Policy on the Processing and Protection of Personal Data of Users of the Website https://sitecraftwebstudio.pro

Version of July 7, 2025

This is the primary version of the Privacy Policy. Versions in other languages are provided for convenience; in the event of any discrepancy, the English version shall prevail.

1. General provisions.

1.1. This document, the “Policy on the Processing and Protection of Personal Data of Users of the Website https://sitecraftwebstudio.pro” (hereinafter, the “Policy”), has been drawn up in accordance with the General Data Protection Regulation of the European Union (GDPR) and the applicable data protection legislation of Norway.
1.2. The Policy is the Operator’s principal internal document governing the processing and protection of personal data. It is intended to ensure the protection of human rights and freedoms in the processing of personal data, including the right to privacy and to personal and family secrecy.
1.3. The Policy defines the categories of personal data collected, the purposes of processing, the procedure for storage and transfer, and the measures taken by the Operator to protect personal data.
1.4. This Policy applies to all information that the Operator may obtain about the User while the User is using the website https://sitecraftwebstudio.pro (hereinafter, the “Website”).
1.5. Use of the Website constitutes the User’s consent to the terms of this Policy. Consent is given by taking the following affirmative actions:
* Checking the box “I agree to the privacy policy” when filling out contact forms on the Website. This action confirms consent to the processing of the personal data specified in clause 3.1.1 for the purposes specified in clause 4.1.
* Giving explicit consent to the use of cookies (analytics and functional cookies) via the corresponding banner on the Website. The User can accept, reject or customize the use of cookies.
1.6. If the User does not agree with the terms of the Policy, the User must stop using the Website.
1.7. The Operator does not verify the accuracy of the personal data provided by the User and assumes that the User provides accurate information.

2. Key terms and definitions.

2.1. Operator – sole proprietor Leonids Matjusenoks (Enkeltpersonforetak: Sitecraft Web Studio Matjusenoks, Organisasjonsnummer: 917659214), registered under the laws of Norway.
2.2. Website – the collection of web pages published on the Internet under the single address space of the domain sitecraftwebstudio.pro.
2.3. Personal data – any information relating directly or indirectly to an identified or identifiable natural person (data subject).
2.4. Processing of personal data – any operation or set of operations performed on personal data, including collection, recording, organization, accumulation, storage, adaptation (updating, alteration), retrieval, use, transfer (provision, access), anonymization, blocking, erasure and destruction.
2.5. User – a person who has access to the Website via the Internet and uses the Website.
2.6. Cookies – a small piece of data sent by a web server and stored on the User’s computer, used for the operation of the Website and for analyzing its use.

3. Personal data collected and processed.

3.1. The Operator processes the following categories of personal data:
- 3.1.1. Data provided by the User when filling out forms on the Website: * Name; * Email address; * Phone number.
- 3.1.2. Data transmitted automatically when using the Website (with the User’s consent via the cookie banner): * IP address; * Location information (at country/city level); * Operating system and browser type and version; * Device type and screen resolution; * Referral source (referrer); * Information about actions on the Website (pages viewed, buttons clicked). This data is collected using the web analytics service Google Analytics (Google LLC, 1600 Amphitheatre Parkway, Mountain View, CA 94043, USA). The data is collected in anonymized form and used solely for statistical purposes.
3.2. The Operator does not process special categories of personal data (relating to racial or ethnic origin, political opinions, religious beliefs, health, etc.).

4. Purposes of collecting and processing personal data.

4.1. The personal data specified in clause 3.1.1 is processed solely for the following purposes:
* Contacting the User in response to a request sent via forms on the Website;
* Preparing a proposal and providing consultations on the Operator’s services;
* Concluding, performing and terminating civil law contracts with the User.
4.2. The data specified in clause 3.1.2 is processed to improve the Website’s performance and usability and to analyze the Website’s effectiveness.
4.3. The Operator does not use Users’ personal data to send marketing or advertising materials without their separate, explicit consent to such mailings.

5. Personal data retention period

5.1. Personal data is stored no longer than required by the purposes of its processing.
5.2. Data provided for handling a request (clause 3.1.1) is stored until communication is completed or until the User withdraws consent. If a contract is concluded with the User, the data is stored for the term of the contract and, after its expiry, for the period established by Norwegian law for accounting and tax records (as a rule, 5 years).
5.3. Data collected using cookies (clause 3.1.2) is stored for the period set in the settings of the respective cookie, but no longer than 26 months.
5.4. Once the purposes of processing have been achieved, or if the User withdraws consent, personal data is destroyed or anonymized.

6. Rights of the User (data subject)

The User has the right:

6.1. Of access to information (Right of Access, Art. 15 GDPR): To request and receive information about their personal data processed by the Operator.
6.2. To rectification (Right to Rectification, Art. 16 GDPR): To demand that their personal data be corrected if it is incomplete or inaccurate.
6.3. To erasure / “Right to be forgotten” (Right to Erasure, Art. 17 GDPR): To demand the deletion of their personal data from the Operator’s systems if it is no longer needed for the original purposes or if consent is withdrawn.
6.4. To restriction of processing (Right to Restriction of Processing, Art. 18 GDPR): To demand that the processing of their data be restricted in certain cases.
6.5. To data portability (Right to Data Portability, Art. 20 GDPR): To receive their personal data in a structured, machine-readable format.
6.6. To object to processing (Right to Object, Art. 21 GDPR): To object to the processing of their personal data based on the Operator’s legitimate interests.
6.7. To withdraw consent: To withdraw their consent to the processing of personal data at any time by sending a notice to studio@sitecraftwebstudio.com with the subject “Withdrawal of consent to the processing of personal data.”
6.8. To lodge a complaint with a supervisory authority (Right to lodge a complaint, Art. 77 GDPR): If the User believes their rights have been violated, they may lodge a complaint with the Norwegian Data Protection Authority, Datatilsynet. * Website: https://www.datatilsynet.no/

To exercise their rights, the User may contact the Operator using the contact details provided in section 11.

7. Transfer of data to third parties

7.1. The Operator does not sell or transfer Users’ personal data to third parties, except as expressly provided for in this Policy and by law.
7.2. The Google Analytics service has access to anonymized data (clause 3.1.2) for the purposes specified in clause 4.2. Data is transferred to Google on the basis of Standard Contractual Clauses, which ensure an adequate level of data protection.
7.3. Personal data is transferred to public authorities in accordance with the procedure established by Norwegian law (by court order, at the request of law enforcement agencies, etc.).
7.4. To operate the Website, the Operator uses the services of vetted third-party providers (for example, hosting providers). Such providers may have technical access to data but act strictly within the scope of their contract with the Operator and are bound by confidentiality.

8. Personal data protection measures

8.1. The Operator takes the necessary and sufficient organizational and technical measures to protect personal data against unlawful or accidental access, destruction, alteration, blocking and copying, as well as against other unlawful actions of third parties.
8.2. The Website uses a secure SSL/TLS connection, which encrypts data in transit from the User to the Operator.

9. Liability

9.1. The Operator is liable for improper processing of personal data in accordance with Norwegian law and the GDPR.
9.2. The Operator is not liable for the actions of third parties who gained access to data as a result of unauthorized access to the Website or through the fault of the User.

10. Final provisions

10.1. The Operator may amend this Policy. A new version of the Policy takes effect when it is published on the Website.
10.2. In all matters not governed by this Policy, the Operator is guided by the applicable laws of Norway and the provisions of the GDPR.

11. Operator contact details

Navn (Name): Sitecraft Web Studio Matjusenoks
Enkeltpersonforetak (Sole proprietor): Leonids Matjusenoks
Organisasjonsnummer (Organization number): 917 659 214
Forretningsadresse (Registered address): Lysakerveien 35, 3055 KROKSTADELVA, Norge
E-post for henvendelser om personvern (Email for personal data inquiries): studio@sitecraftwebstudio.com