Privacy Policy

This policy explains how Shefrealcrax processes personal data in accordance with the General Data Protection Regulation (GDPR), the Norwegian Personal Data Act (Personopplysningsloven), and related Norwegian guidance.

Data controller

Shefrealcrax, Karl Johans gt. 5, 0154 Oslo, Norway. Phone: +47 461 15 797. Email: team@shefrealcrax.world.

How to contact us about privacy

For data subject requests, send an email with subject line "Privacy request" and specify whether you request access, correction, deletion, restriction, portability, or objection.

Data categories

We process contact data (name, email, message), technical log data (IP address, browser, date/time, security events), and consent records (cookie choices and timestamps).

Purpose of processing

We process data to respond to inquiries, maintain website security, fulfill legal obligations, and improve website usability.

Legal basis

Legal basis includes consent (GDPR Art. 6(1)(a)), legitimate interests for security and service reliability (Art. 6(1)(f)), and legal obligations where applicable (Art. 6(1)(c)).

Retention period

Contact form submissions are retained up to 12 months. Security logs may be retained up to 90 days unless legal requirements mandate longer retention.

User rights

You may request access, correction, deletion, restriction, portability, and objection. You can withdraw consent at any time without affecting prior lawful processing.

International transfer safeguards

If data is transferred outside the EEA, we apply lawful safeguards such as standard contractual clauses and technical protections.

Security measures

We use HTTPS encryption, access control, and routine monitoring to reduce unauthorized access risk.

Supervisory authority

You may contact the Norwegian Data Protection Authority (Datatilsynet) regarding complaints about personal data handling.

Automated decision-making

We do not use personal data for automated decisions that produce legal or similarly significant effects.

Policy updates

We may update this policy to reflect regulatory or operational changes. Material updates will be published on this page with a revised date.