Privacy Policy

1. Data Controller

The data controller for your personal data is Skiwo AS, located at Strandgata 19, 0152 Oslo, Norway.

2. Data We Collect

Account Information

• Email address
• Name (if provided)
• Phone number (for verification)

Usage Data

• Access logs and timestamps
• Actions performed in the service
• Device and browser information

3. Legal Basis for Processing

We process your personal data based on:

• Contract: To provide services you have requested
• Consent: For optional features and communications
• Legitimate Interest: To improve our services and prevent fraud
• Legal Obligation: To comply with applicable laws

4. Data Sharing

We do not sell your personal data. We do not share your data with third parties except in the following cases:

• Service providers: We use trusted infrastructure providers (hosting, file storage, email delivery, payment processing) to operate our services.
• Law enforcement: We may disclose data to law enforcement authorities when required by law, in response to a valid legal request, or to report suspected illegal activity. This may include user account data, audit logs, IP addresses, uploaded content, and access records.
• Legal proceedings: We may disclose data as necessary to protect our rights, your safety, or the safety of others, or to comply with a court order or legal process.

5. Audit Logging

All activity on our services is logged for security and compliance purposes. This includes login events, content access, uploads, downloads, and administrative actions. Each log entry records the actor identity, timestamp, IP address, and event metadata. These logs may be provided to law enforcement upon lawful request.

6. Data Retention

We retain your data for as long as your account is active or as needed to provide services. Audit logs and account data may be retained for up to 12 months after account termination for legal and compliance purposes. Content you delete is removed from our systems, subject to backup retention schedules and legal hold requirements.

7. Your Rights

Under GDPR, you have the right to:

• Access your personal data
• Correct inaccurate data
• Request deletion of your data
• Receive your data in a portable format
• Object to certain processing activities
• Request restriction of processing

To exercise these rights, contact our Data Protection Officer at privacy@skiwo.com.

8. Security

We implement appropriate technical and organizational measures to protect your data, including encryption, access controls, and regular security audits.

9. Cookies

We use essential cookies to provide our services. We use Simple Analytics for privacy-friendly usage statistics without tracking cookies.

10. Changes to This Policy

We may update this policy from time to time. We will notify you of any material changes by email or through our services.

11. Contact Us

For privacy-related questions or to exercise your rights, write to our Data Protection Officer at privacy@skiwo.com.