Privacy Policy

1. Introduction

TIMETORIOT ("we", "us", or "our") operates the website at https://timetoriot.com (the "Platform"). This Privacy Policy explains how we collect, use, disclose, and safeguard your personal information when you visit our Platform or interact with our services.

We are committed to protecting your personal data and processing it in accordance with the General Data Protection Regulation (GDPR), the Norwegian Personal Data Act (Personopplysningsloven), and all applicable data protection legislation.

By using the Platform, you acknowledge that you have read and understood this Privacy Policy. If you do not agree with its terms, please refrain from using the Platform.

2. Data Controller

The data controller responsible for your personal data is:

TIMETORIOT
Thormøhlengt. 51
Bergen 5006
Norway
Email: [email protected]
Phone: +47 978 97 373

3. Data We Collect

Information you provide directly

When you use our contact form, we collect the following information:

• First and last name
• Email address
• Subject of inquiry
• Message content

Information collected automatically

When you visit the Platform, we may automatically collect certain technical information, including:

• IP address
• Browser type and version
• Operating system
• Pages viewed and time spent on those pages
• Referring URLs
• Device type

Cookies and similar technologies

We use cookies and similar tracking technologies to enhance your experience on the Platform. Please see Section 6 for full details.

4. How We Use Your Data

We use the personal data we collect for the following purposes:

• To respond to your enquiries — Contact form submissions are used solely to reply to your message.
• To improve the Platform — Anonymised usage data helps us understand how visitors interact with the site and identify areas for improvement.
• To maintain security — We may process certain data to detect and prevent fraudulent or malicious activity.
• To comply with legal obligations — We may retain and disclose data when required to do so by law or valid legal process.

We do not use your data for automated decision-making or profiling that produces legal or similarly significant effects.

5. Legal Basis for Processing

We process your personal data on the following legal bases under Article 6 of the GDPR:

• Consent (Art. 6(1)(a)) — Where you have given explicit consent, such as when submitting a contact form with the privacy consent checkbox ticked.
• Legitimate interests (Art. 6(1)(f)) — For purposes such as improving the Platform and maintaining security, provided such interests are not overridden by your rights and interests.
• Legal obligation (Art. 6(1)(c)) — Where we are required to process data to comply with applicable law.

6. Cookies

We use the following types of cookies on the Platform:

• Strictly necessary cookies — Required for the Platform to function. These cannot be disabled.
• Preference cookies — Remember your settings, such as your cookie consent preference (stored via localStorage).
• Analytics cookies — Used to understand how visitors interact with the Platform. We aim to use privacy-respecting analytics only.

You can manage your cookie preferences at any time using the cookie consent panel accessible via the banner shown on your first visit, or by clearing your browser's local storage.

For information on managing cookies in your browser, refer to your browser's support documentation.

7. Third-Party Services

The Platform may use the following third-party services which may process data on our behalf or independently:

• Google Maps — Used to display our office location on the Contact page. Usage is subject to Google's Privacy Policy.
• Unsplash / Pexels — Stock photography services from which images are loaded. These services may set their own cookies or process data in accordance with their own privacy policies.
• Font Awesome / Google Fonts — Icon and font libraries which may log access requests. We aim to serve these resources locally where feasible.

We are not responsible for the privacy practices of third-party services. We encourage you to review their respective privacy policies.

We do not sell, rent, or share your personal data with third parties for their own marketing purposes.

8. Data Retention

We retain personal data only for as long as necessary to fulfil the purposes for which it was collected, or as required by applicable law:

• Contact form data is retained for up to 12 months after your inquiry is resolved, unless a longer retention period is required by law.
• Server logs and technical data are typically retained for up to 90 days.
• Cookie consent preferences stored in your browser's localStorage persist until you clear them manually.

9. Your Rights

Under the GDPR, you have the following rights regarding your personal data:

• Right of access — You may request a copy of the personal data we hold about you.
• Right to rectification — You may request that we correct inaccurate or incomplete data.
• Right to erasure — You may request that we delete your personal data, subject to certain legal exceptions.
• Right to restriction — You may request that we restrict the processing of your data in certain circumstances.
• Right to data portability — You may request your data in a structured, commonly used, machine-readable format.
• Right to object — You may object to processing based on legitimate interests.
• Right to withdraw consent — Where processing is based on consent, you may withdraw it at any time without affecting the lawfulness of prior processing.

To exercise any of these rights, please contact us at [email protected]. We will respond within 30 days.

You also have the right to lodge a complaint with the Norwegian Data Protection Authority (Datatilsynet) at www.datatilsynet.no.

10. Security

We implement appropriate technical and organisational measures to protect your personal data against unauthorised access, alteration, disclosure, or destruction. However, no method of transmission over the internet is 100% secure, and we cannot guarantee absolute security.

If you believe your data has been compromised, please contact us immediately at [email protected].

11. Children's Privacy

The Platform is not directed at individuals under the age of 16. We do not knowingly collect personal data from children under 16. If you believe we have inadvertently collected such data, please contact us and we will delete it promptly.

12. Changes to This Policy

We may update this Privacy Policy from time to time to reflect changes in our practices or legal requirements. When we make material changes, we will update the "Last updated" date at the top of this page. We encourage you to review this Policy periodically.

13. Contact Us

If you have questions or concerns about this Privacy Policy or our data practices, please contact us:

TIMETORIOT
Thormøhlengt. 51, Bergen 5006, Norway
Email: [email protected]
Phone: +47 978 97 373