Privacy Policy
Last updated 17 July 2026
This privacy policy explains how EpleFiksTRD collects, uses and protects your personal data when you visit our website, book an appointment, or contact us. We process personal data in accordance with the Norwegian Personal Data Act and the EU General Data Protection Regulation (GDPR).
Data controller
EpleFiksTRD (org. no. 830131132) is the data controller for the personal data collected through our website and services. If you have questions about privacy, you can contact us at:
- AddressSagvegen 3B, 7038 Trondheim
- Emailinfo@eplefikstrd.no
- Phone483 94 542
What personal data we collect
We mainly collect data you provide to us yourself, in the following cases:
- Appointment booking: name, email address, phone number, chosen device model, requested repair, date and time, and any notes you write yourself.
- Contact form: name, email address, phone number (optional) and the content of your message.
- IP address: to prevent abuse of the booking and contact forms, we use automatic rate limiting, which temporarily processes your IP address. This is only stored in the server's memory and is cleared automatically.
- We will never ask you for your password, PIN code or screen lock code via the website.
Purpose and legal basis
We use the data to confirm and carry out your appointment, communicate about the repair, and respond to inquiries you send us.
The legal basis is that the processing is necessary to fulfil our agreement with you (GDPR Article 6(1)(b)), or our legitimate interest in responding to inquiries, preventing abuse and providing good customer service (Article 6(1)(f)).
Your name, email and phone number are necessary for us to confirm and carry out your appointment or respond to your inquiry. Without this information we're unfortunately unable to help you.
Who we share data with
Your personal data is stored in our own booking system and is not shared with third parties for marketing purposes. We do use a few suppliers who process data on our behalf (data processors):
- Our hosting provider (Amazon Web Services), which runs our website and database.
- Microsoft (Outlook / Microsoft 365), which we use to send email confirmations and notifications.
- Google Maps, which provides the map on our contact page. The map loads automatically when you open the page — see the section below for details.
- Google Analytics and Google Ads, only if you have actively accepted cookies in the consent banner — see the cookies section below.
- Payment for repairs takes place in-store via Vipps, card terminal, cash or invoice. We do not store any card or payment details on the website.
International data transfers
Our website and database run on servers hosted by Amazon Web Services (AWS) within the EU/EEA, so your personal data is normally not transferred outside the EU/EEA through our website hosting.
We use Microsoft Outlook / Microsoft 365 to send email confirmations and notifications. Microsoft may process data in data centres in both the EU/EEA and the US. Microsoft Corporation is certified under the EU-U.S. Data Privacy Framework, an approved GDPR transfer mechanism for transferring personal data to the US.
When you open our contact page, the Google Map loads automatically and your IP address is sent to Google, which may process data outside the EU/EEA.
If you accept cookies for analytics and advertising, Google (Google Analytics and Google Ads) processes data about your visit, including outside the EU/EEA. Google LLC is certified under the EU-U.S. Data Privacy Framework.
Cookies
The website uses strictly necessary technical cookies required for it to function, such as remembering your chosen language. These don't require consent.
We also use optional cookies from Google Analytics (usage statistics) and Google Ads (ad performance measurement), but only if you actively click "Accept" in the consent banner shown on your first visit. If you click "Decline", or leave the banner unanswered, none of these cookies are set. You can change your choice at any time via "Cookie settings" at the bottom of the page.
Our contact page shows a Google Map that loads automatically when you open the page. When the map loads, Google receives your IP address and may set its own cookies. This happens regardless of your cookie consent choice above, because the map is loaded as part of the page itself. If you'd rather avoid this, you can block third-party content in your browser, or contact us by phone or email instead.
Retention period
We store personal data for as long as necessary to carry out the repair and follow up any warranty claims, normally up to 12 months after the repair is completed.
Data we are legally required to keep longer, such as invoice information under Norwegian bookkeeping law, is deleted in line with applicable legal requirements (normally 5 years).
Automated decision-making
We do not use automated individual decision-making, including profiling, that produces legal effects concerning you or similarly significantly affects you.
Your rights
Under data protection law, you have the following rights regarding your personal data:
- Access to the data we hold about you
- Rectification of data that is incorrect or incomplete
- Erasure of data ("the right to be forgotten")
- Restriction of processing in certain cases
- Data portability, i.e. receiving your data in a structured format
- The right to object to the processing
- The right to withdraw consent, in cases where processing is based on consent
To exercise any of these rights, contact us by email or phone (see the contact details at the top of this page).
Complaints to the Norwegian Data Protection Authority
If you believe we are processing your personal data in breach of data protection law, you can file a complaint with Datatilsynet (the Norwegian Data Protection Authority):
- Datatilsynet, Postboks 458 Sentrum, 0105 Oslo, Norway
- www.datatilsynet.no
Data security
We have implemented appropriate technical and organisational measures to protect your personal data against unauthorised access, alteration or deletion. Access to our systems is limited to those who need it to carry out their work.
Children's privacy
Our services are aimed at adults. We do not knowingly collect personal data from children under 13 without parental consent.
Changes to this policy
We may update this privacy policy as needed, for example due to changes in our services or applicable law. The current version is always published on this page.
