We ask for as little personal information as we can, and we are clear about what we do with it. Park Ackermann AS is responsible for the personal data we process when you visit our site, buy an object, book a course, or sign up for our newsletter. This policy explains what we collect, why, how long we keep it, who we share it with, and the rights you have. For anything not set out here, Norwegian data protection law (the Personal Data Act and the GDPR) applies.

Who we are

The data controller is Park Ackermann AS, company registration number 938 008 094, Gladengveien 7 E, 0661 Oslo, Norway. You can reach us at hi@parkackermann.com. We are a small studio and do not have a data protection officer, so questions about your data come straight to us.

The data we collect, and why

When you buy an object or book a course, we collect the details needed to complete and deliver your order: your name, billing and delivery address, email address and phone number. The basis for this is our contract with you, and without these details we cannot process or deliver your order. If you sign up for our newsletter or ask to hear about a course, we collect your email address on the basis of your consent, which you can withdraw at any time. When you write to us, we keep that correspondence so we can help you. To run the site securely we also process technical data such as your IP address in our server logs, on the basis of our legitimate interest in keeping the site working and protected.

How long we keep it

We keep order and payment information for as long as the Norwegian Bookkeeping Act requires, currently five years after the end of the financial year. Newsletter sign-ups are kept until you unsubscribe. Technical logs are kept only for a short period. When data is no longer needed, and no law requires us to keep it, we delete it.

Cookies

We use only the cookies that are strictly necessary for the site to work, such as remembering what is in your shopping cart and keeping checkout secure. We do not use advertising or tracking cookies.

Who we share it with

We never sell your personal data. To run the shop we rely on a few trusted providers who process data on our behalf: Shopify (our shop and checkout platform), Resend (sending order and booking emails), Fastmail (our email), Vercel (hosting) and Upstash (security and abuse protection). We also share what is needed with our shipping provider to deliver your order, and your payment is handled by the payment provider shown at checkout, so we never see or store your full card details. Some of these providers are based outside the EEA. Where that is the case, the transfer is covered by the EU Standard Contractual Clauses and a data processing agreement.

Your rights

You have the right to access the personal data we hold about you, to have it corrected, deleted, restricted or provided to you in a portable format, and to object to our processing. Where we rely on your consent, you can withdraw it at any time. We will delete your data on request, except where a law such as the Bookkeeping Act requires us to keep it. To exercise any of these rights, email us at hi@parkackermann.com. You also have the right to lodge a complaint with the Norwegian Data Protection Authority (Datatilsynet).

Changes to this policy

We may update this policy as our services or the law change. If we make a significant change, we will make it clear on this page in good time before it takes effect.