privacy policy

1. Data Protection at a Glance

General Information

The following information provides a simple overview of what happens to your personal data when you visit this website. Personal data is any information that can be used to identify you personally. For detailed information on data protection, please refer to our privacy policy provided below this text.

Who is responsible for data collection on this website?

The data processing on this website is carried out by the website operator. You can find their contact details in the section "Notice regarding the responsible party" in this privacy policy.

How do we collect your data?

Your data is collected in two ways. Firstly, when you provide it to us, such as by entering information into a contact form.

Other data is collected automatically or with your consent when you visit the website, primarily technical data (e.g., internet browser, operating system, or the time the page was accessed). This data is collected automatically as soon as you enter the website.

What do we use your data for?

Some of the data is collected to ensure the website is provided without errors. Other data may be used to analyze your user behavior.

What rights do you have regarding your data?

You have the right to receive information about the origin, recipients, and purpose of your stored personal data at any time, free of charge. You also have the right to request the correction or deletion of this data. If you have given consent to data processing, you can withdraw this consent at any time for the future. Additionally, you have the right to request the restriction of the processing of your personal data under certain circumstances. Furthermore, you have the right to file a complaint with the relevant supervisory authority.

For these and any other questions regarding data protection, you can contact us at any time.

2. Hosting

We host the content of our website with the following provider:

Webflow

The provider is Webflow, Inc., 398 11th Street, 2nd Floor, San Francisco, CA 94103, USA (hereinafter referred to as Webflow). When you visit our website, Webflow collects various log files, including your IP addresses. Webflow is a tool for creating and hosting websites. Webflow stores cookies or other recognition technologies that are necessary for displaying the site, providing certain website functions, and ensuring security (necessary cookies). For details, please refer to Webflow's privacy policy: https://webflow.com/legal/eu-privacy-policy.

The use of Webflow is based on Article 6(1)(f) of the GDPR. We have a legitimate interest in the most reliable presentation of our website. If consent has been requested, processing is exclusively based on Article 6(1)(a) of the GDPR and Section 25(1) of the German TTDSG, as far as consent includes the storage of cookies or access to information on the user's device (e.g., device fingerprinting) within the meaning of the TTDSG. Consent can be withdrawn at any time.

Data transfer to the USA is based on the EU Commission's standard contractual clauses. Details can be found here: https://webflow.com/legal/eu-privacy-policy. The company is certified under the "EU-US Data Privacy Framework" (DPF). The DPF is an agreement between the European Union and the USA to ensure compliance with European data protection standards when processing data in the USA. Any company certified under the DPF commits to adhering to these data protection standards. Further information can be obtained from the provider at the following link: https://www.dataprivacyframework.gov/s/participant-search/participant-detail?contact=true&id=a2zt0000000TT9jAAG&status=Active.

Data Processing Agreement (DPA)

We have entered into a Data Processing Agreement (DPA) for the use of the aforementioned service. This is a legally required contract under data protection law that ensures the service processes the personal data of our website visitors only according to our instructions and in compliance with the GDPR.

3. General Information and Mandatory Disclosures

Data Protection

The operators of these pages take the protection of your personal data very seriously. We handle your personal data confidentially and in accordance with the legal data protection regulations and this privacy policy.

When you use this website, various personal data are collected. Personal data refers to data that can be used to personally identify you. This privacy policy explains what data we collect and how we use it. It also explains how and for what purpose this occurs.

We would like to point out that data transmission over the Internet (e.g., communication via email) can have security vulnerabilities. Complete protection of the data from third-party access is not possible.

Notice Regarding the Responsible Party

The responsible party for data processing on this website is:

Norskie Studio  
Inh. Frederik Rein  
Zeller Str. 57  
73275 Ohmden  

Email: hello@norskie.co

The responsible party is the natural or legal person who, alone or jointly with others, determines the purposes and means of processing personal data (e.g., names, email addresses, etc.).

Storage Duration

Unless a more specific storage period is mentioned in this privacy policy, your personal data will remain with us until the purpose for data processing no longer applies. If you make a legitimate request for deletion or withdraw your consent to data processing, your data will be deleted unless we have other legally permissible reasons to retain your personal data (e.g., tax or commercial retention periods); in such cases, the data will be deleted once these reasons no longer apply.

General Information on the Legal Basis for Data Processing on This Website

If you have consented to data processing, we process your personal data based on Article 6(1)(a) of the GDPR or Article 9(2)(a) of the GDPR if special categories of data according to Article 9(1) of the GDPR are processed. In the case of explicit consent to the transfer of personal data to third countries, data processing is also based on Article 49(1)(a) of the GDPR. If you have consented to the storage of cookies or access to information on your device (e.g., via device fingerprinting), data processing is additionally based on Section 25(1) of the German TTDSG. Consent can be revoked at any time.

If your data is required to fulfill a contract or for pre-contractual measures, we process your data based on Article 6(1)(b) of the GDPR. Furthermore, if data processing is required to fulfill a legal obligation, we process your data based on Article 6(1)(c) of the GDPR. Data processing may also be carried out based on our legitimate interest under Article 6(1)(f) of the GDPR. The specific legal basis applicable in each case is explained in the following sections of this privacy policy.

Recipients of Personal Data

As part of our business activities, we collaborate with various external entities. In some cases, it is necessary to transfer personal data to these external parties. We only share personal data with external parties when it is required for contract fulfillment, when we are legally obligated to do so (e.g., sharing data with tax authorities), when we have a legitimate interest according to Article 6(1)(f) of the GDPR in sharing the data, or when another legal basis permits data sharing. When using data processors, we share personal data of our customers only based on a valid Data Processing Agreement (DPA). In cases of joint processing, a contract for joint processing is established.

Revocation of Your Consent to Data Processing

Many data processing activities are only possible with your explicit consent. You can revoke any previously given consent at any time. The legality of the data processing carried out prior to the revocation remains unaffected by the revocation.

Right to Object to Data Collection in Special Cases and to Direct Marketing (Art. 21 GDPR)

IF DATA PROCESSING IS BASED ON ARTICLE 6(1)(E) OR (F) OF THE GDPR, YOU HAVE THE RIGHT, AT ANY TIME, TO OBJECT TO THE PROCESSING OF YOUR PERSONAL DATA FOR REASONS ARISING FROM YOUR PARTICULAR SITUATION; THIS ALSO APPLIES TO PROFILING BASED ON THESE PROVISIONS. THE SPECIFIC LEGAL BASIS FOR PROCESSING CAN BE FOUND IN THIS PRIVACY POLICY. IF YOU OBJECT, WE WILL NO LONGER PROCESS YOUR AFFECTED PERSONAL DATA UNLESS WE CAN DEMONSTRATE COMPELLING LEGITIMATE GROUNDS FOR THE PROCESSING THAT OVERRIDE YOUR INTERESTS, RIGHTS, AND FREEDOMS OR THE PROCESSING IS FOR THE ESTABLISHMENT, EXERCISE, OR DEFENSE OF LEGAL CLAIMS (OBJECTION UNDER ARTICLE 21(1) GDPR).

IF YOUR PERSONAL DATA IS PROCESSED FOR DIRECT MARKETING PURPOSES, YOU HAVE THE RIGHT TO OBJECT AT ANY TIME TO THE PROCESSING OF YOUR PERSONAL DATA FOR SUCH MARKETING; THIS ALSO APPLIES TO PROFILING INSOFAR AS IT IS RELATED TO SUCH DIRECT MARKETING. IF YOU OBJECT, YOUR PERSONAL DATA WILL NO LONGER BE USED FOR DIRECT MARKETING PURPOSES (OBJECTION UNDER ARTICLE 21(2) GDPR).

Right to Lodge a Complaint with the Competent Supervisory Authority

In the event of violations of the GDPR, affected individuals have the right to lodge a complaint with a supervisory authority, particularly in the member state of their habitual residence, place of work, or the location of the alleged violation. The right to lodge a complaint exists without prejudice to other administrative or judicial remedies.

Right to Data Portability

You have the right to receive data that we process automatically based on your consent or in fulfillment of a contract, in a commonly used, machine-readable format, either for yourself or for a third party. If you request the direct transfer of the data to another responsible party, this will only be done if it is technically feasible.

Information, Correction, and Deletion

Within the scope of applicable legal provisions, you have the right to obtain information about your stored personal data, its origin, recipients, and the purpose of data processing at any time, free of charge. You may also have the right to request the correction or deletion of this data. For this and any other questions related to personal data, you can contact us at any time.

Right to Restrict Processing

You have the right to request the restriction of the processing of your personal data. You can contact us at any time for this. The right to restrict processing applies in the following cases:
  • If you dispute the accuracy of your personal data stored with us, we usually need time to verify this. During the period of verification, you have the right to request the restriction of the processing of your personal data.
  • If the processing of your personal data was/is unlawful, you can request the restriction of data processing instead of deletion.
  • If we no longer need your personal data, but you require it for the establishment, exercise, or defense of legal claims, you have the right to request the restriction of the processing of your personal data instead of deletion.
  • If you have lodged an objection under Article 21(1) of the GDPR, a balance must be struck between your interests and ours. As long as it has not been determined whose interests prevail, you have the right to request the restriction of the processing of your personal data.
If the processing of your personal data has been restricted, these data—apart from being stored—may only be processed with your consent or for the establishment, exercise, or defense of legal claims, or for the protection of the rights of another natural or legal person, or for reasons of important public interest of the European Union or a member state.

SSL or TLS Encryption

For security reasons and to protect the transmission of confidential content, such as orders or inquiries you send to us as the site operator, this site uses SSL or TLS encryption. You can recognize an encrypted connection by the fact that the browser’s address bar changes from "http://" to "https://" and a lock icon appears in your browser bar.

When SSL or TLS encryption is activated, the data you transmit to us cannot be read by third parties.

4. Data Collection on This Website

Cookies

Our website uses so-called "cookies." Cookies are small data packets that do not harm your device. They are either temporarily stored for the duration of a session (session cookies) or permanently stored (permanent cookies) on your device. Session cookies are automatically deleted after your visit ends. Permanent cookies remain stored on your device until you delete them yourself or your web browser automatically deletes them.

Cookies can either be set by us (first-party cookies) or by third-party companies (so-called third-party cookies). Third-party cookies allow the integration of certain services from third-party companies on websites (e.g., cookies for processing payment services).

Cookies serve different purposes. Many cookies are technically necessary because certain website functions would not work without them (e.g., the shopping cart function or video display). Other cookies may be used to analyze user behavior or for advertising purposes.

Cookies required for electronic communication, providing certain functions you desire (e.g., shopping cart), or optimizing the website (e.g., cookies for measuring web audience) are stored based on Article 6(1)(f) of the GDPR, unless another legal basis is specified. The website operator has a legitimate interest in storing necessary cookies to ensure the technically error-free and optimized provision of its services. If consent has been requested for the storage of cookies or similar recognition technologies, processing is carried out exclusively on the basis of that consent (Article 6(1)(a) of the GDPR and Section 25(1) of the TTDSG); consent can be revoked at any time.

You can configure your browser to notify you when cookies are set, allow cookies only in individual cases, exclude the acceptance of cookies in certain cases or in general, and enable the automatic deletion of cookies when you close your browser. Disabling cookies may limit the functionality of this website.

You can find which cookies and services are used on this website in this privacy policy.

Contact Form

If you send us inquiries via the contact form, the information you provide, including the contact details you entered, will be stored by us for the purpose of processing the inquiry and in case of follow-up questions. We do not share this data without your consent.

The processing of this data is based on Article 6(1)(b) of the GDPR if your inquiry is related to the fulfillment of a contract or is necessary for the implementation of pre-contractual measures. In all other cases, the processing is based on our legitimate interest in the effective handling of inquiries directed to us (Article 6(1)(f) GDPR) or on your consent (Article 6(1)(a) GDPR), if this was requested; consent can be revoked at any time.

The data you provide in the contact form will remain with us until you request its deletion, revoke your consent to storage, or the purpose for storing the data no longer applies (e.g., after your inquiry has been fully processed). Mandatory legal provisions—particularly retention periods—remain unaffected.

Request via Email, Phone, or Fax

If you contact us via email, phone, or fax, your inquiry, including all resulting personal data (name, inquiry), will be stored and processed by us for the purpose of handling your request. We do not share this data without your consent.

The processing of this data is based on Article 6(1)(b) of the GDPR if your request is related to the fulfillment of a contract or is necessary for the implementation of pre-contractual measures. In all other cases, the processing is based on our legitimate interest in the effective handling of inquiries directed to us (Article 6(1)(f) GDPR) or on your consent (Article 6(1)(a) GDPR), if this was requested; consent can be revoked at any time.

The data you send us through contact inquiries will remain with us until you request its deletion, revoke your consent to storage, or the purpose for storing the data no longer applies (e.g., after your request has been fully processed). Mandatory legal provisions—particularly legal retention periods—remain unaffected.

5. Plugins and Tools

Google reCAPTCHA

We use "Google reCAPTCHA" (hereinafter referred to as "reCAPTCHA") on this website. The provider is Google Ireland Limited ("Google"), Gordon House, Barrow Street, Dublin 4, Ireland.

The purpose of reCAPTCHA is to check whether data entry on this website (e.g., in a contact form) is done by a human or through an automated program. To do this, reCAPTCHA analyzes the behavior of website visitors based on various characteristics. This analysis begins automatically as soon as the website visitor enters the site. reCAPTCHA evaluates various information for this analysis (e.g., IP address, time spent on the website, or mouse movements made by the user). The data collected during the analysis is forwarded to Google.

The reCAPTCHA analysis runs entirely in the background. Website visitors are not informed that an analysis is taking place.

The storage and analysis of data are based on Article 6(1)(f) of the GDPR. The website operator has a legitimate interest in protecting its web offerings from abusive automated spying and spam. If consent has been requested, the processing is carried out exclusively on the basis of Article 6(1)(a) of the GDPR and Section 25(1) of the TTDSG, as far as the consent includes the storage of cookies or access to information on the user's device (e.g., device fingerprinting) in the sense of the TTDSG. Consent can be revoked at any time.

Further information about Google reCAPTCHA can be found in Google's privacy policy and terms of use at the following links:  
https://policies.google.com/privacy?hl=en and https://policies.google.com/terms?hl=en.

The company is certified under the "EU-US Data Privacy Framework" (DPF). The DPF is an agreement between the European Union and the United States that ensures compliance with European data protection standards when processing data in the U.S. Every company certified under the DPF commits to adhering to these data protection standards. For more information, you can refer to the following link: https://www.dataprivacyframework.gov/participant/5780.