Privacy Policy for Nordlys Karaoke AS

Effective date: 2026-04-22

1. Introduction and company information

This privacy policy explains how Nordlys Karaoke AS collects, uses, stores, shares, and protects personal data when you visit our premises, make a booking, contact us, use our services, or otherwise interact with us. We operate a karaoke business and act as the data controller for the processing of personal data described in this policy.

Data controller: Nordlys Karaoke AS
Address: Storgata 12, 0155 Oslo, Norway
Email: [email protected]
Phone: +47 22 48 73 91

This policy is intended to provide clear information about our privacy practices and your rights in relation to your personal data.

2. Data collection and processing

Nordlys Karaoke AS may collect and process the following categories of personal data, depending on how you interact with us:

• Identification and contact information: name, email address, phone number, postal address, and similar contact details.
• Booking and transaction information: reservation details, visit history, payment status, invoices, receipts, and related customer service records.
• Communication data: messages, inquiries, complaints, feedback, and correspondence with us by email, phone, or other channels.
• Usage and technical data: IP address, device information, browser type, log data, and website interaction data if you use our website or online services.
• Security and incident data: CCTV recordings, access logs, and other security-related information collected for safety and loss prevention, where applicable and permitted by law.
• Special requests and preferences: information you voluntarily provide, such as event preferences, accessibility needs, or group booking details.

We generally collect personal data directly from you, for example when you make a booking, contact us, or visit our venue. In some cases, we may also receive information from payment providers, booking platforms, delivery partners, technical service providers, or other third parties involved in providing our services.

3. Purpose of data processing

We process personal data for the following purposes:

• to manage bookings, reservations, and customer accounts;
• to provide karaoke services and related customer support;
• to process payments, refunds, invoices, and accounting records;
• to communicate with you about your booking, inquiries, or service-related matters;
• to improve our services, venue operations, and customer experience;
• to maintain security, prevent fraud, and protect our premises, staff, and guests;
• to comply with legal obligations, including accounting, tax, and regulatory requirements;
• to handle disputes, claims, and legal proceedings;
• to send marketing communications where permitted and, where required, with your consent.

4. Legal basis for processing

We process personal data only when we have a valid legal basis. Depending on the context, our processing may be based on one or more of the following grounds:

• Performance of a contract: when processing is necessary to provide our services, manage bookings, or fulfill our obligations to you.
• Legal obligation: when processing is required to comply with applicable laws, such as bookkeeping, tax, or safety obligations.
• Legitimate interests: when processing is necessary for our legitimate business interests, such as operating and securing our venue, preventing misuse, improving services, and handling customer inquiries, provided that your interests and fundamental rights do not override those interests.
• Consent: where we rely on your consent, for example for certain marketing activities or optional processing activities. You may withdraw consent at any time.

5. Data sharing and third parties

Nordlys Karaoke AS may share personal data with third parties only when necessary and appropriate for the purposes described in this policy. Such recipients may include:

• Payment service providers for processing card payments, refunds, and related transactions;
• Booking and IT service providers that support our reservation systems, website hosting, email services, and technical infrastructure;
• Accounting, audit, and legal advisors where necessary for compliance, reporting, or legal support;
• Authorities and public bodies when required by law or in response to lawful requests;
• Security and maintenance providers where needed to protect our premises and systems;
• Other business partners involved in delivering a specific service you have requested.

We require third parties that process personal data on our behalf to protect it appropriately and to use it only for the agreed purposes. Where a third party acts as an independent controller, its own privacy policy may also apply.

6. Data transfer to third countries

In some cases, personal data may be transferred to or accessed from countries outside Norway or the European Economic Area (EEA), for example when we use international service providers or cloud-based systems. If such transfers occur, Nordlys Karaoke AS will take appropriate safeguards to protect your personal data in accordance with applicable privacy requirements, which may include standard contractual clauses or other legally recognized transfer mechanisms.

7. Storage duration

We retain personal data only for as long as necessary for the purposes for which it was collected, or as required by law. The retention period depends on the type of data and the purpose of processing. In general:

• booking and customer service records are kept for the period needed to manage the relationship and resolve any issues;
• payment, accounting, and tax records are retained for the period required by applicable law;
• security-related records, including CCTV footage where used, are kept for a limited period unless needed for an incident, investigation, or legal claim;
• marketing data is kept until you withdraw consent or object, or until it is no longer relevant.

When personal data is no longer needed, we will delete, anonymize, or otherwise securely dispose of it in accordance with our retention practices and legal obligations.

8. User rights

Subject to applicable law, you may have the following rights regarding your personal data:

• Right of access: you may request confirmation of whether we process your personal data and obtain a copy of that data.
• Right to rectification: you may request correction of inaccurate or incomplete personal data.
• Right to erasure: you may request deletion of your personal data in certain circumstances.
• Right to restriction: you may request that we restrict processing in certain situations.
• Right to data portability: you may request to receive certain personal data in a structured, commonly used, machine-readable format and, where technically feasible, have it transmitted to another controller.
• Right to object: you may object to processing based on legitimate interests and, in some cases, to processing for direct marketing purposes.

To exercise your rights, please contact us using the details in the Contact Information section below. We may need to verify your identity before responding. We will respond within the time limits required by applicable law.

9. Withdrawal of consent

Where processing is based on your consent, you have the right to withdraw that consent at any time. Withdrawal of consent does not affect the lawfulness of processing carried out before the withdrawal. If you withdraw consent, we may no longer be able to provide certain optional services or communications to you.

10. Right to complain

If you believe that Nordlys Karaoke AS has processed your personal data in violation of applicable privacy laws, you have the right to lodge a complaint with the relevant supervisory authority. You may also contact us first so that we can try to resolve your concern directly.

In Norway, the competent supervisory authority is the Norwegian Data Protection Authority (Datatilsynet).

11. Data security

Nordlys Karaoke AS takes appropriate technical and organizational measures to protect personal data against unauthorized access, alteration, disclosure, loss, or destruction. These measures may include access controls, staff confidentiality obligations, secure systems, encryption where appropriate, and regular review of our security practices.

While we strive to protect personal data, no method of transmission or storage is completely secure. We therefore cannot guarantee absolute security, but we continuously work to maintain a high level of protection.

12. Contact information

If you have any questions about this privacy policy or our processing of personal data, or if you wish to exercise your rights, please contact:

Nordlys Karaoke AS
Storgata 12, 0155 Oslo, Norway
Email: [email protected]
Phone: +47 22 48 73 91

13. Changes to privacy policy

Nordlys Karaoke AS may update this privacy policy from time to time to reflect changes in our practices, services, legal requirements, or operational needs. The updated version will be published with a revised effective date where appropriate. We encourage you to review this policy periodically to stay informed about how we process personal data.