1. Who We Are

We are Laponicum, and we respect your privacy. This policy explains what data we collect, why we collect it, and your rights under the General Data Protection Regulation (GDPR).

2. What Data We Collect

When you use our contact form, we collect:

Name
Email address
User agent (browser/device info)
IP address

3. Why We Collect Your Data & Legal Basis

Responding to inquiries:
Legal basis: Legitimate interests (GDPR Art. 6(1)(f)) or steps prior to a contract (Art. 6(1)(b)) if you request service info.

4. How We Use Your Data

We use your data to:

Respond to your inquiries
Improve our services
Ensure security and prevent abuse
We do not sell or share your data for marketing purposes.

5. Data Sharing

We do not share your personal data with third parties except when required by law or to provide our services securely.

6. Data Retention

We keep your contact form data for as long as necessary to handle your inquiries or as required by law.

7. Your GDPR Rights

You have the right to:

Access, correct, or delete your data
Restrict or object to processing
Withdraw consent at any time
Data portability
To exercise these rights, email us at info@laponicum.com.
You can also complain to the Norwegian Data Protection Authority (Datatilsynet):
https://www.datatilsynet.no/en/

8. Security

We use reasonable technical and organizational measures to protect your data.

9. Changes

We may update this policy and will post changes here with a new effective date.