Privacy

Last updated: 19 September 2026

1. Data controller

Arctic Distribution AS, Amsrudbakken 4, 2827 Hunndalen, Norway, is the data controller for personal data processed through arcticdist.com. Privacy enquiries: thomas@arcticdist.com.

2. What we process, and why

Enquiries by form and email Data: name, email address, phone number, company and the content of the enquiry. Purpose: to answer and follow up on the enquiry. Legal basis: legitimate interest in responding to enquiries, GDPR Article 6(1)(f). Where the enquiry concerns a possible agreement, Article 6(1)(b). Retention: up to two years after last contact.

Retailers, suppliers and other business contacts Data: name, job title, work email and phone number. Purpose: managing the business relationship, including orders, deliveries and support. Legal basis: Article 6(1)(b) and (f). Retention: for the duration of the business relationship, and up to two years afterwards. Accounting records are kept for five years after the end of the financial year, as required by the Norwegian Bookkeeping Act.

Newsletter Data: name and email address, plus open and click statistics. Purpose: sending news about products and range. Legal basis: consent, Article 6(1)(a). Consent is active and voluntary, and can be withdrawn at any time through the unsubscribe link in every message. Retention: until consent is withdrawn. Email addresses inactive for three years are deleted.

Website usage Data: IP address, browser type, pages visited and time of visit, recorded in technical logs held by our website provider. Purpose: operation, troubleshooting and security. Legal basis: legitimate interest in secure and stable operation, Article 6(1)(f). Retention: up to six months.

3. Cookies

The website does not use cookies for statistics, analytics or marketing.

If we introduce such cookies later, you will be asked for consent before they are set, and this policy will be updated.

4. Who we share data with

We do not sell personal data, and we do not share it with third parties for their own purposes.

Personal data is processed by the providers that operate our website and send our email campaigns. They process data on our behalf, on our instructions, and are bound by a data processing agreement. Data is otherwise disclosed only where we are legally required to do so.

5. Transfers outside the EEA

Where one of our providers processes personal data outside the EEA, the transfer is based on the European Commission's standard contractual clauses or another valid transfer mechanism.

6. Security

We have technical and organisational measures in place to protect personal data against unauthorised access, alteration and deletion. Access is limited to those who need the data to carry out their work.

7. Your rights

You have the right to access your own data, to have errors corrected, to erasure, to restriction of processing, to data portability, and to object to processing based on legitimate interest. Consent can be withdrawn at any time, without affecting the lawfulness of processing carried out before withdrawal.

Requests are sent to thomas@arcticdist.com. We normally respond within 30 days.

If you believe we process personal data in breach of the rules, you can lodge a complaint with the Norwegian Data Protection Authority, datatilsynet.no.

8. Changes

We may update this policy. The current version is always published on this page, with the date of the last update.