1. INTRODUCTION

This privacy policy provides an overview of how Skjulte Skatters Forlag (hereinafter referred to as “SSF”) collects and uses personal information. It explains why and how SSF collects personal information about you, how this information is used, and how we take into account your privacy in the processing of this information.

Personal information is information that can be linked to you as a person. There may be names and contact information, but also a lot of other information that can be linked to you more indirectly.

For SSF, it is important that you know what kind of personal data we process, so that you can safeguard your rights under the privacy laws.

SSF is responsible for our processing of personal data. For more information on key concepts in the Personal Data Act, see a separate section on Glossary.

If you have any questions about this privacy policy, you can contact us at the e-mail address forlaget@skjulte-skatter.no or via our contact form.

2. FIELD OF OPERATION

SSF’s operations involve the processing of personal data in activities related to our websites, applications and social media accounts, i.e. all the situations you as an audience have contact with SSF via electronic communication services. SSF develops and manages these services (hereafter referred to as “Services”) on different platforms.

SSF’s Services are divided into several areas of activities . This policy applies the following websites and applications:

• hiddentreasures.org
• skjulte-skatter.no

These websites and applications use a number of Services, both self-developed and third-party services.

3. PURPOSE

SSF processes personal information about you with the following purposes:

• To deliver and maintain the Services.
• To customize and further develop the Services.

If your personal information is to be processed for a purpose other than that stated here the new purpose will be stated and parts of information given here will be repeated.

3.1.1 Provide and Maintain the Services

SSF processes your personal information in order to be able to deliver and maintain the Services to various platforms, so that the services function and appear in an intentional and predictable manner for you as a user.

SSF processes your personal information in order to handle any errors with the Services or to prevent misuse.

SSF processes your personal information to identify you and maintain a user account for you in our Services. This gives you, for example, the opportunity to manage your user profile, and gives us the opportunity to inform you about matters of importance for your user account or for your use of the Services.

3.1.2 Customize and further develop the Services

SSF processes your personal information in order to be able to adapt the Services to you personally, your user habits and interests, so that we can, for example, adapt the content that is displayed in the Services for you. SSF processes your personal information in order to learn about the use of, and further develop the Services for the benefit of you and other users.

4. PERSONAL INFORMATION PROCESSING, BASIS AND PURPOSE

We process the following personal information about everyone who uses our Services:

4.1 Available information about your device and the internet connection

When you use the Services, we collect information about, for example, the name of the manufacturer of the computer, mobile phone, which operating system the device has, which browser version is used, as well as information about the connection to the Services, such as IP address. The purpose of collecting this information is to provide you and other users with a better user experience, and to prevent misuse of the Services.

The basis for our use of personal data for this purpose is legitimate interest. The legitimate interest is to improve and further develop the Services for the benefit of you and other users.

4.2 Search Engines

SSF about which keywords you use in our search tools. The keywords are stored in a separate database, and they are only stored in aggregate form. Only the search is stored and cannot be linked to other personal information. The purpose is to make the content of the Services available.

The basis for our use of personal data for this purpose is legitimate interest. The legitimate interest is to improve and further develop the Services for the benefit of you and other users.

4.3 Analysis and statistics

We analyze the use of and interaction with the Services. The analysis is made based on actions performed on your device. The statistics are anonymized so that we are not able to link the information back to individuals. The basis for our use of personal data for this purpose is legitimate interest. The legitimate interest is to improve and further develop the Services for the benefit of you and other users.

4.4 Cookies

Our website uses only essential cookies that are necessary to ensure the basic functionality of the site. These cookies are used, for example, to:

• Maintain user sessions (e.g., for logging in).
• Ensure the security and proper operation of the website.

We do not use analytics, tracking, or marketing cookies. Since essential cookies are required for the technical operation of the website, their use does not require prior user consent.

4.5 Logged in user

If you are a logged-in user of the Services, we process, in addition to mandatory fields such as name and e-mail address, the personal information you provide, such as year of birth, gender and photo.

Logged in users will receive a personalized service. In order to offer you this service, SSF analyzes your usage patterns in order to uncover behaviors and preferences to provide recommendations and content that are relevant to you. Your personal information tells us something about how and when you use the Services, and whether you consume content across devices and platforms as well as how often you use our content. All your interactions with the Services may affect this result.

5. DATA PROCESSORS AND THIRD PARTIES

In order to provide the Services to you, SSF uses several external service providers. Some of these are data processors that process personal data on behalf of SSF, while others are third parties that process personal data on their own behalf.

5.1 Data Processors

SSF uses several data processors that give us insight into usage patterns and interaction with our Services.

When a data processor processes personal data on behalf of SSF, this is regulated in data processor agreements or through other mechanisms that ensure the secure processing of your personal data.

5.2 Third Party To adapt and further develop the Services, SSF uses third-party services such as elements from Google, Facebook, YouTube, X or Instagram, where you as a user can have your own user account of the built-in third-party service. SSF will then, among other things, be able to see overall information (including age, gender and location), get statistics on how many people have been on the site and seen the posts, how many people have responded with clicks and reactions, etc. Third party services available on our Services are subject to the third party privacy policy. We encourage you to familiarize yourself with these.

6. YOUR RIGHTS

You can exercise your rights by contacting us at forlaget@skjulte-skatter.no or via our contact form. You are entitled to a response without undue delay, and no later than within 30 days.

6.1 WITHDRAWAL OF CONSENT

In cases where the foundational basis for your personal data is linked to consent, you can withdraw your consent, for example by accessing your user profile, by accessing the settings of the Service, or by contacting us.

6.2 TRANSPARENCY OF OWN INFORMATION

You can request access to which personal data SSF processes about you.

6.3 CORRECTION OF PERSONAL INFORMATION

You can ask us to correct or supplement information about yourself that is incorrect or misleading. If you have created a user profile with (or shared with) SSF, you have the opportunity to go in and make the changes under settings/profile.

6.4 DELETION OF PERSONAL INFORMATION

In some situations, you can ask us to delete information about yourself. Read more about the right to deletion on the Data Protection Authority website.

6.5 OTHER RIGHTS

If you believe that we have registered incorrect personal information about you, you wish to oppose the processing of personal information, or you have experienced something that you believe is a breach of the privacy regulations, we ask you to contact us at the e-mail address forlaget@skjulte-skatter.no or via our contact form. You can also complain about our processing of personal data to the Norwegian Data Protection Authority.

You can limit the amount of information processed by using private mode settings on your device. This means, for example, that you can block cookies in your browser, or prevent the browser from logging your browser and tracking websites you visit by putting your browser in private mode. The quality of the Services may be affected by such measures.

7. INFORMATION SECURITY

SSF’s general principles for information security apply to all users, systems and services in SSF related to the websites and applications listed in the section “Field of operation”.

These measures shall contribute to SSF’s information values being secured in a systematic and satisfactory manner. The basic principles are used as a basis for planning, organizing and implementing all projects that deal with information systems.

8. GLOSSARY

By privacy is meant a statutory protection of privacy and your personal integrity. The protection includes your right to influence the use and dissemination of personal information about you.

By person is meant a living identified or identifiable natural person.

Personal information means information and assessments that can be linked to you as a person. Examples can be name, address, telephone number, e-mail address, IP address, car license number, photos, date of birth and social security number. Information about behavior patterns is also considered personal information. This can be, for example, information about what TV series you are watching and where you are. Information about you that informs about your racial or ethnic background, about your political, philosophical or religious beliefs, health conditions, sexual relationships, and any information that you have been suspected, charged, indicted or convicted of a criminal offense, as well as union membership, is defined as sensitive personal information.

By processing of personal data is meant all operations performed with personal data, such as collection, registration, structuring, storage and dissemination.

By data controller is meant the company that is responsible for the processing of personal data, determines the purpose of the processing, and which instruments are to be used.

Personal data shall only be processed for specific, explicit, stated and legitimate purposes.

A data processor is a company that processes personal data on behalf of the data controller.

A data processor agreement is an agreement between the data processor and the data controller on how personal data is to be processed.

By basis of processing is meant the statutory basis for the processing of personal data. SSF uses one of these treatment bases:

– the registered person has consented to the processing, cf. the Privacy Ordinance art. 6 (1) (a)

– it intends to fulfill an agreement to which the data subject is a party, cf. the Privacy Ordinance art. 6 No. 1 b)

– it is necessary for purposes related to the legitimate interests pursued by the data controller or a third party, unless the data subject’s interests or fundamental freedoms take precedence and require the protection of personal data, cf. the Privacy Ordinance art. 6 No. 1 f)

By consent is meant a voluntary, specific, informed, unambiguous and active statement from you that you accept the processing of given personal data. A consent can be withdrawn at any time.

SSF may process personal data if it is necessary to fulfill an agreement to which you are a party. The same applies where the processing is necessary to implement measures that you have requested before entering into an agreement. SSF may process personal data if it is necessary to safeguard a legitimate interest that outweighs the interests of the individual’s privacy. SSF uses this treatment basis only where the invasion of your privacy is very small, and where the advantages outweigh the disadvantages.