Privacy & Data Protection Policy

Effective: September 2026 Controller: UEH LYDTEKNIKK AS Supervisory Authority: Datatilsynet (Norway)

1. Data Controller Identification

The entity responsible for processing personal data on this website is UEH LYDTEKNIKK AS, a Norwegian corporation registered under organization number 936 652 468, located at Østensjøveien 224, 0690 Oslo, Norway.

Our data protection contact person is Louise Steer. For any inquiries regarding personal data processing, you may reach us at [email protected].

2. Legal Basis and Scope of Data Collection

We process personal data strictly in accordance with the EU General Data Protection Regulation (GDPR / Regulation 2016/679) and the Norwegian Personal Data Act (Personopplysningsloven). Data is processed on the following legal bases:

Contractual & Pre-contractual Inquiries (Art. 6(1)(b) GDPR): When you submit consultation requests, technical project parameters, or venue details through our contact forms.
Legitimate Technical Interest (Art. 6(1)(f) GDPR): Processing server access logs (anonymized IP addresses, browser user agents, timestamps) to guarantee server stability, prevent malicious traffic, and secure technical infrastructure.
Consent (Art. 6(1)(a) GDPR): For optional preference cookies and communication opt-ins.

3. Categories of Data Processed

Data Category	Purpose of Processing	Retention Schedule
Consultation Details (Name, Corporate Email, Venue Scope)	To respond to sound engineering requests and formulate acoustic estimates	Retained for the duration of the active business relationship, or 12 months after inactivity
Technical Server Logs (IP address, Request URI, HTTP Status)	Cybersecurity, error diagnosis, and DDoS protection	Automated rotation and purging after 30 days

4. Third-Party Disclosures & Cross-Border Transfers

UEH LYDTEKNIKK AS does not sell, lease, or monetize personal data. Information is only shared with verified IT hosting providers and professional calculation infrastructure located within the European Economic Area (EEA) operating under formal Data Processing Agreements (DPAs).

5. Your Rights Under European Law

As a data subject in Norway and the EEA, you possess the following statutory rights:

Right of Access (Art. 15 GDPR): The right to request confirmation of and copies of personal data stored about you.
Right to Rectification (Art. 16 GDPR): The right to correct inaccurate or incomplete technical contact records.
Right to Erasure (Art. 17 GDPR): The right to request permanent deletion of your data when no longer necessary.
Right to Data Portability (Art. 20 GDPR): The right to receive your personal data in a structured, commonly used machine-readable format.
Right to Lodge a Complaint: You have the right to file a formal complaint with the Norwegian Data Protection Authority (Datatilsynet, Postboks 458 Sentrum, 0105 Oslo, www.datatilsynet.no).

6. Security Measures

All data transmissions between your browser and our server are secured with TLS 1.3 encryption (HTTPS). We maintain strict administrative, procedural, and technological access controls to prevent unauthorized access.