Privacy Policy

1. Overview and Scope

Storyscopepurs Nordic Media AS ("Storyscopepurs", "we", "us", or "our"), registered under organization number NO 928 341 572 MVA in Kongsvinger, Norway, operates the digital portal at storyscopepurs.quest. This Privacy Policy details our protocols regarding the collection, storage, processing, and protection of personal data gathered when you visit our website, utilize our contact forms, or interact with our digital wilderness archives.

We are dedicated to respecting your privacy in strict compliance with the European Union General Data Protection Regulation (EU GDPR 2016/679) and the Norwegian Personal Data Act (Personopplysningsloven).

2. Data Collection and Processing Grounds

We collect personal information exclusively when there is a lawful legal basis under GDPR Article 6. These instances comprise:

• Direct Correspondence: When you submit a query via our contact form or send an electronic transmission to [email protected], we process your full name, email address, thematic category, and message body. Legal basis: GDPR Article 6(1)(b) (performance of steps leading to a response) and Article 6(1)(f) (our legitimate interest in answering inquiries).
• Technical and Server Log Data: When loading our pages, our servers automatically log non-identifiable network telemetry: truncated Internet Protocol (IP) addresses, browser brand, operating system architecture, HTTP referral headers, and access timestamps. Legal basis: GDPR Article 6(1)(f) (maintaining web server integrity, preventing malicious attacks, and debugging code faults).
• Aggregated Analytical Measurements: Provided you have consented via our cookie management interface, we record anonymized browsing sequences across our Glomma River dossiers. Legal basis: GDPR Article 6(1)(a) (consent).

3. Third-Party Data Processors

Storyscopepurs does not sell, lease, or monetize your personal details to advertising syndicates. We engage carefully vetted service providers who act strictly as Data Processors bound by Article 28 data processing agreements:

• Infrastructure and Hosting: Server infrastructure physically located within the European Economic Area (EEA) adhering to ISO/IEC 27001 cybersecurity frameworks.
• Email Routing: Secure transactional mail gateways handling administrative transmissions and inquiry routing with TLS 1.3 encryption.

4. Data Retention Periods

Personal data is retained only for the duration strictly necessary to fulfill the primary objectives for which it was assembled:

• Inquiry messages sent through our contact portal are retained for a maximum duration of 18 months following resolution of the query, after which they are purged from active mailboxes.
• Technical web server diagnostic logs are deleted on a rolling 30-day schedule.
• Cookie preferences stored in your browser's local cache remain until cleared or overwritten by an updated user preference choice.

5. Your Rights Under GDPR and CCPA

Subject to statutory conditions under Norwegian and European data protection law, you possess explicit individual rights regarding your records:

• Right of Access (Article 15): You may request a verified copy of all personal records we hold concerning you.
• Right to Rectification (Article 16): You may request immediate correction of inaccurate or incomplete personal entries.
• Right to Erasure (Article 17): Commonly termed the "Right to be Forgotten", you can demand deletion of your records where retention is no longer justified.
• Right to Restrict Processing (Article 18): You may request temporary suspension of data processing during disputes over accuracy.
• Right to Data Portability (Article 20): You may request your data in a structured, commonly utilized, machine-readable format.
• Right to Object (Article 21): You may challenge processing founded on legitimate interest grounds at any juncture.

For individuals residing in California, under the California Consumer Privacy Act (CCPA), you maintain equal rights to know the categories of information gathered and to request non-discrimination for exercising privacy choices.

6. International Data Transfers

All core database operations and message backups reside on servers stationed within the European Economic Area. In the event that technical maintenance requires transfer outside the EEA, transfers are governed by European Commission Standard Contractual Clauses (SCCs) to ensure an equivalent standard of protection.

7. Data Protection Officer (DPO) and Inquiries

If you wish to exercise any statutory rights, submit questions concerning our privacy architecture, or lodge a data complaint, please contact our designated privacy officer directly:

Should you believe our processing violates relevant statutes, you possess the right to file a formal complaint with the Norwegian Data Protection Authority (Datatilsynet, Postboks 458 Sentrum, 0105 Oslo, Norway, www.datatilsynet.no).