Privacy Policy

1. Data Controller

OMETALL NORGE OLSVIK (Org.no: 961838657) is the data controller for the processing of personal data on this website.

2. Cookies and Tracking

• Google Analytics: Website usage analysis (loaded only after explicit consent via our cookie banner)
• Essential cookies: Required for site functionality, including authentication sessions for the dealer portal
• Preference: Your cookie consent choice is stored in your browser's local storage. Clear browser data and revisit to change settings

3. Personal Data Collected

• Contact information: Name, email, phone number
• Company information: Company name, organization number, country (for distributors)
• Communications: Messages submitted via contact forms
• Dealer portal account data: Email address, encrypted password, and user role for authentication and access to the dealer portal
• B2B order data: Company details, delivery and invoice addresses, invoice email, order items, quantities, pricing, payment terms, shipping information, references, delivery notes, and comments
• Distributor application data: Company name, contact person, email, phone, organization number, website, and message
• Analytics: Anonymized usage data via Google Analytics (consent required)

4. Data Collection Methods

• Contact forms: Via submit-form.com (form backend service)
• Dealer portal: Account registration, order placement, and profile management via our dealer portal (data stored in Supabase)
• Distributor applications: Online application form
• Email: Direct correspondence
• Analytics: Google Analytics (consent required)

5. Purpose of Processing

• Responding to inquiries and providing support
• Processing and managing B2B orders and deliveries
• Providing and maintaining dealer portal accounts
• Sending transactional emails (order confirmations, status updates, account invitations)
• Managing distributor relationships and applications
• Website analytics and improvement (consent required)
• Legal and accounting compliance

6. Legal Basis

• Consent (Art. 6(1)(a)): Cookie acceptance and voluntary form submissions
• Contract (Art. 6(1)(b)): Order fulfillment, dealer account management, and service delivery
• Legitimate interest (Art. 6(1)(f)): Business operations, support, and website security
• Legal obligation (Art. 6(1)(c)): Accounting and regulatory compliance

7. Data Processors and Third-Party Services

We use the following third-party services to operate this website. These services act as data processors on our behalf:

• Supabase: Database hosting, user authentication, and file storage. Stores dealer accounts, orders, products, and application data. Hosted on EU servers (GDPR compliant)
• Resend: Transactional email delivery for order confirmations, status updates, dealer invitations, and admin notifications
• submit-form.com: Contact form and public order form processing
• Vercel: Website hosting and deployment
• Google Analytics: Website usage analysis (loaded only with user consent)
• Google Fonts: Web font delivery. Your IP address may be shared with Google when fonts are loaded
• Authorities: Personal data may be shared with public authorities when legally required

We do not sell personal data to third parties.

8. International Data Transfers

Our primary database (Supabase) is hosted within the EU. Some of our third-party service providers may process data outside the EU/EEA:

• Resend, Vercel, Google: May process data in the United States. These transfers are safeguarded by the EU-U.S. Data Privacy Framework and/or Standard Contractual Clauses (SCCs) in accordance with GDPR Chapter V

9. Data Retention

• Inquiries: 24 months after last contact
• B2B orders: 5 years (Norwegian accounting requirements)
• Dealer accounts: Duration of relationship plus 3 years
• Distributor applications: 24 months after review
• Analytics: Per Google Analytics retention settings

10. Your Rights (GDPR)

Under the General Data Protection Regulation, you have the following rights:

• Access: Request information about your stored data
• Rectification: Correct inaccurate data
• Erasure: Request deletion where applicable
• Restriction: Limit processing of your data
• Portability: Receive your data in a structured, machine-readable format
• Objection: Object to processing based on legitimate interest
• Withdraw consent: At any time for consent-based processing

To exercise your rights, contact us at: contact@powernozzles.com

11. Automated Decision-Making

We do not use automated decision-making or profiling that produces legal effects or similarly significant effects on individuals.

12. Security

We implement appropriate technical and organizational measures to protect your personal data, including encryption of data in transit and at rest, access control, secure authentication, and regular security assessments.

13. Complaints

If you believe your data protection rights have been violated, you have the right to lodge a complaint with:

14. Contact

For questions about this privacy policy or how we process your personal data: