Master Privacy Policy

Sigmundstad Digital | Effective Date: January 17, 2026

2. Introduction and Scope

This Master Privacy Policy applies to all services, websites, and applications provided by Sigmundstad Digital. Our commitment is to protect the privacy of our users while providing high-quality software solutions.

3. General Principles of Data Processing

We process personal data based on transparency, purpose limitation, and data minimization. We only collect data that is necessary for the functionality of our services or to comply with legal obligations.

4. Lawful Basis for Processing

According to GDPR, our processing is based on: (a) Performance of a contract, (b) Your explicit consent, (c) Legitimate interests (improving our services), or (d) Compliance with legal requirements.

5. User Rights (GDPR)

You have the right to request access to, correction of, or deletion of your personal data. You may also object to processing, request data portability, or withdraw consent at any time by contacting us.

6. Data Security and Encryption

We implement rigorous technical and organizational measures, including SSL/TLS encryption and secure server protocols, to prevent unauthorized access or disclosure of user information.

7. Data Retention Policy

Personal data is retained only as long as necessary for the purposes for which it was collected or to satisfy legal, accounting, or reporting requirements.

8. International Data Transfers

While our primary operations are in Norway, we may use global infrastructure (like Google Cloud) which may involve data transfers outside the EEA. We ensure such transfers are protected by Standard Contractual Clauses (SCCs).

9. Contact and Complaint Mechanisms

For any privacy-related concerns, contact digital@sigmundstad.net. You also have the right to lodge a complaint with the Norwegian Data Protection Authority (Datatilsynet).