Privacy Policy & Data Protection

1. Data Controller Identification

This website is operated by CONTORTED DA, an independent Norwegian acoustic research entity and consultancy registered in the Norwegian Brønnøysund Register Centre.

• Entity Legal Name: CONTORTED DA
• Company Form: Ansvarlig selskap med delt ansvar (DA)
• Organisasjonsnummer: 937 299 524
• Physical & Postal Address: Inndalsveien 102, 5063 Bergen, Norway
• Official Email: [email protected]
• Telephone: +47 55 90 28 40

2. Principles of Data Processing

CONTORTED DA processes personal data in strict compliance with Regulation (EU) 2016/679 (General Data Protection Regulation – GDPR) and the Norwegian Personal Data Act (Lov om behandling av personopplysninger). We adhere to the core principles of lawfulness, fairness, transparency, purpose limitation, data minimisation, accuracy, storage limitation, integrity, and confidentiality.

3. Categories of Data Collected

We collect and process personal data exclusively in the following contexts:

• Technical Server Log Data: When you access our portal, our web server automatically records standard request headers including IP address (anonymized/truncated where required), browser user-agent, operating system, timestamp, and requested URI. This data is utilized solely to maintain server security, prevent distributed denial-of-service (DDoS) attacks, and verify correct HTTP response routing.
• Consultation & Inquiry Data: When submitting an inquiry via our contact form or email, we collect your full name, institutional email address, subject area, and the contents of your technical inquiry.
• Interactive Tool Inputs: Calculations performed on our Sabine RT60 Room Estimator are processed locally in your client browser (client-side JavaScript) and are not transmitted to or stored on our servers.

4. Legal Bases for Processing (Article 6 GDPR)

Our processing of personal data is justified under the following legal bases:

• Art. 6(1)(b) GDPR (Contractual/Pre-contractual measures): Processing consultation requests and academic correspondence submitted by users.
• Art. 6(1)(f) GDPR (Legitimate Interests): Maintaining server infrastructure security, preventing fraudulent activity, and optimizing website reliability.
• Art. 6(1)(c) GDPR (Legal Obligations): Fulfilling accounting and administrative obligations mandated by Norwegian statutory law.

5. Data Retention Periods

Technical server logs are retained for a maximum duration of thirty (30) days, after which they are systematically deleted or fully anonymized. Consultation communications and research correspondence are retained for up to twenty-four (24) months to maintain continuity in academic dialogue and technical consulting records, after which records are securely purged.

6. Data Sharing & Third Parties

CONTORTED DA does never sell, rent, monetize, or disclose personal data to commercial data brokers or marketing networks. Data may only be accessed by vetted technical infrastructure providers (Norwegian/EU-based web hosts and email gateways) operating under strict Data Processing Agreements (DPA) compliant with Article 28 of the GDPR.

7. Your Statutory Rights as a Data Subject

Under the GDPR, you possess comprehensive rights regarding your personal information:

• Right of Access (Art. 15 GDPR): You may request confirmation and copies of any personal data we hold concerning you.
• Right to Rectification (Art. 16 GDPR): You may request the correction of inaccurate or incomplete data.
• Right to Erasure / "Right to be Forgotten" (Art. 17 GDPR): You may request the deletion of your personal data where retention is no longer legally mandated.
• Right to Restriction of Processing (Art. 18 GDPR): You may request that data processing be restricted under specific circumstances.
• Right to Data Portability (Art. 20 GDPR): You may receive your data in a structured, commonly used, machine-readable format.
• Right to Object (Art. 21 GDPR): You may object to data processing conducted under legitimate interests.

8. Supervisory Authority & Complaints

If you consider that our processing of personal data violates applicable privacy laws, you have the right to lodge a formal complaint with the competent supervisory authority:

9. Contact for Privacy Inquiries

To exercise any statutory rights or to request data deletion, please contact our Privacy Officer at [email protected] or via post to CONTORTED DA, Inndalsveien 102, 5063 Bergen, Norway.