Privacy Policy

Donido.art Online Shop — effective from March 2026

---

§ 1 — General Information

This Privacy Policy explains what personal data we collect when you use the donido.art online shop, how we use it, and what rights you have in relation to your data.

We take your privacy seriously. We only collect data that is necessary to process your order and communicate with you, and we never sell your data to third parties.

---

§ 2 — What Data We Collect

When you place an order or contact us, we may collect the following personal data:

• Full name
• Email address
• Delivery address (street, city, postal code, country)
• Phone number (if provided)
• Payment information — processed securely by our payment providers (Stripe / Klarna); we do not store card details
• Order history and correspondence with us

We also collect basic technical data automatically when you visit our website — such as IP address, browser type, and pages visited — through cookies and analytics tools. This data is anonymised and used solely to improve the website experience.

---

§ 3 — How We Use Your Data

We use your personal data for the following purposes:

• Order fulfilment — processing payments, preparing and shipping your order, and handling returns or complaints.
• Customer communication — sending order confirmations, shipping updates, and responding to your enquiries.
• Legal obligations — storing transaction records as required by Norwegian accounting and tax law.
• Website improvement — analysing anonymised usage data to improve our shop and user experience.

We do not use your data for automated profiling or targeted advertising.

---

§ 4 — Legal Basis for Processing

We process your personal data on the following legal bases under GDPR:

• Contract performance (Article 6(1)(b)) — processing necessary to fulfil your order.
• Legal obligation (Article 6(1)(c)) — processing required by Norwegian law (e.g. accounting records).
• Legitimate interests (Article 6(1)(f)) — processing necessary to operate and improve our shop, where your rights and interests are not overridden.

---

§ 5 — Who We Share Your Data With

We share your data only where strictly necessary:

• Shipping carriers — your name and delivery address are passed to the postal or courier service handling your shipment.
• Payment providers — Stripe and Klarna process payment data securely on our behalf. They are independent data controllers subject to their own privacy policies.
• Website hosting and technical services — our website is hosted on servers that may process data as part of standard operations. All providers are bound by data processing agreements.

We do not share your data with marketing companies, data brokers, or any other third parties.

---

§ 6 — International Transfers

Donido Art is based in Svalbard, Norway, which is part of the European Economic Area (EEA). Your data is processed within the EEA. Where any service provider operates outside the EEA, we ensure appropriate safeguards are in place in accordance with GDPR Chapter V.

---

§ 7 — How Long We Keep Your Data

• Order and transaction data — retained for 5 years as required by Norwegian accounting law.
• Customer correspondence — retained for up to 2 years after the last interaction.
• Technical/analytics data — anonymised and retained for up to 12 months.

Once the retention period expires, your data is securely deleted.

---

§ 8 — Your Rights

Under GDPR, you have the following rights regarding your personal data:

• Right of access — you can request a copy of the data we hold about you.
• Right to rectification — you can ask us to correct inaccurate or incomplete data.
• Right to erasure — you can ask us to delete your data, where no legal obligation requires us to retain it.
• Right to restriction — you can ask us to limit how we process your data in certain circumstances.
• Right to data portability — you can request your data in a structured, machine-readable format.
• Right to object — you can object to processing based on legitimate interests.

To exercise any of these rights, contact us at shop@donido.art. We will respond within 30 days.

---

§ 9 — Cookies

Our website uses cookies — small text files stored in your browser — to ensure basic functionality such as shopping cart operation and session management. We also use anonymised analytics cookies to understand how visitors use the site.

You can disable cookies in your browser settings at any time. Please note that disabling functional cookies may affect the operation of the shop.

---

§ 10 — Complaints

If you believe your data is being processed unlawfully, you have the right to lodge a complaint with the Norwegian Data Protection Authority (Datatilsynet) at datatilsynet.no, or with the supervisory authority in your country of residence.

We would however appreciate the opportunity to address your concerns directly first — please contact us at shop@donido.art.

---

§ 11 — Changes to This Policy

We may update this Privacy Policy from time to time. The current version is always available at donido.art/privacy-policy. Significant changes will be communicated via email to customers with active accounts or recent orders.

Last updated: March 2026