Legal

Privacy policy

This privacy policy explains how Surdeigshuset (“we”, “us”) processes personal data when you visit circomilit.yachts or contact us. We process personal data in accordance with the EU General Data Protection Regulation (GDPR) and the Norwegian Personal Data Act, under the supervision of the Norwegian Data Protection Authority (Datatilsynet).

1. Data controller

Surdeigshuset
Storgata 48, 9008 Tromsø, Norway
Email: [email protected]
Phone: +47 77 68 21 45

2. What we collect

  • Contact form or email: name, email address, message content, and any details you choose to include (for example pre-order dates or dietary notes).
  • Phone enquiries: information you provide during the call.
  • Technical data: essential cookies and, if you consent, optional analytics or marketing cookies as described in our cookie policy.

3. Purposes and legal bases

  • Responding to enquiries and fulfilling bread orders — legitimate interests and/or performance of a contract (GDPR Art. 6(1)(b) and (f)).
  • Running and securing this website — legitimate interests (Art. 6(1)(f)).
  • Optional analytics or marketing cookies — consent (Art. 6(1)(a)), which you may withdraw at any time.
  • Meeting legal obligations such as bookkeeping where relevant (Art. 6(1)(c)).

4. Retention

Enquiry messages are kept only as long as needed to handle your request, typically up to 12 months unless a longer period is required for an ongoing order or statutory obligation. Cookie consent preferences are stored in your browser until you clear them or change settings.

5. Sharing

We do not sell personal data. We may use service providers (for example email or hosting) who process data on our instructions and under appropriate agreements. Transfers outside the EEA only occur with suitable safeguards as required by the GDPR.

6. Your rights

Under the GDPR you may request access, rectification, erasure, restriction, data portability, and object to certain processing. Where processing is based on consent, you may withdraw consent without affecting prior lawful processing. To exercise your rights, contact us at [email protected].

You may lodge a complaint with Datatilsynet: datatilsynet.no.

7. Security

We take reasonable technical and organisational measures to protect personal data against unauthorised access, loss or misuse.

8. Updates

We may update this policy from time to time. The current version is always published on this page. Last updated: July 2026.