Privacy Policy

Last updated: 01.12.2025

1. Data Controller

Jawel
Org. no.: 936 203 647
Email: jannicke@jawel.no
Website: https://jawel.no
Jawel acts as data processor on behalf of NOFAF. NOFAF is the data controller for information collected via registration and payments.

2. Purpose and Legal Basis

a) Event Registration

We collect: name, email address, workplace/institution and optional comments.
Purpose: to manage registrations and send event-related information.
Legal basis: GDPR Art. 6(1)(b) and GDPR Art. 6(1)(a).

b) Payments via WooCommerce

We collect: name, email, billing address and payment details (processed by Stripe or Vipps).
Purpose: to process and document payments.
Legal basis: GDPR Art. 6(1)(b).
We do not store card details. Payment processors:
Stripe: https://stripe.com/privacy
Vipps: https://vipps.no/personvern/

c) Communication and Support

Messages you send may be stored to allow us to respond.
Legal basis: GDPR Art. 6(1)(f).

3. Data Retention

– Registration data: deleted within 3 months after the event.
– Transaction data: kept for 5 years according to accounting law.

4. Data Sharing

We only share data with:
– Domeneshop (hosting & email)
– WordPress / WooCommerce
– Stripe or Vipps
All providers operate under data processing agreements.

5. Cookies

The website uses necessary cookies for basic functionality. Analytics and functional cookies are only used with consent.

6. Your Rights

You have the right to access, correct, delete your data, and withdraw consent.
Contact: jannicke@jawel.no
Complaints may be filed with the Norwegian Data Protection Authority.

7. Security

Your data is protected with SSL encryption and secure processing routines.

8. Changes

Any updates will be published on this page. The latest revision date is shown at the top.