Controller
EBURNI, org. no. 938 604 010. Email: kontakt@eburni.no.
Data, purposes and legal basis
- Order and pickup: name, email address, mobile number, country, the content of the order and your comment. The data is used to register the pre-order, confirm it by email and text message, arrange pickup and receive payment. Basis: the contract with you (GDPR art. 6(1)(b)). Reservations that are not confirmed are deleted.
- Accounting: order and payment data. Basis: legal obligation (GDPR art. 6(1)(c), the Norwegian Bookkeeping Act, bokføringsloven). The data is kept for five years after the end of the financial year (section 13).
- Text messages about the next delivery: mobile number and the time of consent. This is optional and requires you to tick the box at checkout. Basis: consent (GDPR art. 6(1)(a), markedsføringsloven, the Norwegian Marketing Control Act, section 15). You can withdraw consent at any time by replying STOP or writing to kontakt@eburni.no. The data is kept until you withdraw consent.
- Enquiries: what you send by email or text message. Basis: the contract when the enquiry concerns an order, otherwise a legitimate interest in answering enquiries (GDPR art. 6(1)(f)). Enquiries are deleted when the matter is closed, unless the law requires them to be kept.
- Technical data: the shop stores the IP address and browser information with the order. Basis: legitimate interest in securing and documenting the order (GDPR art. 6(1)(f)). The data follows the order and is kept as long as it.
Recipients and transfers
EBURNI does not sell personal data. The data is processed by the services needed for the order: domene.no (web hosting), Google (email through Google Workspace) and Vipps (payment at pickup, under Vipps’s own terms). Google may process data outside the EEA. The transfer relies on the EU standard contractual clauses in Google’s data processing agreement, or another approved transfer mechanism.
Cookies
The site uses only necessary cookies: the language choice (eb_lang, 1 year), the shop’s cart and session, and the choice you make in the cookie banner. No analytics, advertising or tracking.
Your rights
You have the right to access, correct and delete your data, to restrict processing and to data portability. You can object to processing based on legitimate interest, and you can withdraw consent. Write to kontakt@eburni.no. The request is answered within one month. Data that EBURNI must keep by law, such as accounting records, cannot be deleted before the retention period ends. You can complain to Datatilsynet (the Norwegian Data Protection Authority): datatilsynet.no.
Required or optional
Name, email address and mobile number are required for the order to be accepted. Consent to text messages about the next delivery is optional, and the order can be completed without it. EBURNI does not use automated decisions or profiling.
Last updated: 12 November 2026.