This privacy statement informs about how indonesia-store.no collects and uses personal data.
In this declaration, we explain which personal data we process, how we process it, and the purpose of the processing. The declaration contains information you are entitled to when information is collected from our website, indonesia-store.no, and when you are a customer with us, as well as general information about the collection, storage and use of personal data.
Apart from the IP address, it is voluntary for visitors to the website to provide personal information in connection with services, for example by sending us enquiries, ordering goods, or receiving newsletters. It is necessary to provide an IP address to our server, as it is otherwise impossible to send a response to your internet device. The legal basis for processing varies by purpose: for completing a purchase, the basis is our contract with you (GDPR Article 6(1)(b)) together with statutory bookkeeping obligations, while marketing, newsletters, statistics and certain cookies are based on your consent (Article 6(1)(a)). The relevant basis is stated under each purpose below.
Data Controller
Scanesia AS, organization number 959 896 879, Gneisveien 2, 1914 Ytre Enebakk, Norway, is the data controller for the personal data processed in connection with indonesia-store.no. We are not required to have a dedicated data protection officer, but you can still direct any privacy-related questions to us using the contact details at the bottom of this page.
Customer and Order Data
When you shop with us, we process your name, address, e-mail address, phone number, order contents and payment information in order to receive, confirm, deliver and invoice your order, and to handle any right of withdrawal, complaint or warranty claim. The basis for this processing is our contract with you. Payment card details are processed by our payment provider and are not stored by us.
Order and invoice information is stored for a minimum of 5 years after the end of the accounting year, as required by the Norwegian Bookkeeping Act. Other customer information is deleted once it is no longer necessary for its purpose, unless we have a statutory obligation to keep it for longer.
Website Statistics and Speed
We measure how fast our pages load for visitors, so we can keep the website fast. The measurements are made with Vercel Speed Insights and include loading time, which page was visited, device type, browser and approximate country. The tool does not use cookies, and the data is not linked to you as a person. Measurements are only made if you have consented to statistics in the cookie banner (GDPR Article 6(1)(a)).
We also use Google Analytics 4 (Google Ireland Limited) to understand how the website is used: which pages and products are visited, where visitors come from, searches on the site and steps in the cart. Google Analytics sets the cookies _ga and _ga_* (stored for up to 2 years) and does not store your IP address. The tool is only loaded if you have consented to statistics in the cookie banner (GDPR Article 6(1)(a)). The data may be transferred to the USA on the basis of the EU-US Data Privacy Framework and the EU standard contractual clauses. We do not use the Facebook pixel or other marketing tools that track you. If we start using such tools, this will only happen with your consent in the cookie banner, and this statement will be updated first.
Cookies and Local Storage
The website does not set cookies. So that your cart, wishlist and cookie choice are remembered between visits, they are saved in your browser's local storage (localStorage) on your device. This data is not sent to us, and you can delete it at any time by clearing your browser data for indonesia-store.no.
The following is stored on your device:
| Name | Purpose | Duration |
|---|---|---|
scanesia-cookie-consent | Remembers which types of cookies you have accepted or declined, so we don't ask again on every visit. | Until you change your choice or clear browser data |
scanesia-cart | Remembers the products in your cart between visits. | Until you empty the cart or clear browser data |
scanesia-cart-discount | Remembers the discount code you entered in the cart. | Until you remove the code or clear browser data |
scanesia-wishlist | Remembers the products you have added to your wishlist. | Until you empty the wishlist or clear browser data |
Read more in our cookie policy.
Other Information Collected via Our Website
Newsletter Registration
If you sign up for our newsletter, we only use your email address to send you newsletters, based on your consent. You first receive an email with a link to confirm your subscription, and you are only added to the list once you have confirmed (double opt-in). We store the time of confirmation as proof of your consent. The newsletter is sent via Brevo, which stores the data within the EU/EEA. You can unsubscribe at any time via the link at the bottom of every newsletter, and your data will then be deleted.
Back-in-Stock Notifications
If you ask to be notified about a sold-out product, we store your email address and the products you are waiting for, based on your consent. The data is only used to send you the notification, is stored with Brevo within the EU/EEA and is deleted once the notification has been sent. You can ask us to delete it at any time.
The Banteng Coins Loyalty Programme
If you have a customer account, you take part in the Banteng Coins loyalty programme. For this we store your balance, the history of coins earned and used linked to your orders, the discount codes you have redeemed and your personal referral code. This processing is necessary to fulfil the agreement on the programme (GDPR Article 6(1)(b)). We only store your birthday if you add it yourself to get the birthday bonus, based on your consent, and it is not used for anything else. When a friend uses your referral code, you only see that you have earned coins, not who the friend is. The data is stored in your customer account at Shopify for as long as the account exists. Coins expire after 12 months, and everything is deleted when the account is deleted. You can ask us to delete your birthday at any time.
Server Logs and Website Operation
The website is hosted by Vercel. On every visit, technical information such as IP address, time, the page loaded and browser type is recorded in server logs. This data is used to deliver the website, keep it running and protect it against attacks, and is only kept for a limited period.
Images
Images on the website are delivered by Cloudinary and Shopify. When a page loads, your browser fetches the images directly from them, which means they receive your IP address and technical information about your browser.
E-mail and Telephone
indonesia-store.no uses e-mail and telephone as part of its daily work in order to be able to communicate with, and respond to enquiries from, potential customers, customers, former customers and other partners.
The individual employee is responsible for deleting messages that are no longer relevant, and must, at least once a year, go through and delete unnecessary content in their e-mail inbox. Upon resignation, the e-mail account is deleted. Relevant e-mails will normally be transferred to colleagues. Sensitive personal data must not be sent via e-mail. Please note that ordinary e-mail is not encrypted. We therefore encourage you to exercise caution and not send confidential information, sensitive data or other confidential information by e-mail.
Use of Third Parties/Subcontractors (Data Processors)
We use subcontractors to operate the website. Through their assistance, they may have access to personal data. Data processing agreements have been entered into with them. Our data processors are:
- Vercel (website hosting, server logs and speed measurement)
- Google (website statistics with Google Analytics, only with consent)
- Cloudinary (storage and delivery of images)
- Brevo (newsletters and back-in-stock notifications)
- Shopify (product images, e-commerce platform and payment solution)
Some of these providers are established outside the EU/EEA, including in the USA. Transfers of personal data there are based on the EU-US Data Privacy Framework or the EU Standard Contractual Clauses (SCC), which are approved transfer mechanisms under Chapter V of the GDPR.
Automated Decision-Making
We do not use automated decision-making or profiling that has legal effects for you or similarly significantly affects you (GDPR Article 22).
Rights
You have the right to access personal data about you and how it is processed. You also have the right to have the information corrected or deleted, to restrict the processing, to object to the processing, and to data portability (receiving the information you have given us in a structured format, or having it transferred directly to another business) where the processing is based on consent or a contract, in accordance with the Personal Data Act and the GDPR.
You can contact us at indonesia-store@scanesia.no for access to, correction of, or deletion of information.
Where processing is based on consent, you can withdraw your consent at any time.
If you believe that indonesia-store.no has not respected your rights in accordance with the Personal Data Act, you have the right to complain to the relevant supervisory authority, which in Norway is the Norwegian Data Protection Authority (Datatilsynet). You can find contact information on their website, www.datatilsynet.no.
Contact Information
SCANESIA AS
Gneisveien 2, 1914 Ytre Enebakk, Norway
Tel: +47 93 03 47 85
Email: indonesia-store@scanesia.no