Privacy Policy
This policy explains what personal data maganoor.com collects, why, and what you can do about it. We have kept it as short and plain as the subject allows.
Who we are
MAGANOOR AS, Street address, ZIP Code City, Norway, is the controller of the personal data described in this policy.
Company registration number: XXX XXX XXX. VAT number: NO XXX XXX XXX MVA.
You can reach us at hello@maganoor.com.
What this policy covers
This policy covers the website at maganoor.com. It does not cover any other site we may link to.
What we collect
When you use the contact form
The form asks for your name, organisation, role or title, email address, the type of enquiry, and your message. Name, organisation, email, enquiry type and message are required; role is optional.
We use this to read and answer your enquiry, and to keep a record of the conversation. Nothing more.
When you visit any page
We use Fathom Analytics to count visits. Fathom does not use cookies and does not build a profile of you. It briefly processes your IP address and browser user-agent to work out which country a visit came from and whether it is a repeat visit, then discards both. What we see is aggregate: page views, referring sites, countries. We cannot identify you from it.
Server logs
Our hosting provider keeps standard server logs, which include IP addresses, for security and troubleshooting. These are the provider’s ordinary operational records, retained on their standard schedule.
Why we are allowed to use it
| What | Why | Legal basis |
|---|---|---|
| Contact form data | To answer your enquiry | Article 6(1)(b) GDPR — steps taken at your request before entering into a contract, or Article 6(1)(f) — our legitimate interest in responding to business enquiries |
| Analytics | To understand which pages are useful | Article 6(1)(f) GDPR — our legitimate interest in maintaining and improving the site, balanced against the fact that the data is aggregate and not linked to you |
| Server logs | Security and reliability | Article 6(1)(f) GDPR — our legitimate interest in keeping the site available and secure |
We do not use your data for advertising, we do not sell it, and we do not profile you.
Who else sees it
We use a small number of service providers. Each acts on our instructions under a written agreement.
| Provider | What they do | Where |
|---|---|---|
| Krystal Hosting Ltd | Hosts the website | United Kingdom |
| Formspree, Inc. | Receives and forwards contact form submissions | United States |
| Fathom Analytics | Cookieless visit analytics | EU traffic routed through European infrastructure |
| Proton AG | Hosts our business mailbox, where enquiries arrive | Switzerland |
We will disclose personal data to anyone else only if the law requires it.
Data leaving the EEA
Three of those providers sit outside the European Economic Area.
The United Kingdom, where our site is hosted, holds a European Commission adequacy decision, so no additional safeguards are required. Krystal’s standard data processing terms apply to our account.
Switzerland, where our mailbox is hosted, also holds a European Commission adequacy decision.
The United States, where Formspree operates, does not benefit from a general adequacy decision. Transfers to Formspree rely on the European Commission’s Standard Contractual Clauses and, where Formspree is certified, the EU-US Data Privacy Framework. If you would prefer not to use the form, email us directly at hello@maganoor.com.
How long we keep it
We keep contact form enquiries until the enquiry is resolved, and then for a further twelve months, in case the conversation resumes. After that we delete them.
Analytics data is aggregate and holds nothing that identifies you. Server logs follow our hosting provider’s standard retention schedule.
Where law requires us to keep records for longer, for example accounting or tax records, we do.
Your rights
Under the GDPR you can ask us to:
- give you a copy of the personal data we hold about you
- correct anything that is wrong
- delete it
- restrict how we use it
- send it to you, or to someone else, in a portable format
- stop using it where we rely on legitimate interest — you can object at any time
Email hello@maganoor.com and we will respond within one month. There is no charge.
If you are not satisfied with how we handle your request, you can complain to the Norwegian data protection authority:
Datatilsynet, Postboks 458 Sentrum, 0105 Oslo, Norway. datatilsynet.no
You may also complain to the supervisory authority in the EEA country where you live or work.
Security
The site runs over HTTPS. Our providers are chosen in part for their security posture, and access to enquiry data is limited to the people who need it to answer you. No system is perfectly secure, but we take this seriously.
Children
This site is aimed at businesses and institutions. We do not knowingly collect data from anyone under 16.
Changes
If we change this policy we will update the date below. Material changes will be noted on the page.
Contact
Questions about this policy, or about your data: hello@maganoor.com.