How we process personal data
This is everything PAINTZ AS does with personal data, one row per activity. We update the page when something changes.
Controller: PAINTZ AS, org. no. 934 310 659, Innspurten 10B, 0663 Oslo, Norway, post@paintz.no. Privacy policy
| Activity | Purpose | Data | Whose data | Legal basis | Recipients | Retention |
|---|---|---|---|---|---|---|
| Customer account and login | Give the company access to the shop without passwords. | Name, e-mail, phone, role, language (Norwegian or English). One-time codes and sessions (hashes only). Browser description for sessions. | Contact persons and users at business customers | Legitimate interest (GDPR Art. 6(1)(f)): the contract with the company | Cloudflare (processor) | Until the account is deleted (you can ask on My account; we delete within 30 days). Unused accounts are deleted or anonymised after 3 years. Codes 10 minutes, sessions up to 30 days. |
| Company sign-up | Check that the customer is an active business in Norway, and record that the person signing up acts for the company and accepts the terms. | Org. number, company name, address, organisation form, VAT status (public data). Terms version, time and IP address of the declaration. | The company and the contact person | Legitimate interest (GDPR Art. 6(1)(f)) | Brønnøysund register (receives the search only), Cloudflare | As the customer account. The declaration in the audit log (the IP address 12 months). |
| Orders and delivery | Receive, pack and deliver orders, and show the order history. | Order lines, delivery address, contact person and phone, your reference, note, promo code, terms version. | Contact persons and users at business customers | Legitimate interest (GDPR Art. 6(1)(f)) and legal obligation (art. 6(1)(c)) (bookkeeping) | Cloudflare, Posten/Bring (name, address, phone), Tripletex | 5 years after the end of the financial year. Then the contact person, phone and note are removed. |
| Invoicing and accounting | Make and send invoices (EHF or e-mail), keep accounts and receive payment. A read-only copy of invoices and customers from Tripletex in our office system is used for stocktake and cost calculations. | Company name, org. number, invoice address, orders, amounts, payments. | Business customers and contact persons | Legal obligation (Art. 6(1)(c)): Bookkeeping Act | Tripletex (processor), Cloudflare (office system), accountant, bank | 5 years after the end of the financial year. |
| E-mails from the shop | Send login codes, order confirmations and account messages. | E-mail, name, the content of the e-mail. | Contact persons and users at business customers | Legitimate interest (GDPR Art. 6(1)(f)) | Resend (processor, sends from the EU), Domeneshop for replies to post@paintz.no | The shop keeps no copies. Inbox: as long as needed for the customer relationship. |
| BRUSH orders (collaboration with Cold Pressed AS) | Let Cold Pressed AS invoice and give customer service for BRUSH. | Company name, org. number, invoice address or EHF, contact person’s name, e-mail and phone, delivery address, items and prices incl. VAT. Name, time and version when the agreement is accepted. | Contact persons and users at business customers | Legitimate interest (GDPR Art. 6(1)(f)) | Cold Pressed AS (independent controller) via a secure link after the data sharing agreement, version 1.0. The e-mail holds only the link. | The link works for 30 days. The order 5 years. |
| PAINTZ Ambassador | Handle your sign-up, give you a code, work out and pay your compensation, and end the agreement when you ask. | Name, e-mail, phone, workplace, city, any org. number, language, agreement version and when you accepted it, the code, customers who used the code and your compensation. A one-time link to end the agreement (hash only). | Ambassadors | The agreement (GDPR Art. 6(1)(b)) and the bookkeeping duty (Art. 6(1)(c)) | Cloudflare (processor), our accountant and Tripletex for the payment | Sign-ups that are not approved: deleted after 12 months. Ambassadors: while the agreement lasts, then payment records for 5 years (Bookkeeping Act). |
| Promo codes | Give the agreed discount and keep usage limits. | Which company used which code on which order, and the discount. Rejected attempts are logged with IP address. | Contact persons and users at business customers | Legitimate interest (GDPR Art. 6(1)(f)) | Cloudflare | As the order (5 years). Logs 12 months. |
| Messages to customers by e-mail | Give notice of new prices (30 days ahead), new terms, recall of a lot, holidays and other matters of the customer relationship, and document that the notice was sent. | Invoice e-mail and the users’ name, e-mail and language. The message as sent, and per recipient: status, time and number of attempts. | Contact persons and users at business customers | Legitimate interest (GDPR Art. 6(1)(f)): the contract with the company. Recall: legal obligation (art. 6(1)(c)) (Food Act, EU 178/2002 Art. 19) | Resend (processor, sends from the EU) | As the order (5 years), as proof of the notice. |
| News by e-mail | Send news about products and offers to those who said yes. | Name, e-mail, language, consent and time. Which news was sent and when. Unsubscribing via the link in every e-mail (time and IP address in the audit log). | Contact persons and users at business customers | Consent (Art. 6(1)(a), Marketing Control Act section 15) | Resend (processor, sends from the EU) | The consent until you unsubscribe. The sending log as the order (5 years). |
| The gallery on Paint the glass | Show glasses that visitors painted and shared, after we approve them, and stop abuse. | The picture of the glass, the strokes and colours, name, workplace and city if you write them, language, time. A hash of the IP address (not the address itself) for the limits on submissions. No e-mail, phone or login. | Visitors who share a picture | Consent to show the picture publicly (Art. 6(1)(a)). The hash: legitimate interest (Art. 6(1)(f)) | Cloudflare (processor). Approved pictures with name, workplace and city are public on paintz.no. | Until the picture is deleted, by us or when you ask at post@paintz.no. You can withdraw consent at any time. |
| Security and audit log | Prevent abuse, limit attempts and know who changed what. | IP address, time, user ID and action (login, sign-up, order, changes). Counters per IP and e-mail for the number of attempts. | Users and visitors | Legitimate interest (GDPR Art. 6(1)(f)) | Cloudflare | IP addresses, logins and rejected attempts: 12 months. Counters: 2 days. Who changed what and when: 5 years. |
| Statistics and heatmaps | Understand how the website is used and improve it. | Random visitor ID, pages, clicks, scrolling, time per part of a page, country and city, device type, browser, operating system, customer ID if logged in. No IP address. | Visitors who said yes | Consent (Art. 6(1)(a), Electronic Communications Act section 3-15) | Cloudflare (processor) | 13 months. Deleted at once if you withdraw consent. |
| Notices to PAINTZ phones | Tell us at once about orders, new customers, visits, glasses waiting for approval in the gallery and new ambassadors, so we can respond quickly. | Visits (only if you said yes to statistics): city, country, device type, first page, the website you came from; company name and items in the cart if you are logged in. Orders and sign-ups: company name, order number, amount. Glasses shared in the gallery and ambassador sign-ups: only how many are waiting. No IP address, e-mail, name or phone. | Visitors who said yes, and business customers | Visits: consent (Art. 6(1)(a), Electronic Communications Act section 3-15). Orders and sign-ups: legitimate interest (Art. 6(1)(f)). | Cloudflare, the push service of our phones (Apple, or Google on Android). The notice is encrypted. | The push service keeps the notice until the phone is online, at most 24 hours. A marker per visit (against repeated notices) is deleted after 2 days. |
| Choice in the cookie banner | Document consent to statistics. | The choice, time, version and random visitor ID. No IP address. | Visitors | Legal obligation (Art. 6(1)(c)) | Cloudflare | 13 months. |
| Traceability and recalls | Know which customers received which lot, and be able to recall. | Lot number per order and customer. | Business customers | Legal obligation (Art. 6(1)(c)): Food Act, Regulation 178/2002 Art. 18 | Food Safety Authority when needed | As the order (5 years). |
| Supplier invoices (office) | Record purchases and costs. | Supplier company, contact person and invoice content. | Contact persons at suppliers | Legal obligation (Art. 6(1)(c)) and legitimate interest (gdpr art. 6(1)(f)) | Cloudflare (processor, reads the invoice with AI, a person checks), Anthropic when switched on | 5 years after the end of the financial year. Then the file and what was read from it are deleted; the prices stay. Rejected documents: 12 months. |
| Ambassador programme | Calculate and pay commission for new customers. | Name, e-mail, code, which customers came through the code, commission. | Ambassadors | Contract (Art. 6(1)(b)) and legal obligation (bookkeeping) | Cloudflare, Tripletex, accountant | 5 years after the end of the financial year. |
| Questions by e-mail and phone | Answer questions and complaints. | Name, e-mail, phone, the content of the message. | Anyone who contacts us | Legitimate interest (GDPR Art. 6(1)(f)) | Domeneshop (e-mail, processor) | As long as the matter requires, at most 3 years. |
Avtale om deling av personopplysninger (versjon 1.0)
The data sharing agreement Cold Pressed AS accepts before it can see a BRUSH order. Norwegian only.
Parter: PAINTZ AS (org.nr. 934 310 659), Innspurten 10B, 0663 Oslo, og Cold Pressed AS (org.nr. 920 401 899), Huitfeldts gate 14A, 0253 Oslo.
- Formål: PAINTZ deler opplysningene bare for at Cold Pressed kan fakturere og gi kundeservice for denne BRUSH-bestillingen.
- Opplysninger: firmanavn, org.nr., fakturaadresse (e-post eller EHF), kontaktpersonens navn, e-post og telefon, leveringsadresse, varelinjer og priser inkl. mva.
- Cold Pressed er selvstendig behandlingsansvarlig for opplysningene etter at de er delt.
- Cold Pressed bruker opplysningene bare til formålet, og beholder dem bare så lenge det trengs, inkludert plikter etter bokføringsloven.
- Cold Pressed sikrer opplysningene og deler dem ikke videre, bortsett fra med egne databehandlere (for eksempel regnskapssystem) og når loven krever det.
- Cold Pressed varsler PAINTZ uten ugrunnet opphold ved brudd på personopplysningssikkerheten som gjelder disse opplysningene.
- Cold Pressed svarer selv på henvendelser fra de registrerte om egen behandling, og gir PAINTZ beskjed hvis henvendelsen også gjelder PAINTZ.
- Avtalen følger norsk rett. Den gjelder hver bestilling som deles via denne typen lenke, til en av partene sier den opp skriftlig.
Your rights
You may ask for access, rectification, erasure, restriction and portability, and object. Write to post@paintz.no. You may complain to Datatilsynet.