Privacy Policy

Frann-Eirik Nygård is the data controller for the processing of personal data as described in this privacy policy. In this privacy policy, we explain what types of personal data we store and how we process it. This privacy policy applies to: www.aeraxysdesign.com | Aeraxys Design

Legal Basis for Processing

Our processing of personal data is based on:

• Contract performance: Processing necessary to fulfill our agreement with you
• Legal obligation: Processing required to comply with legal requirements (e.g., accounting laws, tax obligations)
• Legitimate interest: Processing for business development, customer service, and security
• Consent: For marketing, analytics, and advertising purposes (where applicable)

Personal Data We Collect and Process

We process the following categories of personal data:

• Basic information: Name
• Contact information: Address, phone number, email address
• Account and profile information: Settings, preferences
• Payment information: Transaction information, payment method
• Customer history and engagement: Order and delivery information, shopping cart activity, discount codes, loyalty program information
• Customer activity: Reading and action history from app, websites, or electronic communication we send out, as well as technical information about the devices you use
• Business information: For business customers, company name, VAT number, and business address

The personal data is collected directly from you or generated in connection with your use of our services and products.

Cookies and Analytics

Use of Cookies

We use cookies on our website to improve user experience, collect statistics about website usage, and to customize advertising and marketing. Cookies are small text files stored on your device when you visit our website.

Google Analytics and Advertising

We use Google Analytics to analyze how visitors use our website. Google Analytics uses cookies to collect information about:

• Number of visitors to the website
• Which pages are visited
• How long visitors stay on pages
• Which browser and device is used
• Geographic location (at city/region level)
• How visitors found the website

Information collected via Google Analytics and other analysis tools can be used to understand user behavior and improve the website. With your consent, data may also be used to customize ads and marketing content.

Sharing Personal Data with Google for Advertising

When you consent to cookies for advertising purposes, we also share encrypted personal data (such as email addresses) with Google to improve measurement of advertising effectiveness and conversions. This information is sent in encrypted form (hashing) and is used to connect your actions on our website with ads you have seen. This is called "Enhanced Conversions" and helps us understand how well our ads work and optimize future marketing.

The data shared includes:

• Email addresses (encrypted)

Information is only sent if you have consented to cookies for advertising purposes. Google processes this information according to their own privacy policies.

Cookie Consent

On your first visit to our website, you will be asked to consent to our use of cookies for analysis and/or advertising purposes. You can withdraw your consent or change your cookie settings at any time via the "Cookies" link at the bottom of the page. If you do not consent to the use of cookies for these purposes, we will only use necessary cookies that are essential for the website to function.

For more information about how Google processes data, see Google's Privacy Policy and Google's Advertising Terms.

How We Use Personal Data

Service Delivery/Contract Performance

We use your personal data to fulfill our agreements with you, i.e., when you have ordered a product or service from us. The legal basis for processing personal data for this purpose is that the processing is necessary to fulfill an agreement with you.

Customer Relationship Management

We use your personal data to administer our customer relationship with you. This may include customer service, complaint handling, and error correction regarding your customer relationship. The legal basis for processing personal data for this purpose is that the processing is necessary to fulfill an agreement with you.

Analysis, Business Development and Service Improvement

We work continuously to develop and improve our services and products. Much of this work involves analyzing various forms of personal data, such as customer activity, customer history, and account and profile information. The legal basis for processing personal data for this purpose is our legitimate interest.

Customized User Experience

We customize the user experience and communication to your customer relationship, and we use personal data for this. The legal basis for processing personal data for this purpose is our legitimate interest.

Marketing and Contact

When you contact us via the contact form on our websites, we collect your email address and any Google Click ID (GCLID) if you came to the site via one of our ads. We also share encrypted personal data (such as email addresses) with Google to measure the effectiveness of our marketing and improve advertising. Processing is based on your consent, which you give through both the cookie banner and the contact form. Email addresses shared with Google for advertising purposes are stored for 90 days before being deleted. You can withdraw your consent at any time. Contact us if you want your data deleted before 90 days have passed.

System Monitoring, Error Correction, etc.

We monitor our systems for errors and problems. Some of these processes involve storing and processing personal data. The legal basis for processing personal data for this purpose is our legitimate interest.

Security, Detection of Fraud and Criminal Acts

We process personal data in our work to protect our users and ourselves against fraudulent activity, misuse, and criminal acts. The legal basis for processing personal data for this purpose is our legitimate interest.

Compliance with Legal Obligations

In some cases, we are required to process personal data due to other legal obligations. An example is information related to sales, which we are required to account for and store according to the Accounting Act. The legal basis for processing personal data for this purpose is that the processing is necessary to fulfill a legal obligation that applies to us.

Data Sharing with Third Parties

We share personal data with the following third parties:

Google/Alphabet Inc.: We share encrypted personal data with Google for advertising and analytics purposes, including Enhanced Conversions to measure advertising effectiveness. This only occurs if you have consented to cookies for advertising purposes. Data is sent to the USA with appropriate protection measures.

Payment Processors: We share necessary payment information with payment service providers to process transactions.

Shipping Providers: We share delivery information with shipping companies to fulfill orders.

Other Service Providers: We may share necessary personal data with other suppliers who help us deliver our services. These are contractually bound to only process data on our instructions.

International Data Transfers

Some of our service providers are located outside the EU/EEA, including Google (USA). When we transfer personal data to countries outside the EU/EEA, we ensure appropriate safeguards are in place, such as:

• Standard Contractual Clauses approved by the European Commission
• Adequacy Decisions by the European Commission
• Binding Corporate Rules for multinational companies

Data Retention

We retain personal data only as long as necessary for the purposes outlined in this privacy policy:

• Contract and customer data: Retained for the duration of the customer relationship and as required by law (typically 5-10 years for accounting purposes)
• Marketing data: Retained until consent is withdrawn
• Analytics data: Typically retained for 26 months (Google Analytics default)
• Legal obligations: As required by applicable laws (e.g., accounting records)

Your Rights

To exercise any of your rights, contact us at AeraxysDesign@gmail.com

Right to Access Personal Data

You can request a copy of all information we process about you. Contact the email address above to exercise your right of access.

Right to Rectification of Personal Data

You have the right to ask us to correct or supplement information that is incorrect or misleading.

Right to Erasure of Personal Data

You have the right to have your personal data deleted without undue delay. You can therefore ask us to delete information about you at any time. However, information that we are required to retain due to other legal obligations (such as the Accounting Act) will not be deleted.

Right to Restriction of Processing

In some situations, you can also ask us to restrict the processing of information about you. You can do this by managing consents or reservations in our solutions.

Right to Object to Processing

If we process information about you based on our legitimate interests, you have the right to object to our processing of information about you. You can do this by managing consents or reservations in our solutions.

Right to Data Portability

You have the right to receive your personal data in a structured, commonly used, and machine-readable format. Contact the email address above to receive your personal data.

Right to Withdraw Consent

Where processing is based on consent, you can withdraw your consent at any time. This does not affect the lawfulness of processing based on consent before its withdrawal.

Complaints About Our Processing

We hope you will let us know if you think we do not comply with the rules in the data protection legislation. Please contact us through the established contact channels first. You can also complain about our processing of personal data to the relevant data protection authority:

• Norway: Datatilsynet
• Germany: Your local state data protection authority
• Netherlands: Autoriteit Persoonsgegevens
• UK: Information Commissioner's Office (ICO)

Children's Privacy

Our services are not directed at children under 16 years of age. We do not knowingly collect personal data from children under 16. If we become aware that we have collected personal data from a child under 16, we will delete such information.

Changes to This Privacy Policy

We may change this privacy policy when there is factual reason, such as changes in legislation, new services, or significant changes in how we process personal data.

For significant changes that affect your rights or how we process your personal data, you will receive notice by email at least 30 days before the changes take effect. The notice will clearly describe the changes and consequences for you.

If you do not accept the changes, you have the right to withdraw your consent or terminate the customer relationship without costs within 30 days after receiving notice of changes. During this period, the original privacy policy applies.

For minor administrative changes that do not affect your rights or our processing purposes, we will publish the update on the website and inform at next contact.

You will always have access to the current privacy policy on our website, and we keep previous versions for documentation.

Governing Language

Language Authority: This privacy policy has been originally drafted in English. While it may be translated into other languages for convenience, the English version shall be the controlling and governing version in case of any discrepancies, inconsistencies, or conflicts with translated versions.

Any translation into other languages is provided solely for the convenience of non-English speaking users and shall have no legal force or effect. In the event of any dispute regarding interpretation of this privacy policy, the English language version will prevail and be used for all legal proceedings and regulatory matters.

Contact Information

Data Controller: Frann-Eirik Nygård
Address: Viktenveien 63, 8382 Napp, Norway
Email: AeraxysDesign@gmail.com
Phone: +47 915 87 309

For questions about this privacy policy or your privacy rights, please contact us using the information above.

Last updated: 24.08.2025