Privacy notice

This notice explains what personal data Alma Service collects through almaservice.no, what we use it for, and what rights you have. We do not collect more than we need in order to answer you.

Note: this is a translation provided for convenience. The Norwegian version is the authoritative one.

Data controller

Alma Service is the controller for the data described here.

• E-mail: almaflis.service@gmail.com
• Telephone: 409 89 841
• Company registration number: [TODO: confirm — insert org.nr]
• Postal address: [TODO: confirm — insert business address]

What we collect

When you submit the contact form, we record:

• your name
• your e-mail address
• your telephone number, if you give one
• which service the enquiry concerns
• the message you write
• any photos you choose to attach

If you attach photos they are forwarded to us as e-mail attachments and are not stored on the website. They are re-compressed on the server before being sent, and that process removes all EXIF data — including the location your phone may have written into the file without you thinking about it.

Your enquiry is sent to us by e-mail and is also stored on the website's own server, so that we can keep track of who has been in touch and what has been answered. That storage is password protected, and the enquiry is deleted automatically after twelve months.

The server also stores a cryptographic hash of your IP address for a short period. It is used solely to limit the number of submissions per half hour, so the form cannot be abused to send spam. Your IP address itself is never stored in readable form.

We use no analytics tools, advertising networks or tracking pixels on this website.

Cookies

The site sets a single cookie — a session cookie that keeps track of the security token in the contact form. It is strictly necessary for the form to work, it does not follow you between websites, and it is deleted when you close your browser. Strictly necessary cookies do not require consent.

What we use it for

The data is used to answer your enquiry, give you a quote and, where relevant, to enter into and carry out an agreement for work. We do not use it for marketing and we do not send newsletters.

The legal basis is Article 6(1)(b) of the GDPR — steps taken at your request prior to entering into a contract — and Article 6(1)(f), our legitimate interest in protecting the website against abuse.

How long we keep it

Enquiries that do not lead to a job are normally deleted within twelve months. If the enquiry becomes a job, we keep the records for as long as Norwegian accounting law requires and for the five-year period during which defects can be reported. Rate-limit data is deleted automatically after 30 minutes.

Who we share it with

The data is sent as e-mail to our own mailbox and therefore passes through our web and e-mail provider, which acts as a data processor on our behalf. We do not sell personal data, and we do not share it with anyone else unless we are legally required to.

[TODO: confirm — name the hosting/e-mail provider here once chosen]

Your rights

You have the right to access the data we hold about you, to have it corrected or erased, to ask for processing to be restricted, and to object to the processing. You may also ask to receive the data in a machine-readable format.

Contact us at almaflis.service@gmail.com and we will sort it out. If you believe we are processing data in breach of the rules, you can complain to the Norwegian Data Protection Authority (Datatilsynet).

Changes

If we change how we handle personal data, we will update this page and the date below.

Last updated: August 2026.