Privacy Policy

Data Controller Information

This privacy policy applies to the website grendavito.top operated by grendavito.top AS, a Norwegian company with registration number 258639714. We are committed to protecting and respecting your privacy in accordance with the General Data Protection Regulation (GDPR) and applicable data protection laws.

grendavito.top AS acts as the data controller for personal data collected through our website and services. Our registered office is located at Olav Tryggvasons gate 1, 7039 Trondheim, Norway.

Data Collection

We collect various types of information from and about users of our website and services. The data we collect includes personal information that you voluntarily provide to us, such as when you contact us through our contact form, subscribe to our newsletter, or engage with our services.

Personal data we may collect includes your name, email address, telephone number, company name, and any information you provide in your communications with us. We also collect technical information automatically when you visit our website, including your IP address, browser type, operating system, referring URLs, and pages viewed.

How We Use Your Information

We use the information we collect for various purposes, primarily to provide and improve our restaurant delivery performance analytics services. Specifically, we use of your data to respond to your inquiries, provide customer support, send you information about our services, and communicate with you about your account or our services.

We may also use your information to analyse website usage patterns, improve our website functionality, conduct market research, and ensure the security of our website and services. Where we have your consent or where permitted by law, we may use your information for marketing purposes, including sending you promotional materials about our services.

Cookies and Tracking Technologies

We may use cookies and tracking technologies for analytics, advertising, and remarketing purposes, including Google Ads. These technologies help us measure campaign effectiveness, deliver relevant advertisements, and improve our services. You can manage your cookie preferences at any time through our cookie consent banner.

For detailed information about the cookies we use and how to manage them, please refer to our Cookie Policy.

Legal Basis for Processing

Under the GDPR, we process personal data based on one or more of the following legal grounds: your consent, the performance of a contract with you, compliance with legal obligations, protection of vital interests, performance of tasks in the public interest, or our legitimate interests in operating and improving our business.

Data Sharing and Disclosure

We do not sell, trade, or otherwise transfer your personal information to third parties without your consent, except as described in this privacy policy. We may share your information with trusted service providers who assist us in operating our website and conducting our business, provided they agree to keep your information confidential.

We may also disclose your information when we believe it is necessary to comply with legal obligations, protect our rights, property, or safety, or the rights, property, or safety of others.

International Data Transfers

Your personal data may be transferred to and processed in countries outside the European Economic Area (EEA). When we transfer your data outside the EEA, we ensure appropriate safeguards are in place to protect your personal data, including using adequacy decisions or standard contractual clauses approved by the European Commission.

Data Retention

We retain your personal data only for as long as necessary to fulfil the purposes for which it was collected, including for the purposes of satisfying any legal, accounting, or reporting requirements. The specific retention period depends on the nature of the data and the purposes for processing.

Generally, we retain contact form submissions and communication records for up to three years, website analytics data for up to 26 months, and marketing consent records until you withdraw your consent or we no longer have a legitimate need to retain them.

Your Rights

Under the GDPR, you have several rights regarding your personal data. Your rights include the right to access your personal data, rectify inaccurate data, erase your data in certain circumstances, restrict processing, object to processing, and data portability.

You also have the right to withdraw consent at any time where we rely on consent as the legal basis for processing your personal data. Withdrawing consent will not affect the lawfulness of processing based on consent before its withdrawal.

To exercise any of these rights, please contact us using the contact information provided below. We will respond to your request within one month of receipt.

Data Security

We implement appropriate technical and organisational measures to protect your personal data against unauthorised access, alteration, disclosure, or destruction. These measures include encryption, secure server environments, access controls, and regular security assessments.

However, please note that no method of transmission over the internet or electronic storage is completely secure, and we cannot guarantee absolute security of your personal data.

Children's Privacy

Our website and services are not intended for children under the age of 16. We do not knowingly collect personal data from children under 16. If we become aware that we have collected personal data from a child under 16, we will take steps to delete such information promptly.

Changes to This Privacy Policy

We may update this privacy policy from time to time to reflect changes in our practices or applicable laws. We will notify you of any material changes by posting the updated privacy policy on our website and updating the "Last updated" date at the top of this policy.

Contact Information

If you have any questions about this privacy policy or our data practices, or if you wish to exercise your rights regarding your personal data, please contact us at:

You also have the right to lodge a complaint with the Norwegian Data Protection Authority (Datatilsynet) if you believe that our processing of your personal data violates applicable data protection laws.