Privacy Policy for NordLyd Podcaststudio
This privacy policy explains how NordLyd Podcaststudio collects, uses, stores, shares, and protects personal data in connection with the operation of its podcast-room services.
1. Introduction and company information
The data controller for the processing of personal data described in this privacy policy is:
- Company name: NordLyd Podcaststudio
- Address: Thorvald Meyers gate 7, 0555 Oslo, Norway
- Email: [email protected]
- Phone: +47 23 45 67 89
NordLyd Podcaststudio provides podcast-room services, including room booking, studio access, customer support, invoicing, and related operational services. We process personal data in a lawful, fair, and transparent manner and only for specified purposes.
2. Data collection and processing
NordLyd Podcaststudio may collect and process the following categories of personal data:
- Contact information: name, email address, phone number, and company name if applicable.
- Booking information: reservation dates, time slots, service selections, special requests, and communication related to bookings.
- Payment and billing information: invoice details, payment status, and transaction references. Payment card details are typically processed by third-party payment providers and are not stored by us unless necessary for administrative purposes.
- Technical data: IP address, device information, browser type, log data, and usage data when visiting our website or digital services.
- Communication data: messages sent to us by email, phone, contact forms, or other channels.
- Security and access data: access logs, entry records, and other information necessary to manage studio access and protect our premises.
We generally collect personal data directly from you when you make a booking, contact us, use our services, or interact with our website. In some cases, we may receive data from third parties such as payment providers, booking platforms, or business partners.
3. Purpose of data processing
NordLyd Podcaststudio processes personal data for the following purposes:
- to manage bookings and provide podcast-room services;
- to communicate with customers and respond to inquiries;
- to issue invoices, process payments, and handle accounting obligations;
- to maintain access control, safety, and security at our premises;
- to improve our services, website, and customer experience;
- to comply with legal obligations, including accounting, tax, and record-keeping requirements;
- to establish, exercise, or defend legal claims;
- to send service-related notices and, where permitted, marketing communications.
4. Legal basis for processing
We process personal data only where we have a valid legal basis. Depending on the context, the legal basis may include:
- Performance of a contract: when processing is necessary to provide booked services, manage reservations, or fulfill customer requests.
- Legal obligation: when processing is required to comply with applicable laws, including accounting and tax obligations.
- Legitimate interests: when processing is necessary for our legitimate business interests, such as service improvement, fraud prevention, security, and administration, provided that your interests and fundamental rights do not override those interests.
- Consent: when we rely on your consent, for example for certain marketing activities or optional cookies where applicable.
5. Data sharing and third parties
NordLyd Podcaststudio may share personal data with third parties only when necessary and appropriate for the purposes described in this policy. Such third parties may include:
- payment service providers;
- booking and scheduling system providers;
- IT hosting, cloud, and software service providers;
- accountants, auditors, legal advisers, and other professional advisers;
- public authorities, where required by law;
- security and access control service providers.
We require third parties that process personal data on our behalf to protect the data and to use it only according to our instructions and applicable law.
6. Data transfer to third countries
In some cases, personal data may be transferred to or accessed from countries outside Norway or the European Economic Area (EEA), for example where we use international service providers or cloud-based tools. If such transfers occur, NordLyd Podcaststudio will implement appropriate safeguards and ensure that the transfer is carried out in accordance with applicable data protection requirements.
7. Storage duration
NordLyd Podcaststudio stores personal data only for as long as necessary for the purposes for which it was collected, or as required by law. Storage periods may vary depending on the type of data and the purpose of processing.
- Booking and customer records: retained for the duration of the customer relationship and for a reasonable period thereafter.
- Accounting and tax records: retained for the period required by applicable law.
- Communication records: retained as long as needed to handle the inquiry and for follow-up purposes.
- Security logs: retained for a limited period unless a longer retention period is necessary for security incidents or legal claims.
When personal data is no longer needed, we will delete, anonymize, or securely archive it in accordance with our retention practices and legal obligations.
8. User rights
Subject to applicable law, you may have the following rights regarding your personal data:
- Access: the right to request confirmation of whether we process your personal data and to receive a copy of that data.
- Rectification: the right to request correction of inaccurate or incomplete personal data.
- Erasure: the right to request deletion of your personal data in certain circumstances.
- Restriction: the right to request that we limit the processing of your personal data in certain situations.
- Data portability: the right to receive certain personal data in a structured, commonly used, machine-readable format and to transmit it to another controller where technically feasible.
- Objection: the right to object to processing based on legitimate interests and, where applicable, direct marketing.
To exercise any of these rights, please contact NordLyd Podcaststudio using the contact details below. We may request additional information to verify your identity before responding to your request.
9. Withdrawal of consent
Where processing is based on your consent, you may withdraw that consent at any time. Withdrawal of consent does not affect the lawfulness of processing carried out before the withdrawal. If you withdraw consent, we may no longer be able to provide certain optional services or communications.
10. Right to complain
If you believe that NordLyd Podcaststudio has processed your personal data in a way that is not compliant with applicable law, you have the right to lodge a complaint with the relevant supervisory authority. You may also contact us directly so that we can address your concerns.
11. Data security
NordLyd Podcaststudio implements appropriate technical and organizational measures to protect personal data against unauthorized access, loss, misuse, alteration, or disclosure. These measures may include access controls, secure systems, encryption where appropriate, staff confidentiality obligations, and regular review of security practices.
Although we take reasonable steps to protect personal data, no system can be guaranteed to be completely secure. We therefore encourage users to take appropriate precautions when sharing information electronically.
12. Contact information
If you have questions about this privacy policy or our processing of personal data, or if you wish to exercise your rights, please contact:
- NordLyd Podcaststudio
- Thorvald Meyers gate 7, 0555 Oslo, Norway
- Email: [email protected]
- Phone: +47 23 45 67 89
13. Changes to privacy policy
NordLyd Podcaststudio may update this privacy policy from time to time to reflect changes in our services, legal requirements, or data processing practices. The updated version will be published with a revised effective date where appropriate. We encourage you to review this policy periodically to stay informed about how we process personal data.