Valon AS ("Valon", "we", "our") is the data controller for the personal data we collect through this website. This policy explains what data we collect, why, and what rights you have under the General Data Protection Regulation (GDPR).
1. Who we are
Valon AS
Stortorvet 7, 0155 Oslo, Norway
Org. nr. 931 375 040
Email: post@valon.no
2. What we collect and why
Contact form submissions
When you submit the contact form, we collect your name, company name, email address, and message. We use this data solely to respond to your inquiry. The legal basis is our legitimate interest in communicating with potential clients (GDPR Art. 6(1)(f)).
Spam prevention
Our contact form uses Google reCAPTCHA v3 to detect automated submissions. reCAPTCHA collects hardware and software information (including device and application data) and sends it to Google for analysis. This processing is governed by Google's Privacy Policy and Terms of Service. We rely on our legitimate interest in protecting our communication channels (GDPR Art. 6(1)(f)).
Website delivery
Our website is served through Cloudflare's network. Cloudflare may process your IP address and request metadata to deliver pages and protect against attacks. See Cloudflare's Privacy Policy.
We use Google Fonts to display typefaces. Your browser connects to Google's servers when loading the page. See Google Fonts privacy information.
3. How long we keep your data
We keep contact form submissions for up to two years from the date of last contact. If a business relationship begins, we retain relevant communications for as long as the relationship requires and as mandated by Norwegian accounting regulations.
4. Who we share your data with
We do not sell your personal data. We share data only with the service providers mentioned above (Google, Cloudflare) to the extent necessary for the services they provide. All processing by these providers is governed by their own privacy policies and relevant data processing agreements.
5. International transfers
Google and Cloudflare are US-based companies. When your data is transferred to the United States, appropriate safeguards apply (Standard Contractual Clauses under GDPR Art. 46).
6. Your rights
Under GDPR, you have the right to:
- Access the personal data we hold about you (Art. 15)
- Correct inaccurate data (Art. 16)
- Delete your data where there is no overriding reason to keep it (Art. 17)
- Restrict processing in certain circumstances (Art. 18)
- Object to processing based on legitimate interest (Art. 21)
- Portability: receive your data in a structured, machine-readable format (Art. 20)
To exercise any of these rights, email us at post@valon.no. We will respond within 30 days.
7. Complaints
If you believe we are handling your data unlawfully, you have the right to lodge a complaint with the Norwegian Data Protection Authority (Datatilsynet): www.datatilsynet.no
8. Changes to this policy
We may update this policy from time to time. The date at the top of this page reflects the most recent revision. Continued use of the site after an update constitutes acceptance of the revised policy.
For questions about this policy, contact us at post@valon.no.