Privacy Policy & Data Protection (GDPR)

1. Data Controller

The data controller responsible for the processing of personal data collected through the Torvelo website is BRØDRA DA, located at: Olav Aukrusts veg 3, 2618 Lillehammer, Norway, registered in the Norwegian Company Register under Organization Number (Org.nr): 937 298 307, represented by Managing Director Vanya Soldatov.

Data Protection Contact: email: [email protected].

2. Purposes and Legal Bases of Processing

Personal data provided by users is processed for the following lawful purposes:

• Responding to Editorial & General Inquiries: Under Art. 6(1)(f) GDPR (legitimate interest of the controller to respond to user messages).
• Distribution of Requested Educational Booklets: Under Art. 6(1)(b) GDPR (performance of service or processing of requested materials).
• System Security & Spam Prevention: Under Art. 6(1)(f) GDPR (safeguarding the website against automated attacks and spam).

3. User Rights under GDPR

Under applicable European and Norwegian data protection regulations, you have the right to:

• Request access to and a copy of your stored personal data;
• Request rectification of inaccurate or outdated information;
• Request erasure of your data (“right to be forgotten”);
• Request restriction of data processing;
• Object to processing based on legitimate interests;
• Lodge a complaint with a supervisory authority (Datatilsynet in Norway or your local European Data Protection Authority).

4. Data Retention Period

Inquiry data is retained only for the time necessary to handle the correspondence, not exceeding 12 months from the date of the last contact, unless longer retention is required by statutory legal requirements.

5. Security & Encryption

All communication between your browser and our server is secured using industry-standard TLS 1.3 encryption (256-bit). We do not sell, rent, or transfer your personal details to third parties for commercial or marketing purposes.