primarily stored and processed within the European Economic Area (EEA). If we transfer data outside the EEA, we ensure appropriate safeguards are in place, such as Standard Contractual Clauses approved by the European Commission.
We do not use automated decision-making or profiling that produces legal effects or similarly significantly affects you.
To exercise any of your GDPR rights, please contact us at [email protected] with your request. We will respond within one month, though this may be extended by two additional months for complex requests.
When submitting a request, please include:
In the event of a data breach that poses a risk to your rights and freedoms, we will notify you and the relevant supervisory authority within 72 hours of becoming aware of the breach.