Privacy policy

The data controller is Vladyslav Kobets, who runs AKROX as a private individual. A sole proprietorship (enkeltpersonforetak) is being registered; once it is, we will update this page with its name and organisation number.

Privacy contact: post@akrox.no, +47 411 34 557.

When you send a request (the form on the contact page):

• name and phone number, and email address if you provide it;
• requested service, date and any comment;
• place or address of the job. If you tap “Use my location”, we use the coordinates only to look up the place name — they are not stored;
• the car’s make and model. If you look the car up by registration number, we send the number to the Norwegian Public Roads Administration (Statens vegvesen) to fetch make and model;
• photos you upload;
• technical data: your IP address is stored only as a one-way checksum (hash) to stop spam and abuse.

When you book we also store the time, address, price, payment and any photos from the job.

Blog comments: name (shown publicly), email if you provide it (not shown) and IP address for spam protection.

• Replying to requests, scheduling, performing and invoicing jobs — contract (GDPR art. 6(1)(b)).
• Keeping accounting records — legal obligation (art. 6(1)(c), Norwegian Bookkeeping Act).
• Spam protection, troubleshooting, anonymous visitor statistics and comment moderation — legitimate interest (art. 6(1)(f)).
• If we have done a job for you, we may send you offers on similar services by SMS or email (Norwegian Marketing Control Act § 15) — legitimate interest. Every message tells you how to opt out (reply STOPP or use the unsubscribe link), after which we send no more.

• Requests that do not lead to a job, including photos — deleted automatically after 6 months.
• Records of completed jobs — 5 years, as required by the Bookkeeping Act § 13.
• Comments that are not approved — deleted after 30 days. Approved comments stay as long as the article exists, or until you ask us to delete them.

We never sell your data. These providers process it on our behalf, only to run the website and the service:

• Vercel — website hosting (every request passes through their servers).
• Supabase — database and photo storage.
• Resend — sending email (confirmations, notifications).
• ImprovMX and Google (Gmail) — forwarding and receiving email sent to post@akrox.no.
• Cloudflare Turnstile — spam protection on forms (IP address and browser information).
• Sentry — error monitoring; when a technical error occurs, IP address and browser information may be logged.
• Umami — visitor statistics without cookies and without storing personal data.
• CARTO — map tiles on the service area page are loaded from their servers, which see your IP address.
• Kartverket (Norwegian Mapping Authority) — receives only the coordinates when you use “Use my location”, not your IP address or name.
• Statens vegvesen — receives only the registration number when you look up your car.
• We send SMS from our own mobile phone (the SMS Gateway for Android app).

Several providers are US companies. Transfers outside the EU/EEA rely on the European Commission’s standard contractual clauses (SCC) or the EU–US Data Privacy Framework.

The website sets no tracking or advertising cookies. In your browser (local storage) it only remembers the colour theme, your choice in the cookie banner and that you closed the language suggestion. You can change your choice via “Manage cookies” at the bottom of the page.

You can ask for access to, correction or deletion of your data, ask to receive it in a machine-readable format, object to processing based on legitimate interest, and opt out of offers at any time.

Write to post@akrox.no, +47 411 34 557, or choose “Data deletion request” in the form on the contact page and give the phone number you used. We reply within 30 days.

Records of completed jobs must be kept for 5 years under the Bookkeeping Act. In that case we explain in writing what we cannot delete, and delete the rest.

If you believe we process your data in breach of data protection law, you can complain to the Norwegian Data Protection Authority (Datatilsynet). Feel free to contact us first, and we will try to sort it out.