Register new organization

Last updated 26 October 2026

This privacy notice for Kulturella AS ("Company," "we," "us," or "our"), describes how and why we might collect, store, use, and/or share ("process") your information when you use our services ("Services"), such as when you: Visit our website at https://kulturella.io, or any website of ours that links to this privacy notice, or use our platform and its features. Engage with us in other related ways, including any sales, marketing, or events.

Questions or concerns? Reading this privacy notice will help you understand your privacy rights and choices. If you do not agree with our policies and practices, please do not use our Services. If you still have any questions or concerns, please contact us at post@kulturella.no.

This summary provides key points from our privacy notice, but you can find out more details about any of these topics by using our table of contents below to find the section you are looking for.

What personal information do we process?

When you visit, use, or navigate our Services, we may process personal information depending on how you interact with Kulturella AS and the Services, the choices you make, and the products and features you use.

Do we process any sensitive personal information?

We do not process sensitive personal information.

Do we receive any information from third parties?

As a rule, we do not receive personal information from third parties. The exception is tickets for events that use our event app, Vangen: in that case we receive a reduced version of your ticket from the organiser's ticketing platform (see section 1). We do receive basic profile information when you register using a social media account.

How do we process your information?

We process your information to provide, improve, and administer our Services, communicate with you, for security and fraud prevention, and to comply with law. We process anonymised and aggregated behavioural data to produce cultural statistics for the public sector — with your consent.

How do we keep your information safe?

We have organisational and technical processes and procedures in place to protect your personal information. However, no electronic transmission over the internet or information storage technology can be guaranteed to be 100% secure.

What are your rights?

Depending on where you are located geographically, the applicable privacy law may mean you have certain rights regarding your personal information, including the right to access, rectify, erase, restrict, or object to processing.

How do you exercise your rights?

The easiest way to exercise your rights is by contacting us at post@kulturella.no. We will consider and act upon any request in accordance with applicable data protection laws.

1. WHAT INFORMATION DO WE COLLECT?
2. HOW DO WE PROCESS YOUR INFORMATION?
3. HOW DO WE ANONYMISE DATA FOR CULTURAL STATISTICS?
4. WHAT LEGAL BASES DO WE RELY ON TO PROCESS YOUR PERSONAL INFORMATION?
5. WHEN AND WITH WHOM DO WE SHARE YOUR PERSONAL INFORMATION?
6. WHAT IS OUR STANCE ON THIRD-PARTY WEBSITES?
7. DO WE USE COOKIES AND OTHER TRACKING TECHNOLOGIES?
8. HOW DO WE HANDLE YOUR SOCIAL LOGINS?
9. HOW LONG DO WE KEEP YOUR INFORMATION?
10. HOW DO WE KEEP YOUR INFORMATION SAFE?
11. DO WE COLLECT INFORMATION FROM MINORS?
12. WHAT ARE YOUR PRIVACY RIGHTS?
13. CONTROLS FOR DO-NOT-TRACK FEATURES
14. DO WE MAKE UPDATES TO THIS NOTICE?
15. HOW CAN YOU CONTACT US ABOUT THIS NOTICE?
16. HOW CAN YOU REVIEW, UPDATE, OR DELETE THE DATA WE COLLECT FROM YOU?

Personal information you disclose to us

In Short: We collect personal information that you provide to us. We collect personal information that you voluntarily provide to us when you register on the Services, express an interest in obtaining information about us or our products and Services, when you participate in activities on the Services, or otherwise when you contact us.

Personal Information Provided by You.

The personal information that we collect depends on the context of your interactions with us and the Services, the choices you make, and the products and features you use. The personal information we collect may include the following:
– names
– phone numbers
– email addresses
– contact or authentication data
– personal preferences
– artistic field, genre, biography and profile picture

Sensitive Information.

We do not process sensitive personal information.

Social Media Login Data.

We may provide you with the option to register with us using your existing social media account details, like your Facebook or other social media account. If you choose to register in this way, we will collect the information described in the section called "HOW DO WE HANDLE YOUR SOCIAL LOGINS?" below.

Behavioural Data.

We collect data about actions you perform on the platform, including which buttons you click, and which opportunities (funding schemes, activities, collaboration requests) you express interest in by clicking "Apply now" or similar action buttons. This data is used to understand user behaviour and to generate anonymised cultural statistics. See section 3 for details on how anonymisation works.

Survey Data.

When you express interest in a funding scheme, activity or collaboration, you may receive an automatic follow-up survey. We ask whether you applied or participated, whether you received support and if so how much, and whether a collaboration involved payment. Participation in surveys is voluntary. Responses are used only in anonymised and aggregated form.

Information automatically collected

In Short: Some information — such as your Internet Protocol (IP) address and/or browser and device characteristics — is collected automatically when you visit our Services.

We automatically collect certain information when you visit, use, or navigate the Services. This information does not reveal your specific identity but may include device and usage information, such as your IP address, browser and device characteristics, operating system, language preferences, referring URLs, device name, country, location, information about how and when you use our Services, and other technical information. This information is primarily needed to maintain the security and operation of our Services, and for our internal analytics and reporting purposes.

Like many businesses, we also collect information through cookies and similar technologies.

The information we collect includes:

Log and Usage Data. Log and usage data is service-related, diagnostic, usage, and performance information our servers automatically collect when you access or use our Services and which we record in log files. Depending on how you interact with us, this log data may include your IP address, device information, browser type, and settings and information about your activity in the Services (such as the date/time stamps associated with your usage, pages and files viewed, searches, and other actions you take such as which features you use), device event information (such as system activity, error reports, and hardware settings).

Device Data. We collect device data such as information about your computer, phone, tablet, or other device you use to access the Services. Depending on the device used, this device data may include information such as your IP address (or proxy server), device and application identification numbers, location, browser type, hardware model, Internet service provider and/or mobile carrier, operating system, and system configuration information.

Location Data. We collect location data such as information about your device's location, which can be either precise or imprecise, based on your IP address. You can opt out of allowing us to collect this information by disabling your Location setting on your device. However, if you choose to opt out, you may not be able to use certain aspects of the Services.

Applications for activities. When you apply for an activity using the application form on Kulturella, we store your answers and any attachments (for example a CV, portfolio or images). Your application and attachments are only visible to you and to the person who posted the activity. Attachments are stored in a closed area that cannot be accessed from the internet.

Invitations. If someone invites you to apply for an activity, we store the invitation, any message included with it, and whether you have seen or responded to it.

Availability. If you add when you are available or busy, we store those periods. Logged-in members can see your availability when looking for collaborators. You can switch off «Open to invitations» at any time, and you will then not appear in candidate suggestions.

Volunteering. If you sign up as a volunteer, we store the tasks you can help with, and the experience and festivals you have volunteered at if you add them. This is only shown to logged-in members, is used to suggest you for volunteer jobs, and is deleted when you delete your account.

Log of suggested people. When we show you suggested people (for example under «My matches»), we store which profiles were shown to you and in which position, and whether you clicked on them. This is used only to measure and improve the suggestions, is deleted after 180 days, and is removed when you or the person shown deletes their account.

Location you choose to share. If you tap «Use my location» on the map or in the candidate search, we use your device's location to centre the search. The location is rounded (to roughly 100 metres–1 kilometre), used only at that moment, and never stored.

Verification. When we verify profiles, we record the status (verified, pending or not verified), when you asked to be verified, and which steps have been taken (for example that we have asked for more information). Messages about verification are sent as regular messages on Kulturella.

What you are looking for. The field «What are you looking for on Kulturella?» is not shown to other members. We only use it to suggest relevant people and opportunities to you.

Calendar connections (Google Calendar and other calendars). If you choose to connect Google Calendar or add a private calendar address, we only retrieve when you are busy (time ranges) – never titles, descriptions, attendees or other details. The same applies to Outlook/Microsoft 365. In the app you can also give access to the calendar on your phone: the app then reads only the start and end times of your events and sends them to us, never titles or other details, and we only store which days you are busy. From Google we also retrieve the email address of the account, so you can see which calendar is connected. This information is only used to show your availability on Kulturella, is updated automatically every hour, is not shared with others, and is not used for advertising or to train artificial intelligence. Access is stored encrypted. You can disconnect at any time under «See availability» on your profile – the busy times we retrieved are then deleted and access is revoked with Google. Kulturella's use and transfer of information received from Google APIs will adhere to the Google API Services User Data Policy, including the Limited Use requirements.

Where you found us. If you arrive through a referral link, we store the referral code so that both you and the member who referred you can get the benefit. Which campaign or Facebook group a link came from (for example utm and km_src parameters in the link) is only stored if you have accepted statistics in the cookie choices. We do not measure whether you open our emails or click the links in them. New members may also answer the optional question "Where did you hear about Kulturella?". We only use this to understand which channels work.

Deadline alerts without an account. If you sign up for deadline alerts by email, we store your email address, the field and county you chose, when you confirmed, and when you last clicked a link in an email. We send nothing until you have confirmed the sign-up (double opt-in), and you can unsubscribe with one click in every email. The legal basis is your consent.

Confirmed role in organisations. If you are the owner or an administrator of an organisation on Kulturella, you can confirm your role in three ways: (1) We check the name and date of birth you provide against the roles in the Brønnøysund Register Centre (general manager, proprietor, board, partner). We store only the result, never the information from the register. (2) We send a code to an email address on the organisation's own domain. (3) You submit a case to our verification team, optionally with an attachment. The attachment is stored privately and deleted 30 days after the case has been decided.
Invoice details. If you send invoices through Kulturella, we store your invoice profile (for example name, address, organisation number and account number) on your account, so you do not have to fill it in every time.

Event tickets (Vangen). Some organisers use our event app, Vangen, for tickets and entry. The organiser can then connect their ticketing platform (Eventbrite, TicketCo, Checkin, DICE, Billetto, Ticketbutler, WordPress/WooCommerce, Shopify or Stripe) or upload a file with the tickets. From the ticket we only store what is needed to let you in and show the ticket in the app: ticket type, quantity, status (for example valid or refunded) and your name shortened to your first name and the first letter of your surname («Kari N.»). Your email address is never stored in plain text, only as a code (hash), so the ticket can appear in the app when you are logged in with the same, confirmed address. Barcodes and QR codes are also stored only as hashes. The organiser is the controller for your ticket purchase. Kulturella processes the ticket data on the organiser's behalf, as a data processor.

Organiser connections and payment links. When an organiser connects a ticketing platform, we store the API key encrypted. It is only used to fetch tickets for the event. If the organiser sells tickets with a Stripe payment link, you pay on Stripe, and afterwards you are taken straight to the event's app with your ticket. We never receive your card details, and we do not store them.

Partner benefits and referrals. If you sign up through a partner link (kulturella.io/p/…), we store which partner you came from, as described under «Where you found us». Before the partner benefit is given, your email address must be confirmed. For this we use the same confirmation mark as elsewhere on Kulturella, so we do not collect anything new. If another member referred you, you get a trial period once you have completed «Get started». We store who referred you, so that both of you can be rewarded.

In Short: We process your information to provide, improve, and administer our Services, communicate with you, for security and fraud prevention, to comply with law, and — with your consent — to produce anonymised cultural statistics for the public sector.

We process your personal information for the following purposes:

2.1 To provide and administer our Services
We process your information so you can create and log in to your account, use the platform's features, communicate with other users, and receive the services you have requested.

2.2 To improve our Services
We analyse usage data and behavioural data to improve platform functionality, fix technical errors, and train and improve the AI models that underpin our matching and recommendation features.

2.3 To produce cultural statistics for the public sector
We aggregate and anonymise behavioural data and survey responses to produce cultural statistics. These statistics may be delivered to Norwegian municipalities, county authorities and other public sector actors as a basis for cultural administration and planning. Statistical deliveries never contain personally identifiable information. It is not possible to identify individual users from the data delivered to the public sector.

This purpose requires your active consent. You can give or withdraw consent at any time under Account Settings > Privacy, or by contacting us at post@kulturella.no.

2.4 To send administrative information
We may process your information to send you details about our products and services, changes to our terms and policies, and other similar information.

2.5 For security and fraud prevention
We may process your information when necessary to protect the security of our Services and to prevent fraud and misuse.

2.6 To comply with legal obligations
We may process your information where we believe it is necessary for compliance with our legal obligations, such as to cooperate with a law enforcement body or regulatory agency.

Keywords for better suggestions. To give you better suggestions, we create short keywords from your profile and what you are looking for (for example «photographer» or «festival»). The keywords are created by an open language model that we run on our own server in the EU (Amsterdam), and are not shown to others. The same model calculates how well profiles, funding opportunities and activities match. Your profile text is not sent to external AI services for this. They are recreated when you update your profile and deleted when you delete your account.
ELLA, the AI assistant. When you chat with ELLA, your messages are sent to Anthropic (USA, EU Standard Contractual Clauses apply), which generates the replies. Conversations are stored by us for 90 days so you can pick up where you left off. Your IP address is not stored in plain text with the conversation, only as a one-way checksum (hash). From the conversations we create short keywords about the topics raised, so that we can suggest relevant content. You can delete your entire chat history at any time under Settings > Privacy, and everything is deleted when you delete your account. The only thing we keep is anonymous counts of how often a topic comes up, with no link to you. Words that are a member's name or contain numbers are left out.
Translation. When you use Kulturella in English, text on the site is translated by an open language model (OPUS-MT) that we run on our own server in the EU (Amsterdam). If our service does not respond, or a translation fails our checks, the text is sent to Anthropic instead (USA, EU Standard Contractual Clauses apply). The same applies when English profile text is translated into Norwegian. Translations are stored so the same text does not have to be translated again, and translations of your own profile text are deleted when you delete your account.

Before any data is used for cultural statistics, it goes through the following processing steps:

– All personally identifiable information (name, email address, phone number) is permanently removed
– Data is aggregated — the minimum group size is 10 users, ensuring that no individual can be identified
– Geographic data is coarsened to municipality level or higher
– Data is pseudonymised internally during processing and stored separately from personal profiles

Kulturella follows the principle of data minimisation: we do not use more data than is necessary to produce the requested statistics.

The aggregated and anonymised statistics that are delivered to the public sector cannot be traced back to you as an individual.

In Short: We only process your personal information when we believe it is necessary and we have a valid legal reason (i.e., legal basis) to do so under applicable law.

The General Data Protection Regulation (GDPR) requires us to explain the valid legal bases we rely on in order to process your personal information. We rely on the following legal bases:

Consent (GDPR art. 6 no. 1 a)
We rely on your consent for the production of cultural statistics for the public sector (section 2.3 above). You can withdraw your consent at any time without this affecting the lawfulness of processing carried out before the withdrawal. To withdraw consent, go to Account Settings > Privacy or contact us at post@kulturella.no.

Performance of a Contract (GDPR art. 6 no. 1 b)
We rely on this basis to provide our core services — account creation, platform features, and user-to-user communication.

Legitimate Interests (GDPR art. 6 no. 1 f)
We rely on this basis to improve our Services, analyse usage patterns, train our AI models, and prevent fraud. We have assessed that our legitimate interests are not overridden by your interests or fundamental rights.

Legal Obligations (GDPR art. 6 no. 1 c)
We rely on this basis where processing is necessary to comply with a legal obligation, such as cooperating with regulatory authorities or law enforcement.

In Short: We may share information in specific situations described in this section and/or with the following third parties.

Other users of the platform. Profile information you enter — name, artistic field, biography and profile picture — is visible to other registered users. You control what you enter in your profile.

Public profile page. By default, a limited version of your profile is visible to anyone on the web, including search engines: name, profile picture, title, artistic fields, city (without address) and the first lines of your biography. Email, phone, address, documents, CVs, references, availability and messages are never shown publicly. Profiles that are hidden, set to "Only me" or not approved are not shown. This processing is based on our legitimate interest in making members visible to clients and collaborators. You can turn it off at any time with the option "Show my profile outside Kulturella" under Edit profile. When you turn it off, the page is removed from Kulturella immediately, but it may take some time before search engines update their results.

Tavla (the board). Pictures in your profile gallery or posted to Tavla, videos you link to on your profile (YouTube/Vimeo – the player only loads when someone taps it), and your profile card during your first days as a new member, may be shown on Tavla, which anyone can see – also without logging in. This only happens when your profile is public and not hidden, and only if you are 18 or older. If you are 13–17, or we do not know your age, nothing is shown until you have ticked the box yourself; we store when you gave consent, and you can withdraw it at any time. You can hide single pictures or everything with "Hide from public view" under Edit profile. When you post a picture to Tavla and the picture contains a location, we suggest the municipality where it was taken ("Taken in: Molde"). You see the suggestion before you publish and can change or remove it. Pictures in your profile gallery never get a place automatically. We only store the municipality, never the location itself, and we remove location data (GPS) from the pictures you upload. To find the municipality, a rounded location (about 1 km) is sent to the map service Nominatim from the OpenStreetMap Foundation (United Kingdom, approved by the EU for transfers of personal data). The same service is used when we turn the place you write on your profile or on an activity into map coordinates, and when we find which country you are in from a location you choose to share. We also store likes (♥), comments, who you follow and reports you send, to show them and notify the person concerned; comments are only shown to logged-in members. The legal basis is our legitimate interest in showing cultural life on the platform (and your consent if you are under 18). Everything is deleted when you delete your account.

Response time. If you usually reply to messages within a day, your profile may show "Usually replies within a day" (or "within a few hours"). It is calculated from the timestamps of messages in the last 90 days, never from their content, and is only shown when it is positive and based on at least three enquiries. The legal basis is our legitimate interest in making it easier to get in touch. You can turn it off with the option "Show my response time on my profile" under Edit profile.

Data processors. We use data processors who operate technical infrastructure on our behalf. All data processors are bound by data processing agreements and may not use your data for their own purposes. Our primary data processors are:
– DigitalOcean — cloud infrastructure and server hosting. Our servers, database and our own language model are located in Amsterdam (EU). DigitalOcean is a US company, and EU Standard Contractual Clauses apply.
– Stripe — payment for memberships and services (EU Standard Contractual Clauses apply)
– SendGrid (Twilio) — sending email and receiving email replies to communities (USA, EU Standard Contractual Clauses apply)
– Google Firebase — push notifications to the app (EU Standard Contractual Clauses apply)
– Apple and Google — in-app purchases and subscriptions, processed under their own terms
– Anthropic — AI engine for ELLA, and fallback for translation (USA, EU Standard Contractual Clauses apply)

Public sector. Aggregated and anonymised cultural statistics may be shared with Norwegian municipalities, county authorities and state actors. No personal data is included in these deliveries. See sections 2.3 and 3 for details.

Business Transfers. We may share or transfer your information in connection with, or during negotiations of, any merger, sale of company assets, financing, or acquisition of all or a portion of our business to another company. You will be notified in advance.

Legal requirements. We may disclose your information where required by law, court order, or governmental regulation.

Video meetings (Jitsi). If an organiser chooses "Create meeting link automatically" in a community calendar, we create a meeting link on meet.jit.si, operated by 8×8. The link contains a random code and the meeting title, so the title is shown in the meeting. When you join the meeting, audio, video and the name you enter are processed by Jitsi/8×8 under their privacy policy. The person who starts the meeting signs in to Jitsi with Google, GitHub or Facebook.

Replying by email in communities. Emails about new posts and comments in a community have a reply address on svar.kulturella.io, and each community has its own address there. If you reply to the email, or send an email to the community's address from the address you are registered with, the text is published as a comment or a post in the community, just as if you had written it there. The email is received by SendGrid (Twilio, USA – EU Standard Contractual Clauses apply) and passed on to our servers. We do not store the email itself, only the text you wrote (quoted text and signatures are removed). We check that the email comes from your address and reject email from anyone else. Posts and comments are deleted together with your account.

In Short: We are not responsible for the safety of any information that you share with third parties that we may link to or who advertise on our Services, but are not affiliated with, our Services.

The Services may link to third-party websites, online services, or mobile applications. We do not make any guarantee regarding any such third parties, and we will not be liable for any loss or damage caused by the use of such third-party websites, services, or applications. Any data collected by third parties is not covered by this privacy notice. You should review the policies of such third parties and contact them directly to respond to your questions.

In Short: We use cookies and other tracking technologies to collect and store your information.

We use cookies and similar tracking technologies (like web beacons and pixels) to access or store information. We use cookies to:
– Keep you logged in between visits
– Remember your settings and preferences
– Analyse traffic and usage patterns

You can manage cookies in your browser settings. Please note that disabling certain cookies may affect the functionality of the platform. Specific information about how you can refuse certain cookies is set out in our Cookie Notice.

Cookies that show where you came from (for example a Facebook group, a search page, a partner link or a referral link) are only set if you have consented to statistics in the consent banner. Without consent, the source only follows the link you clicked and is stored only if you sign up.

Measuring sign-ups. To understand where people give up during sign-up, we count how far each sign-up gets. This uses a random code that only exists in your browser while you sign up. We do not store IP address, name or email in this measurement, and the rows are deleted after 180 days.

Deadline calendar on other websites. Some organisations show our deadline calendar on their own websites. It sets no cookies and stores nothing in your browser. We only count how many times the calendar is shown and clicked, per website and day, without IP addresses or anything else that can be linked to you. The counts are deleted after 400 days.

In Short: If you choose to register or log in to our Services using a social media account, we may have access to certain information about you.

Our Services offer you the ability to register and log in using your third-party social media account details (like your Facebook login). Where you choose to do this, we will receive certain profile information about you from your social media provider.

The profile information we receive may vary depending on the social media provider concerned, but will often include your name, email address, and profile picture, as well as other information you choose to make public on such a social media platform.

We will use the information we receive only for the purposes that are described in this privacy notice. Please note that we do not control, and are not responsible for, other uses of your personal information by your third-party social media provider. We recommend that you review their privacy notice to understand how they collect, use, and share your personal information.

In Short: We keep your information for as long as necessary to fulfill the purposes outlined in this privacy notice unless otherwise required by law.

We retain different categories of data for different periods:

– Account information: For as long as your account is active. Deleted within 30 days of account closure.
– Behavioural data: 12 months from the time of collection, then anonymised or deleted.
– Survey responses: 12 months in personally identifiable form, then retained only in aggregated form.
– Aggregated cultural statistics: Retained indefinitely — contains no personal data.
– Log and security data: 90 days.

When we have no ongoing legitimate business need to process your personal information, we will either delete or anonymise such information, or, if this is not possible (for example, because your personal information has been stored in backup archives), then we will securely store your personal information and isolate it from any further processing until deletion is possible.

Applications, invitations and availability. Applications and attachments are deleted automatically 12 months after the activity has expired. Invitations and availability are kept for as long as you have an account and are deleted when you delete your account.

Unconfirmed deadline-alert sign-ups are deleted after 7 days. Confirmed sign-ups are deleted when you unsubscribe, or automatically after 12 months without any click in the emails.

ELLA and verification. Conversations with ELLA are stored for 90 days, and you can delete them yourself at any time. Keywords from conversations older than 12 months are kept only as anonymous monthly counts. Attachments in role-confirmation cases are deleted 30 days after the case has been decided.

Payments and accounting. We keep information about payments, orders and invoices for five years, because the Norwegian Bookkeeping Act requires it. When you delete your account, this information is unlinked from your profile, but the accounting records themselves are kept until the deadline.

Tickets in Vangen. Tickets, check-ins and ticket codes are deleted automatically 30 days after the event has ended. Files that the organiser uploads to import tickets are stored encrypted and deleted as soon as the import is finished or cancelled, and after 2 hours at the latest.

Audit log. We log when someone on our team opens privacy pages in the admin panel, or when someone is given or loses access to them, so that it can be verified that information is only used by those who should use it. If you delete your account, the log entries remain, but the link to you is removed. The log is deleted after 12 months.

In Short: We aim to protect your personal information through a system of organisational and technical security measures.

We have implemented appropriate and reasonable technical and organisational security measures designed to protect the security of any personal information we process, including:
– Encryption of data in transit (TLS) and at rest
– Access controls — only authorised personnel have access to personal data
– Data processing agreements with all sub-processors
– Regular security assessments

However, no electronic transmission over the Internet or information storage technology can be guaranteed to be 100% secure. In the event of a security breach that affects your rights, we will notify you and the Norwegian Data Protection Authority (Datatilsynet) within 72 hours, as required by GDPR.

In Short: We do not knowingly collect data from or market to persons under 16 years of age.

Kulturella's services are not directed at persons under the age of 16. We do not knowingly collect personal information from minors. If we become aware that we have received information about a minor, we will delete it immediately. If you become aware of any data we may have collected from persons under 16, please contact us at post@kulturella.no.

In Short: As a user in the European Economic Area (EEA), you have rights that allow you greater access to and control over your personal information.

Under the GDPR, you have the following rights:
– Right of access: You can request a copy of all information we hold about you.
– Right to rectification: You can ask us to correct inaccurate information.
– Right to erasure: You can ask us to delete your personal information ("the right to be forgotten").
– Right to restriction: You can ask us to restrict processing of your personal information.
– Right to data portability: You can request your data in a machine-readable format.
– Right to object: You can object to processing based on legitimate interests.
– Right to withdraw consent: You can withdraw your consent to cultural statistics processing at any time under Account Settings > Privacy. This does not affect the lawfulness of processing carried out before withdrawal.

To exercise your rights, log in to your account and go to Settings, or contact us at post@kulturella.no. We will respond within 30 days.

You also have the right to lodge a complaint with the Norwegian Data Protection Authority (Datatilsynet): datatilsynet.no | post@datatilsynet.no | +47 22 39 69 00.

Account Information

If you would at any time like to review or change the information in your account or terminate your account, you can log in to your account settings or contact us using the contact information provided below. Upon your request to terminate your account, we will deactivate or delete your account and information from our active databases within 30 days. However, we may retain some information in our files to prevent fraud, troubleshoot problems, assist with any investigations, enforce our legal terms and/or comply with applicable legal requirements.

Most web browsers and some mobile operating systems and mobile applications include a Do-Not-Track ("DNT") feature or setting you can activate to signal your privacy preference not to have data about your online browsing activities monitored and collected. At this stage no uniform technology standard for recognising and implementing DNT signals has been finalised. As such, we do not currently respond to DNT browser signals or any other mechanism that automatically communicates your choice not to be tracked online. If a standard for online tracking is adopted that we must follow in the future, we will inform you about that practice in a revised version of this privacy notice.

In Short: Yes, we will update this notice as necessary to stay compliant with relevant laws.

We may update this privacy notice from time to time. The updated version will be indicated by an updated "Last updated" date at the top of this notice. If we make material changes to this privacy notice, we will notify registered users by email at least 30 days before the change takes effect. We encourage you to review this privacy notice periodically to be informed of how we are protecting your information.

If you have questions or comments about this notice, you may email us at post@kulturella.no or by post to:

Kulturella AS
Naustskaret 2
Molde, Møre og Romsdal 6409
Norway

Data Protection Authority (supervisory authority):
Datatilsynet — datatilsynet.no | post@datatilsynet.no | +47 22 39 69 00

You have the right to request access to the personal information we collect from you, change that information, or delete it.

To review or update your information, log in to your account and go to Settings.

To delete your account and all associated personal data, log in and go to Settings > Account > Delete account.

To exercise any of your privacy rights or to withdraw consent for cultural statistics processing, contact us at post@kulturella.no. We will respond within 30 days.