Effective Date: March 31, 2026
This Privacy Policy explains how personal data is collected, used, and protected when you use the website tosdalen.no (the “Service”), including when you log in using Facebook Login.
This policy is intended to comply with the EU General Data Protection Regulation (GDPR) and applicable Norwegian data protection laws.
The data controller responsible for processing personal data in connection with the Service is:
For privacy-related inquiries, requests, or complaints, contact us via email.
When you log in using Facebook Login, we receive the following information from Meta Platforms, based on the public_profile permission:
We do not request or collect additional Facebook data such as your email address, friends list, or private activity.
If you use the platform to post or interact with content, we collect:
This content may be visible to other users or publicly accessible depending on how the Service is configured.
We automatically collect limited technical data necessary to operate and secure the Service:
We process personal data under the following legal bases:
| Purpose | Data | Legal Basis |
|---|---|---|
| Account creation and login | Facebook profile data | Performance of a contract (Article 6(1)(b)) |
| Providing platform features (displaying profiles and content) | Name, profile image, user-generated content | Legitimate interests (Article 6(1)(f)) |
| Security and fraud prevention | Technical data | Legitimate interests (Article 6(1)(f)) |
| Handling user requests and legal obligations | Contact communications | Legal obligation (Article 6(1)(c)) |
Where legitimate interests are used, they are limited to operating, securing, and improving the Service in a balanced way.
We do not sell personal data.
Personal data may be processed by third-party service providers only as needed to operate the Service, such as:
These providers process data only on our behalf and under appropriate agreements where required.
Data is stored on systems located within the European Economic Area (EEA).
We use reasonable technical and organizational measures to protect personal data, including:
We retain personal data only as long as necessary:
When data is deleted, it is removed from active systems. Copies may remain in backups for a limited period and are deleted according to normal backup schedules.
Under the GDPR, you have the right to:
To exercise your rights, contact: admin@tosdalen.no
You also have the right to lodge a complaint with the Norwegian Data Protection Authority (Datatilsynet).
If you used Facebook Login, you can request deletion of your data associated with the Service.
This prevents further data sharing from Facebook.
To delete your data stored by us:
After verifying your request, we will:
Deletion is completed within 14 business days unless legal obligations require limited retention.
We use only necessary cookies required for login and session management.
We do not use advertising or tracking cookies. If this changes, we will request user consent where required.
We may update this Privacy Policy from time to time. Important changes will be communicated through the Service before they take effect.