Here I explain how personal information is used when you visit vinogmusikk.no or contact me.
Krokengen Vin og Musikk
Organisation no. 930 883 719
Last updated 27 October 2026
Krokengen Vin og Musikk, represented by Sander Krokengen, is the controller. Use the email address or phone number below for privacy questions or to exercise your rights.
When you contact me by email or phone, I process your name, contact details and information you provide about the wine tasting or music project. If you previously used the website form, your name, email, optional phone number, selected service, message and follow-up status may be stored in the website administration. The website form is now disabled. Do not send national identification numbers, health information or other sensitive information.
Contacting me is voluntary. I need a way to contact you and enough information about what you need to respond or provide a quote. Without this, I may be unable to follow up. You do not need to provide a phone number when contacting me by email.
I use the information to reply, clarify needs, provide quotes and follow up projects. When you are personally a party to a prospective or existing agreement, the basis is GDPR Article 6(1)(b). When you contact me on behalf of a business or about other questions, the basis is the legitimate interest in responding and managing customer relationships under Article 6(1)(f). Accounting records are processed to meet legal obligations under Article 6(1)(c). Information is not used for newsletters, profiling or automated decisions.
Closed inquiries that do not result in an agreement are deleted within 12 months of closure. Contact details and necessary project agreement records are retained during the project and for up to three years after completion to follow up the agreement and any claims. Invoices and other records subject to bookkeeping duties are generally retained for five years after the end of the financial year. If a specific dispute arises, only relevant information is retained until it is resolved.
Frmtid / Sætereng Digital, organisation no. 938 181 381, provides and administers the technical solution. Vercel Inc. hosts the website. Supabase Pte. Ltd. provides the database, storage and administrator authentication. Authorised people at the business and Frmtid may process information where necessary for follow-up, support or security. Email to the domain is routed through Google. Telephone communications are handled by the relevant carriers. Relevant information may also be disclosed to an accountant or public authorities where needed for accounting or a legal obligation. The website has no payment service and inquiries are not sold.
The website database is located in Frankfurt, Germany. Website server functions run on Vercel in the United States. Vercel and Supabase are providers in the United States and Singapore respectively, and international support and further providers may involve processing outside the EEA. A German database therefore does not mean that all processing stays in the EEA. The providers’ data processing terms include EU Standard Contractual Clauses (SCCs) for transfers where applicable. Contact me for information on recipient countries, transfer arrangements and copies of safeguards relevant to your information. Google describes its international processing in its privacy information. See the provider links below.
During visits, hosting providers may process IP addresses, timestamps, browser information, requested URLs and technical errors to deliver the website and address abuse. This is based on the legitimate interest in secure and reliable operation under Article 6(1)(f). I do not use this information for advertising or visitor profiles.
Technical log retention is assessed against the need to detect abuse, diagnose errors and document security incidents. Relevant information may be isolated and retained while a specific incident is investigated, and must not be kept for other purposes. Deleted information may remain in providers’ restricted backups until those copies are rotated or deleted under their procedures. These copies are not used for routine follow-up, and earlier deletion instructions must be reapplied following restoration. Contact me for more information about retention of your information.
You may request access, correction, deletion and restriction of your personal information. You may object at any time to processing based on legitimate interests. For information you provided and which is processed automatically based on a contract or consent, you may request portability where the conditions apply. Use the contact details below. Requests are normally answered within one month. If the deadline must be extended as allowed by law, you will be informed of the extension and its reasons within the first month. Information that must be kept by law cannot always be deleted immediately. You may complain to the Norwegian Data Protection Authority.
If you previously consented to a particular use, you may withdraw that consent by contacting me. Withdrawal is as easy as giving consent. It does not affect the lawfulness of processing before withdrawal. Information still needed for an agreement, legal claim or legal obligation may be processed on the relevant independent basis.
The website uses storefront_locale to remember the selected language for up to one year. The preview also uses storefront_preview_token for up to one hour to associate technical requests with the correct website. This is technical storage for language selection and preview routing. The website has no advertising pixels, marketing cookies or its own visitor analytics, so no consent banner for those purposes is used.
This information is updated when processing changes. If a change materially affects how your information is used, I will clearly notify you before it takes effect where required by law.