The General Data Protection Regulation (GDPR) is a European Union regulation that governs the collection, storage, and processing of personal data. As a business operating in Norway (part of the European Economic Area), Bakkerij Noord fully complies with GDPR requirements.
Data Controller
Bakkerij Noord acts as the data controller for personal information collected through this website and our services. This means we determine the purposes and means of processing your personal data.
Contact details for data protection inquiries:
Bakkerij Noord
Storgata 42
0182 Oslo, Norway
[email protected]
Legal Basis for Processing
We process personal data under the following legal bases as defined by GDPR Article 6:
- Contract performance: Processing necessary to fulfil orders you have placed with us
- Legitimate interests: Processing for business operations, website improvement, and security purposes where these interests do not override your rights
- Consent: Where you have given explicit consent for specific processing activities, such as marketing communications
- Legal obligation: Processing required to comply with Norwegian law and regulations
Your Rights Under GDPR
As a data subject, you have the following rights:
Right of Access (Article 15)
You may request confirmation of whether we process your personal data and, if so, access to that data along with information about how it is processed.
Right to Rectification (Article 16)
You may request correction of inaccurate personal data or completion of incomplete data.
Right to Erasure (Article 17)
You may request deletion of your personal data under certain circumstances, such as when the data is no longer necessary for its original purpose or when you withdraw consent.
Right to Restriction (Article 18)
You may request that we restrict processing of your data in certain situations, such as when you contest its accuracy.
Right to Data Portability (Article 20)
You may request to receive your personal data in a structured, commonly used, machine-readable format and transmit it to another controller.
Right to Object (Article 21)
You may object to processing based on legitimate interests or for direct marketing purposes.
International Data Transfers
Your personal data is primarily stored and processed within the European Economic Area. If any data transfer outside the EEA is necessary, we ensure appropriate safeguards are in place, such as Standard Contractual Clauses approved by the European Commission.
Data Protection Officer
Given the scale and nature of our processing activities, we are not required to appoint a Data Protection Officer under GDPR Article 37. However, all data protection inquiries can be directed to our management team at the contact details provided above.
Supervisory Authority
If you believe your data protection rights have been violated, you have the right to lodge a complaint with the Norwegian Data Protection Authority (Datatilsynet):
Datatilsynet
Postboks 458 Sentrum
0105 Oslo, Norway
Website: datatilsynet.no
Updates to This Information
This GDPR information page may be updated periodically to reflect changes in our practices or legal requirements. We encourage you to review it regularly.
Last updated: January 2024