Privacy Policy

Gothar AS ("we", "our", or "us") is committed to protecting your privacy. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you visit our website gothar.com or use our services.

By using our website, you consent to the data practices described in this policy.

2.1 Personal Data

We collect personal information that you voluntarily provide when you:

• Fill out our contact form (name, email address, message)
• Communicate with us via email
• Subscribe to our newsletter (if applicable)

2.2 Automatically Collected Information

When you visit our website, we may automatically collect certain information, including:

• IP address and approximate geographic location
• Browser type and version
• Pages visited and time spent on pages
• Referring website addresses
• Device information (operating system, screen resolution)

This information is collected via privacy-friendly analytics and is used solely for improving our website performance and user experience.

We use the information we collect to:

• Respond to inquiries: Process and respond to your contact form submissions and emails
• Improve our services: Analyze website usage to enhance user experience and performance
• Communicate: Send you updates, newsletters, or marketing communications (with your consent)
• Legal compliance: Comply with applicable laws, regulations, and legal processes

We retain your personal data only for as long as necessary to fulfill the purposes outlined in this Privacy Policy:

• Contact form submissions: Stored for up to 2 years or until the inquiry is resolved and follow-up period has elapsed
• Email correspondence: Retained as long as necessary for business purposes and legal obligations
• Analytics data: Aggregated and anonymized data may be retained indefinitely for statistical purposes

You may request deletion of your personal data at any time by contacting us.

We may share your information with trusted third-party service providers who assist us in operating our website and conducting our business:

• Email service provider: Brevo (formerly Sendinblue) - for processing contact form submissions and sending emails
• Hosting provider: Cloudflare Pages - for website hosting and CDN services
• Database: Cloudflare D1 - for storing contact form submissions

All third-party service providers are required to maintain the confidentiality and security of your personal information and are prohibited from using it for any purpose other than providing services to us.

Data transfers: Some of our service providers may be located outside the European Economic Area (EEA). We ensure appropriate safeguards are in place, such as Standard Contractual Clauses (SCCs), to protect your data.

Under the General Data Protection Regulation (GDPR), if you are a resident of the European Economic Area (EEA), you have the following rights:

• Right to access: Request a copy of the personal data we hold about you
• Right to rectification: Request correction of inaccurate or incomplete data
• Right to erasure ("right to be forgotten"): Request deletion of your personal data
• Right to restriction of processing: Request that we limit how we use your data
• Right to data portability: Request transfer of your data to another service provider
• Right to object: Object to our processing of your personal data
• Right to withdraw consent: Withdraw consent at any time (where processing is based on consent)

To exercise any of these rights, please contact us at post@gothar.com. We will respond to your request within 30 days.

Our website uses minimal, privacy-friendly analytics. We do not use third-party advertising cookies or tracking pixels.

Essential cookies: Required for the website to function (e.g., remembering your language preference, dark/light theme)

Analytics: We use privacy-first analytics to understand website usage without tracking individual users

You can control cookies through your browser settings. Note that disabling essential cookies may affect website functionality.

We implement appropriate technical and organizational security measures to protect your personal data against unauthorized access, alteration, disclosure, or destruction:

• HTTPS encryption for all data transmission
• Secure database storage with access controls
• Regular security audits and updates
• Principle of least privilege for data access

However, no method of transmission over the Internet or electronic storage is 100% secure. We cannot guarantee absolute security but strive to use commercially acceptable means to protect your data.

Our website is not directed to individuals under the age of 16. We do not knowingly collect personal information from children. If we become aware that we have collected personal data from a child without parental consent, we will take steps to delete that information.

We may update this Privacy Policy from time to time to reflect changes in our practices or legal requirements. The "Last updated" date at the top of this page indicates when the policy was last revised.

We encourage you to review this Privacy Policy periodically. Continued use of our website after changes constitutes acceptance of the updated policy.

If you have any questions, concerns, or requests regarding this Privacy Policy or our data practices, please contact us:

Gothar AS
Email: post@gothar.com
Organization number: 915 123 456 (Norway)
Address: Oslo, Norway

For data subject access requests (DSAR) or to exercise your GDPR rights, please email us with "Data Request" in the subject line.