Privacy Policy

Last updated: 1 March 2026

This Privacy Policy describes how Alti Futura, operating under the brand Volkrannkrizyz (hereinafter "we", "us", or "our"), collects, uses, discloses, and safeguards your personal data when you visit our website at volkrannkrizyz.world or place an order for our products.

We are committed to protecting your privacy and processing your personal data in compliance with the General Data Protection Regulation (EU) 2016/679 (GDPR) as incorporated into Norwegian law through the Act of 15 June 2018 No. 38 on the processing of personal data (Personopplysningsloven).

1. Data Controller

The data controller responsible for your personal data is:

2. Personal Data We Collect

We collect and process the following categories of personal data:

2.1 Data You Provide Directly

• Identity data: first name, last name
• Contact data: email address, telephone number, delivery address
• Order data: product selection, order notes, order history
• Communication data: messages sent through our contact form
• Consent records: your preferences and consent timestamps

2.2 Data Collected Automatically

• Technical data: IP address, browser type and version, operating system, device type
• Usage data: pages visited, time spent on pages, referring URLs, click behaviour
• Cookie data: as described in our Cookie Policy

3. How We Use Your Personal Data

We process your personal data for the following purposes and on the following legal bases:

• Order processing and fulfilment (legal basis: performance of a contract — GDPR Art. 6(1)(b)): processing your order, confirming delivery details, and providing customer support.
• Direct communication (legal basis: performance of a contract — GDPR Art. 6(1)(b)): contacting you to confirm your order, delivery, or respond to your enquiries.
• Legal compliance (legal basis: compliance with a legal obligation — GDPR Art. 6(1)(c)): complying with applicable Norwegian and EU laws, including accounting, tax, and consumer protection obligations.
• Website analytics (legal basis: consent — GDPR Art. 6(1)(a)): analysing how visitors interact with our website to improve functionality and user experience, only where you have provided explicit consent.
• Marketing communications (legal basis: consent — GDPR Art. 6(1)(a)): sending promotional information about our products, only where you have given explicit consent. You may withdraw consent at any time.
• Legitimate interests (legal basis: GDPR Art. 6(1)(f)): protecting our systems against fraud and misuse, enforcing our terms, and maintaining records of business transactions.

4. Data Retention

We retain your personal data for as long as necessary to fulfil the purposes described in this Policy, or as required by applicable law:

• Order and transaction data: 5 years after the transaction date, in accordance with Norwegian bookkeeping law (Bokføringsloven).
• Customer communication records: 2 years after the last interaction.
• Consent records: for the duration of the consent, plus 3 years thereafter as proof of consent.
• Analytics data: up to 26 months from collection, as is standard for web analytics tools.
• Marketing data: until you withdraw consent or we determine the data is no longer needed.

When personal data is no longer required, it is securely deleted or anonymised.

5. Data Sharing and Third Parties

We do not sell your personal data. We may share your data with carefully selected third parties only where necessary:

• Delivery partners: logistics and courier services to fulfil your order delivery.
• Payment processors: secure payment service providers operating under applicable PCI-DSS standards.
• IT service providers: hosting, email, and website infrastructure providers under data processing agreements.
• Analytics providers: where you have provided consent, anonymised or pseudonymised usage data may be shared with web analytics services.
• Legal authorities: where required by law, court order, or government request.

All third-party processors are bound by contractual data processing agreements ensuring GDPR-compliant handling of your data.

6. International Data Transfers

Where personal data is transferred outside the European Economic Area (EEA), we ensure appropriate safeguards are in place in accordance with Chapter V of the GDPR, including Standard Contractual Clauses (SCCs) approved by the European Commission, or transfers to countries with an adequacy decision.

7. Your Rights Under GDPR

You have the following rights regarding your personal data, which you may exercise at any time by contacting us:

• Right of access (Art. 15): request a copy of the personal data we hold about you.
• Right to rectification (Art. 16): request correction of inaccurate or incomplete data.
• Right to erasure (Art. 17): request deletion of your personal data, subject to legal retention obligations.
• Right to restriction of processing (Art. 18): request that we limit how we use your data in certain circumstances.
• Right to data portability (Art. 20): receive your data in a structured, machine-readable format.
• Right to object (Art. 21): object to processing based on legitimate interests or for direct marketing purposes.
• Right to withdraw consent (Art. 7(3)): where processing is based on consent, you may withdraw it at any time without affecting prior lawful processing.
• Right not to be subject to automated decision-making (Art. 22): we do not make any automated decisions with significant effects on you.

To exercise any of these rights, please contact us at the details in Section 1. We will respond within 30 days. In exceptional cases, we may extend this period by a further 60 days, in which case we will inform you.

8. Right to Lodge a Complaint

If you believe we are processing your personal data unlawfully, you have the right to lodge a complaint with the Norwegian Data Protection Authority:

9. Security Measures

We implement appropriate technical and organisational measures to protect your personal data against unauthorised access, alteration, disclosure, or destruction. These include:

• HTTPS encryption for all data transmission on our website
• Access controls limiting data access to authorised personnel only
• Regular security assessments and staff training
• Pseudonymisation and anonymisation where appropriate
• Data processor agreements with all third-party service providers

10. Cookies

Our website uses cookies and similar tracking technologies. For detailed information on the cookies we use, their purposes, and how to manage your preferences, please refer to our Cookie Policy.

11. Children's Privacy

Our website and products are not directed at children under the age of 16. We do not knowingly collect personal data from minors. If you believe a child has submitted personal data to us, please contact us and we will promptly delete such information.

12. Changes to This Policy

We may update this Privacy Policy from time to time to reflect changes in our practices or applicable law. We will post the revised policy on this page with an updated "Last updated" date. Where changes are material, we will make reasonable efforts to notify you (e.g., by email or a prominent notice on our website).