1. Data controller
- Company · Arctic Nutra AS
- Org. nr. · 837 925 932
- Address · Fosnagata 13, 6509 Kristiansund N, Norway
- Contact · contact@arcticnutra.com
2. What we process and why
Arctic Nutra is a B2B supplier. The personal data we process is limited to:
- Email enquiries. When you contact us, we receive your name, business email, company, and message content. We process this to respond to your enquiry and manage any resulting commercial relationship (legal basis: GDPR Art. 6(1)(b)).
- Server logs. Our hosting provider records IP address, browser, requested URL, referrer, and timestamp to deliver and secure the site (legal basis: Art. 6(1)(f), legitimate interest).
- Aggregate site analytics. We use two measurement tools. Vercel Analytics measures page views without cookies and collects no personally identifiable data (legal basis: Art. 6(1)(f), legitimate interest). Google Analytics 4 depends on your choice in the cookie banner: if you accept, it sets cookies to measure visits, pages viewed, approximate location, and device type (legal basis: Art. 6(1)(a), consent — withdraw at any time via “Cookie settings” in the footer); if you decline or have not yet chosen, it receives only anonymous, cookieless technical signals with no persistent identifier (Google Consent Mode; legal basis: Art. 6(1)(f)). IP addresses are truncated and not stored.
- Chat assistant conversations. Our site embeds a chat assistant that lets you ask questions about Arctic Nutra. The messages you send, the assistant's replies, and a coarse session identifier are stored to operate the service, improve responses, and let us follow up on serious enquiries. Do not enter personal or confidential information; treat the assistant as a public web form (legal basis: Art. 6(1)(f), legitimate interest in operating the assistant).
3. Retention
- Email enquiries: up to 24 months from last contact. If a commercial relationship begins, retained for the duration plus any applicable statutory period.
- Server logs: up to 90 days, then deleted or aggregated.
- Chat assistant conversations: up to 12 months, then deleted. We may retain individual conversations longer where they evidence a specific commercial enquiry; in those cases retention follows the email-enquiries rule above.
4. Service providers
We use the following processors, each bound by a data processing agreement:
- Vercel Inc. (USA): website hosting, CDN, and analytics. Server logs and technical data may be processed in the EU or USA. Transfers are covered by the EU–US Data Privacy Framework and Standard Contractual Clauses.
- Google Ireland Ltd. (EU) / Google LLC (USA): Google Analytics 4 for traffic measurement, operating according to your cookie consent (see the Cookie Policy). Transfers to the USA are covered by the EU–US Data Privacy Framework and Standard Contractual Clauses.
- Microsoft Corporation (USA via Microsoft Ireland Operations Ltd.): business email via Microsoft 365.
- Anthropic PBC (USA): the language model behind our chat assistant. Messages you send to the assistant are transmitted to Anthropic's API to generate a reply. Anthropic does not use API inputs or outputs to train its models. Transfers are covered by Standard Contractual Clauses and Anthropic's Data Processing Addendum.
- Supabase Inc. (USA, EU hosting): database used to persist chat assistant conversations. Data is stored in Supabase's EU region. Transfers are covered by Standard Contractual Clauses and Supabase's Data Processing Addendum.
We do not sell personal data or share it with third parties for marketing purposes.
5. Your rights
Under GDPR you have the right to access, correct, erase, restrict, or object to processing of your personal data, and to lodge a complaint with Datatilsynet. To exercise any right, write to contact@arcticnutra.com. We will respond within one month.
6. Cookies
See the Cookie Policy.
7. Changes
We may update this policy to reflect changes in our practices or applicable law. The date above indicates the last revision.