Privacy notice

1. Data controller

Systemax is the data controller for the personal data processed through this service. Questions can be sent to post@systemax.no.

2. What we collect

• Account: email address, name and an encrypted password.
• Order: order history, payment status and the receipt. The delivery address, phone number and any pickup point are entered with the payment provider, copied onto the order only so it can be shipped, and erased from it once delivered — see section 5. Your account holds no delivery address.
• Photos and designs: the photos you upload of your tools, the outlines derived from them, any logos, and the layouts you save.
• Enquiries and our notes: if you contact us through the enquiry form, we keep what you wrote along with the name, email address, phone number and any address you gave us. We also keep short internal notes and reminders from dealing with you — what was discussed, what was agreed, what we owe you next — and, for a job we are quoting for, what it covers, roughly what it is worth, and, if you accept a quote, the name you gave when you did. These are working notes about the job, not judgements about you, and you can ask to see them: see section 6.
• Technical: a sign-in cookie, and basic operational logs.

We never store card numbers. Payment is handled entirely by the payment provider.

3. Why, and on what basis

• To produce and deliver your order, and to run your account — the basis is performance of the contract with you.
• To keep accounting records — the basis is a legal obligation under the Norwegian Bookkeeping Act (bokføringsloven).
• To answer your enquiry and keep track of what we agreed — the basis is steps taken at your request before a contract, and thereafter performance of the contract.
• To protect the service against abuse — the basis is legitimate interest.

Your photos are used to make your product. They are not used for marketing, and they are not shared with other customers.

4. Who we share with

• The payment provider (Stripe or Vipps), which processes the payment and collects your name, delivery address and phone number on our behalf.
• The carrier, which receives name, address and phone number in order to deliver the parcel.
• Fiken AS, our accounting system, which receives each sales document (the receipt naming you as the buyer) because the Bookkeeping Act requires it to be kept in the accounts.
• The email provider, which delivers order confirmations, receipts and account messages.
• Hosting and storage providers, which process data on our behalf within the EU/EEA under a data processing agreement.

We do not sell personal data.

5. How long we keep it

Your account, with its photos and layouts, is kept for as long as the account is active — you can delete individual photos and layouts yourself at any time. The delivery address, phone number, pickup point and addressee name on an order are erased once the order is completed, or 30 days after it shipped. The sales document (receipt) for each order, which names you as the buyer, is kept for five years, as the Bookkeeping Act requires, even if you delete your account; so is the credit note for any refund. Nothing else about an order identifies you after that erasure. An enquiry that never led to an order is deleted 12 months after we received it, together with any notes and reminders attached to it, unless it is linked to your account or we are still working on it.

6. Your rights

You have the right to access your own data, to have errors corrected, to erasure, to restriction, to data portability, and to object to processing based on legitimate interest. Contact us at post@systemax.no — we normally reply within 30 days.

If you believe we are processing your data unlawfully, you can complain to the Norwegian Data Protection Authority (Datatilsynet).

7. Cookies

We use only the cookies necessary for sign-in and the cart to work. We do not use cookies for tracking or marketing, which is why we do not ask you to consent to any.