Privacy Policy for Nordlyd Podcast Lab AS

1. Introduction and company information

This privacy policy explains how Nordlyd Podcast Lab AS collects, uses, stores, shares, and protects personal data when you use our services, visit our website, contact us, or otherwise interact with us.

Nordlyd Podcast Lab AS is the data controller for the processing of personal data described in this privacy policy.

Company name: Nordlyd Podcast Lab AS
Address: Karl Johans gate 12, 0154 Oslo, Norway
Email: [email protected]
Phone: +47 22 84 73 61

We operate as a podcast-lab business, which may include podcast production, recording, editing, consulting, studio services, project management, communications, marketing, and related digital services.

2. Data collection and processing

We may collect and process the following categories of personal data, depending on your relationship with us and the services you use:

• Contact information: name, email address, phone number, postal address, company name, and job title.
• Communication data: messages, inquiries, feedback, support requests, meeting notes, and correspondence.
• Contract and service data: information related to projects, bookings, agreements, invoices, payments, and service delivery.
• Technical data: IP address, browser type, device information, operating system, log data, and website usage data.
• Audio, image, and content data: recordings, photographs, video, transcripts, and other materials created or provided in connection with podcast production or related services.
• Marketing and preference data: communication preferences, consent choices, and responses to campaigns or newsletters.
• Billing and accounting data: payment details, transaction records, and information required for bookkeeping and tax compliance.

We normally collect personal data directly from you, but we may also receive data from clients, business partners, service providers, public sources, or technical systems used to operate our services.

3. Purpose of data processing

We process personal data for the following purposes:

• to respond to inquiries and communicate with you;
• to provide podcast-lab, production, editing, studio, and consulting services;
• to manage customer relationships and project administration;
• to prepare, perform, and document contracts;
• to issue invoices, process payments, and maintain accounting records;
• to improve our services, website, and customer experience;
• to send marketing communications where permitted;
• to ensure security, prevent misuse, and detect fraud or unauthorized access;
• to comply with legal obligations and respond to lawful requests;
• to establish, exercise, or defend legal claims.

4. Legal basis for processing

We process personal data only where we have a lawful basis to do so. Depending on the context, the legal basis may be:

• Performance of a contract: where processing is necessary to provide services or take steps at your request before entering into a contract.
• Legal obligation: where processing is required to comply with applicable laws, including accounting, tax, and record-keeping obligations.
• Legitimate interests: where processing is necessary for our legitimate business interests, such as service delivery, customer support, security, business development, and improvement of our operations, provided that your interests and rights do not override those interests.
• Consent: where you have given clear consent for specific processing activities, such as certain marketing communications or optional cookies, where applicable.

Where we rely on consent, you may withdraw it at any time without affecting the lawfulness of processing carried out before withdrawal.

5. Data sharing and third parties

We may share personal data with third parties when necessary for the purposes described in this privacy policy and only to the extent permitted by law. These third parties may include:

• IT and hosting providers;
• cloud storage and collaboration tools;
• email and communication service providers;
• payment processors and accounting systems;
• professional advisers, such as lawyers, accountants, and auditors;
• subcontractors and production partners involved in podcast-related services;
• public authorities, courts, or regulators where required by law.

We require appropriate contractual and organizational safeguards with service providers that process personal data on our behalf.

6. Data transfer to third countries

In some cases, personal data may be transferred to or accessed from countries outside Norway and the EEA. This may occur when we use international service providers or collaborate with partners located in other jurisdictions.

Where such transfers take place, we will ensure that appropriate safeguards are in place in accordance with applicable privacy law, such as standard contractual clauses or other approved transfer mechanisms, and where necessary additional technical and organizational measures.

7. Storage duration

We retain personal data only for as long as necessary for the purposes for which it was collected, unless a longer retention period is required or permitted by law.

• Customer and contract data: retained for the duration of the relationship and thereafter for as long as necessary to handle claims, bookkeeping, or legal obligations.
• Accounting and tax records: retained for the period required by applicable law.
• Communication data: retained as long as needed to handle the inquiry or relationship.
• Marketing data: retained until you withdraw consent or object, or until it is no longer relevant.
• Technical logs and security data: retained for a limited period necessary for security, troubleshooting, and system administration.

When personal data is no longer needed, we will delete, anonymize, or securely archive it in accordance with applicable requirements.

8. User rights

Subject to applicable law, you may have the following rights regarding your personal data:

• Access: to obtain confirmation of whether we process your personal data and receive a copy of that data.
• Rectification: to request correction of inaccurate or incomplete personal data.
• Erasure: to request deletion of personal data in certain circumstances.
• Restriction: to request that we limit processing in certain situations.
• Data portability: to receive certain data in a structured, commonly used, machine-readable format and, where technically feasible, have it transmitted to another controller.
• Objection: to object to processing based on legitimate interests and to object at any time to direct marketing.

To exercise your rights, please contact us using the details in the Contact Information section. We may need to verify your identity before responding.

9. Withdrawal of consent

Where processing is based on your consent, you may withdraw that consent at any time. Withdrawal does not affect the lawfulness of processing carried out before the withdrawal.

You can withdraw consent by contacting Nordlyd Podcast Lab AS at [email protected] or by using any unsubscribe or preference-management option provided in our communications, where applicable.

10. Right to complain

If you believe that our processing of personal data is not compliant with applicable privacy law, you have the right to lodge a complaint with the relevant supervisory authority.

In Norway, this is the Norwegian Data Protection Authority (Datatilsynet). We encourage you to contact us first so that we can try to resolve your concern directly.

11. Data security

We implement appropriate technical and organizational measures to protect personal data against unauthorized access, loss, alteration, disclosure, or destruction. These measures may include:

• access controls and authentication;
• role-based permissions;
• encryption where appropriate;
• secure storage and backup procedures;
• staff confidentiality obligations and training;
• monitoring and incident response procedures;
• vendor and system security assessments where appropriate.

No method of transmission or storage is completely secure, and we cannot guarantee absolute security. However, we work to maintain a level of security appropriate to the risk.

12. Contact information

If you have questions about this privacy policy or our processing of personal data, or if you wish to exercise your rights, please contact:

Nordlyd Podcast Lab AS
Karl Johans gate 12, 0154 Oslo, Norway
Email: [email protected]
Phone: +47 22 84 73 61

13. Changes to privacy policy

We may update this privacy policy from time to time to reflect changes in our services, legal requirements, or how we process personal data. Any updated version will be published with a revised effective date where appropriate.

We encourage you to review this privacy policy periodically to stay informed about how Nordlyd Podcast Lab AS processes personal data.