Astra Studio AS is the data controller responsible for processing personal data as described in this privacy statement. In this statement, we explain the types of personal data we collect and how we process it. This privacy statement applies to: www.amarantestudio.com

We process the following categories of personal data:

• Basic Information: Name, date of birth
• Contact Information: Address, phone number, email address
• Account and Profile Information: Settings, preferences
• Payment Information: Transaction details, payment method
• Customer History and Engagement: Order and delivery details, cart movements, discount codes, loyalty program information
• Customer History and Engagement: Active products and agreements as well as products and services you have previously used, how much and how often they are used, status of products/services
• Customer Activity: Reading and activity history from our app, websites, or electronic communications we send. Also includes technical information about the devices you use.
• Cookies: See our cookie policy here: <URL to cookie policy>

Personal data is generally collected directly from you or generated when you use our services and products. If we obtain personal data from other sources, we collect it from the following sources:

• Service Delivery / Contract Fulfillment:
  We use your personal data to fulfill our agreements with you, such as when you place an order for a product or service. The legal basis for processing personal data for this purpose is that the processing is necessary to fulfill an agreement with you.

• Customer Relationship Management:
  We use your personal data to manage our relationship with you, including customer service, complaint handling, and issue resolution related to your account. The legal basis for processing personal data for this purpose is that it is necessary to fulfill an agreement with you.
• Analysis, Business Development, and Service Improvement:
  We continuously work to develop and improve our services and products. Much of this involves analyzing various types of personal data, such as customer activity, purchase history, and account/profile information. The legal basis for processing personal data for this purpose is our legitimate interest.

• Personalized User Experience:
  We use personal data to tailor the user experience and communication based on your relationship with us. The legal basis for processing personal data for this purpose is our legitimate interest.

• Sales and Marketing:
  We use personal data for sales and marketing of our products and services, such as sending emails. The legal basis for processing personal data for this purpose is our legitimate interest. You have the option to opt-out of some of this processing, for example, by unsubscribing from our emails. Additionally, we may ask for your consent to use your personal data for profiling, where we deduce interests and needs based on your personal data. The purpose of profiling is to make our marketing more relevant.

• System Monitoring, Error Correction, etc.:
  We monitor our systems for errors and issues. Some of these processes involve storing and processing personal data. The legal basis for processing personal data for this purpose is our legitimate interest.

• Security, Fraud Prevention, and Criminal Activity Detection:
  We process personal data to protect our users and ourselves from fraudulent activity, misuse, and criminal acts. The legal basis for processing personal data for this purpose is our legitimate interest.

• Compliance with Legal Obligations:
  In some cases, we are required to process personal data in accordance with other legal obligations. For example, sales-related information that we are required to keep for accounting purposes under the Bookkeeping Act. The legal basis for processing personal data for this purpose is that the processing is necessary to comply with a legal obligation.

If you wish to exercise any of your rights, please contact us at info@amarantestudio.com

• Right to Access Your Information:
  You can request a copy of all the information we process about you. Please contact us at the above email address to exercise your right of access.

• Right to Correct Personal Data:
  You have the right to request that we correct or supplement any inaccurate or misleading information.

• Right to Delete Personal Data:
  You have the right to have your personal data deleted without undue delay. You can request the deletion of your data at any time. However, information we are required to retain due to other legal obligations (e.g., the Bookkeeping Act) will not be deleted.

• Restriction of Processing Personal Data:
  In some situations, you may also request that we restrict the processing of your data. You can do this by managing consents or reservations in our systems.

• Right to Object to the Processing of Personal Data:
  If we process your data based on legitimate interest, you have the right to object to our processing of your personal data. You can manage this by adjusting consents or reservations in our systems.

• Data Portability:
  You have the right to receive your personal data in a structured, commonly used, and machine-readable format. Please contact us at the above email address to request your personal data.

If you believe we are not complying with the data protection rules, we encourage you to let us know through the contact method you have already established with us. You may also file a complaint with the Norwegian Data Protection Authority (Datatilsynet).