Privacy Policy

Last Updated: 28.10.2026

1. Data Controller

This Privacy Policy applies to all personal data collected and processed by BARPRO DA, hereinafter referred to as «BARPRO DA», «we», or «us».

2. Categories of Personal Data Collected

We process only data strictly necessary to fulfill inquiries and provide event beverage services:

• Contact Information: Name, professional email address, phone number, and corporate entity name.
• Event Specification Data: Event date, venue address/municipality, expected guest numbers, and menu preferences.
• Financial & Billing Data: Invoicing address, company registration number (for B2B clients), and transaction settlement records.
• Technical Information: Anonymized server access logs, browser types, and timestamp metadata for security auditing.

3. Legal Bases for Processing

All data processing activities are grounded in General Data Protection Regulation (GDPR) provisions:

• GDPR Article 6(1)(b) (Contractual Performance): Processing required to prepare formal proposals or fulfill contractual agreements for bar catering.
• GDPR Article 6(1)(c) (Legal Obligation): Retaining accounting vouchers and transactional documentation in accordance with the Norwegian Bookkeeping Act (Bokføringsloven).
• GDPR Article 6(1)(f) (Legitimate Interests): Maintaining the technical integrity and cyber defense of our web infrastructure.

4. Data Retention & Erasure Schedules

Personal data is stored exclusively for durations required by purpose:

• Inquiries that do not materialize into contracted services are permanently purged within 12 months.
• Customer files and accounting documentation relating to completed contracts are archived for 5 years as required by Norwegian statutory law.

5. Disclosure to Third-Party Processors

BARPRO DA does not monetize or trade personal data. Data is shared solely with vetted sub-processors (certified accounting practitioners, hosting providers, and cloud infrastructure) bound by strict GDPR Data Processing Agreements (DPAs).

6. Individual Data Rights

Under European data protection legislation, you possess the right to:

• Access: Request confirmation and copies of personal data held regarding your person.
• Rectification: Correct incomplete or inaccurate data entries.
• Erasure: Demand deletion of records when statutory retention requirements expire.
• Restriction & Objection: Object to processing under GDPR Articles 18 and 21.
• Data Portability: Receive personal information in a structured, machine-readable format.

To exercise any statutory data right, contact [email protected]. You also have the right to lodge a formal complaint with the Norwegian Data Protection Authority (Datatilsynet).