Last updated: 21 September 2025

At HÉST AS (hereinafter referred to as “HÉST”), we take your privacy seriously. Your personal data is processed in accordance with applicable data protection legislation, including the Norwegian Personal Data Act of 15 June 2018 No. 38, and the EU General Data Protection Regulation (GDPR).

This Privacy Policy explains what information we collect, how it is used, and what rights you have as a data subject.

The data controller for personal data is:
The Managing Director of HÉST AS (Org. No. 913 885 139), with registered address Verkstedveien 8–10, 1671 Fredrikstad, who is responsible for the company’s processing of personal data.

We may collect the following types of personal data:

• Contact information: Name, email address, telephone number, and postal address

• Customer information: Order history, payment details, delivery information, and any customer correspondence, such as complaints or inquiries

• Cookies: Usage data and online activity based on your consent

• Marketing information: Consent to receive newsletters and other marketing communications

Your personal data is processed for the following purposes:

• Management and delivery of orders
• Administration of customer accounts
• Customer service and follow-up
• Marketing and advertising (where consent has been provided)
• Analysis to improve the website and user experience

Processing takes place in accordance with Article 6 of the GDPR, based on the following legal grounds:

• Consent – e.g., for the use of cookies and newsletters

• Contract performance – to deliver ordered products and services

• Legal obligations – e.g., accounting and tax requirements

• Legitimate interests – such as improving our services and preventing fraud

HÉST does not sell, trade, or disclose personal data to third parties outside of HÉST AS, unless necessary in order to:
• Process payments (payment service providers)
• Deliver goods (carriers)
• Use marketing tools
• Fulfil legal obligations (e.g., requests from public authorities)

All third parties processing personal data on our behalf are subject to data processing agreements in accordance with the GDPR and are required to safeguard your data.

Personal data is stored only as long as necessary to fulfill the purpose of processing, or as long as required by law. For example, accounting-related data will be retained for up to five years in accordance with the Norwegian Bookkeeping Act.

As a data subject, you have the following rights under the GDPR:
• Right of access to the personal data we process about you (Art. 15)
• Right to rectification of inaccurate or incomplete data (Art. 16)
• Right to erasure (“the right to be forgotten”) (Art. 17)
• Right to restriction of processing in certain circumstances (Art. 18)
• Right to data portability – to receive your personal data in a structured, machine-readable format (Art. 20)
• Right to withdraw consent when processing is based on consent

We use cookies to:

• Personalize content and ads
• Provide social media features
• Analyze traffic on our website

We also share information about your use of our site with our social media, advertising, and analytics partners, who may combine it with other information you have made available to them.
Read more in our Cookie Policy.

HÉST reserves the right to update this Privacy Policy as needed. Any changes will be published on our website, and the version available there at any given time shall be the applicable version.

If you have any questions regarding privacy, or wish to file a complaint about our processing of your personal data, you can contact us by email at: kontakt@heest.no.

If you believe our processing violates applicable regulations, you also have the right to lodge a complaint with the Norwegian Data Protection Authority (Datatilsynet) via www.datatilsynet.no.