Privacy

Privacy notice

Controller

CHROMA HOLDING AS, Kappveien 3, 1415 OPPEGÅRD, Norway. Contact: [email protected].

What we process

When you use the contact form: name, email, optional organisation, chosen topic and your message. We ask you not to include sensitive data. The form does not accept files.

How it is sent

The form is sent to a script on our web host, which forwards it by email to our corporate mailbox. The script does not store or log your message.

Abuse protection

To limit abuse, the script stores a pseudonymous identifier (a SHA-256 hash of our domain and your IP address) and an attempt counter in the server’s temporary directory. At most five attempts are allowed per 15 minutes; entries older than 15 minutes are deleted on the next request.

Legal basis and retention

Processing is based on your consent and our legitimate interest in answering enquiries (GDPR art. 6(1)(a) and (f)). Emails are kept as long as needed to handle the enquiry and any follow-up, and deleted when no longer needed unless the law requires longer retention. We have not set a fixed number of months.

Processors

Our web and email hosting provider processes data on our behalf. The host may keep technical server logs under its own terms.

Browser storage

We use no analytics or tracking cookies. Your cookie choice is stored in localStorage under the key “chroma-consent” until you clear it. Fonts and media are served from this website.

Your rights

You may request access, correction, deletion, restriction, data portability, withdraw consent and object. Write to us at the address above. You may complain to the Norwegian Data Protection Authority (Datatilsynet).