Privacy Policy for Nordlys Podcaststudio AS

This privacy policy explains how Nordlys Podcaststudio AS collects, uses, stores, shares, and protects personal data when you use our services, visit our website, contact us, or otherwise interact with us. Nordlys Podcaststudio AS is the data controller for the processing of personal data described in this policy.

1. Introduction and company information

Data controller: Nordlys Podcaststudio AS

Address: Torggata 5, 0181 Oslo, Norway

Email: [email protected]

Phone: +47 23 45 78 19

Business type: Podcast studio

We provide podcast production services, studio rental, recording assistance, editing, post-production, publishing support, and related services. In connection with these services, Nordlys Podcaststudio AS may process personal data about customers, guests, collaborators, suppliers, website visitors, and other persons who contact us.

2. Data collection and processing

Nordlys Podcaststudio AS may collect and process the following categories of personal data:

• Contact information: name, email address, phone number, postal address, company name, and role/title.
• Booking and service information: appointment details, studio reservations, project information, preferences, communication history, and service notes.
• Payment and invoicing information: billing address, payment status, invoice details, and transaction-related information.
• Technical data: IP address, browser type, device information, log data, cookies, and usage statistics from our website or digital services.
• Audio, video, and image recordings: recordings created in our studio or provided to us for production, editing, publication, or archiving.
• Communication data: emails, messages, feedback, support requests, and other correspondence.
• Marketing preferences: consent choices, subscription status, and communication preferences.

We generally collect personal data directly from you, but we may also receive information from business partners, payment providers, booking systems, technical service providers, or publicly available sources where permitted by law.

3. Purpose of data processing

Nordlys Podcaststudio AS processes personal data for the following purposes:

• to provide podcast studio services and manage bookings;
• to communicate with customers, guests, and business partners;
• to produce, edit, store, deliver, and publish audio and video content;
• to administer payments, invoices, accounting, and financial reporting;
• to maintain customer relationships and provide support;
• to improve our services, website, and customer experience;
• to send marketing communications where permitted and/or consented to;
• to comply with legal obligations, including accounting, tax, and record-keeping requirements;
• to establish, exercise, or defend legal claims;
• to ensure security, prevent misuse, and protect our operations, systems, and premises.

4. Legal basis for processing

Nordlys Podcaststudio AS processes personal data on the following legal bases, as applicable under Norwegian privacy law:

• Performance of a contract: where processing is necessary to provide our services, manage bookings, or fulfill agreements with you.
• Legal obligation: where processing is required to comply with applicable laws and regulations, including accounting and tax obligations.
• Legitimate interests: where processing is necessary for our legitimate business interests, such as service improvement, security, fraud prevention, and business administration, provided that your interests and fundamental rights do not override those interests.
• Consent: where you have given us clear consent for specific processing activities, such as certain marketing communications or cookie use where required.

Where processing is based on consent, you may withdraw that consent at any time, without affecting the lawfulness of processing carried out before withdrawal.

5. Data sharing and third parties

Nordlys Podcaststudio AS may share personal data with third parties when necessary and lawful, including:

• IT and hosting providers: for website hosting, cloud storage, email services, backup, and system maintenance;
• Booking and payment providers: to manage reservations, payments, and invoicing;
• Accounting and audit providers: for bookkeeping, tax, and financial administration;
• Production partners and freelancers: such as editors, sound engineers, designers, or other collaborators involved in delivering our services;
• Public authorities: where disclosure is required by law or a lawful request;
• Legal and professional advisers: where needed for legal advice, dispute resolution, or compliance;
• Marketing and analytics providers: where used in connection with our website or communications, subject to applicable legal requirements.

We require third parties that process personal data on our behalf to protect the data and process it only according to our instructions and applicable law.

6. Data transfer to third countries

In some cases, Nordlys Podcaststudio AS may use service providers that store or process personal data outside Norway or the EEA. If personal data is transferred to a third country, we will ensure that appropriate safeguards are in place, such as:

• an adequacy decision by the relevant authorities;
• standard contractual clauses or other approved transfer mechanisms;
• additional technical and organizational safeguards where necessary.

Where required, we will provide further information about such transfers upon request.

7. Storage duration

Nordlys Podcaststudio AS stores personal data only for as long as necessary for the purposes for which it was collected, or as long as required by law. The storage period depends on the type of data and the purpose of processing.

• Customer and booking data: retained for the duration of the customer relationship and for a reasonable period thereafter.
• Accounting and tax records: retained for the period required by applicable law.
• Communication records: retained as long as needed to handle inquiries, service matters, or legal claims.
• Marketing data: retained until you unsubscribe, withdraw consent, or object where applicable.
• Recordings and production files: retained according to contractual arrangements, project needs, storage policies, and legal requirements.

When personal data is no longer needed, we will delete, anonymize, or securely archive it in accordance with applicable law and internal procedures.

8. User rights

Subject to applicable law, you may have the following rights regarding your personal data processed by Nordlys Podcaststudio AS:

• Right of access: to obtain confirmation of whether we process your personal data and receive a copy of that data.
• Right to rectification: to request correction of inaccurate or incomplete personal data.
• Right to erasure: to request deletion of personal data in certain circumstances.
• Right to restriction: to request that we limit processing in certain situations.
• Right to data portability: to receive personal data you have provided to us in a structured, commonly used, machine-readable format, where applicable.
• Right to object: to object to processing based on legitimate interests and to direct marketing at any time.

To exercise your rights, please contact us using the details provided below. We may need to verify your identity before responding. We will respond within the time limits required by applicable law.

9. Withdrawal of consent

Where processing is based on your consent, you may withdraw that consent at any time by contacting Nordlys Podcaststudio AS or using any available unsubscribe or preference-management option. Withdrawal of consent does not affect the lawfulness of processing carried out before the withdrawal.

10. Right to complain

If you believe that Nordlys Podcaststudio AS has processed your personal data in violation of applicable privacy laws, you have the right to lodge a complaint with the competent supervisory authority in Norway, which is the Norwegian Data Protection Authority (Datatilsynet).

We encourage you to contact us first so that we can try to resolve your concern directly and promptly.

11. Data security

Nordlys Podcaststudio AS implements appropriate technical and organizational measures to protect personal data against unauthorized access, alteration, disclosure, loss, or destruction. These measures may include access controls, encryption where appropriate, secure storage, backup procedures, staff confidentiality obligations, and internal security routines.

While we take reasonable steps to protect personal data, no system can be guaranteed to be completely secure. We therefore encourage you to take care when sharing personal information and to contact us if you suspect any misuse or security incident.

12. Contact information

If you have questions about this privacy policy or our processing of personal data, please contact:

Nordlys Podcaststudio AS
Torggata 5, 0181 Oslo, Norway
Email: [email protected]
Phone: +47 23 45 78 19

13. Changes to privacy policy

Nordlys Podcaststudio AS may update this privacy policy from time to time to reflect changes in our services, legal requirements, or processing practices. The updated version will be published on our website or otherwise made available to you where appropriate.

We recommend that you review this privacy policy periodically to stay informed about how Nordlys Podcaststudio AS processes personal data.