Privacy policy

Who we are

This privacy policy explains how Work-Work ("we", "us") processes personal data when you visit work-work.no, contact us, or register for an event through the website.

Work-Work
Munkegata 58, 7011 Trondheim
Email: contact@work-work.no

What data we collect

We only collect personal data that is necessary to run the website and respond to you.

• Contact form: name, email address, optional subject, and your message.
• Event registration: when you sign up for an event on the website, we collect your name, email address, optional phone number, and your consent to store the registration.
• Technical data: when you visit the site, our hosting provider may process standard server logs such as IP address, browser type, and request time. This is used for security, reliability and troubleshooting.
• Admin accounts: if you are a staff user with access to the admin panel, we process your email and authentication data so you can sign in and manage site content.

We do not sell personal data. We do not use advertising cookies or third-party marketing trackers on the public website.

How we use the data

• To reply to enquiries and booking-related messages
• To manage event registrations and communicate about the event you signed up for
• To operate and maintain the website and its content
• To secure the site and prevent abuse
• To allow authorised staff to manage content in the admin panel

The legal basis for processing contact form messages is our legitimate interest in responding to your enquiry, and/or steps taken at your request before a potential booking or other agreement. Event registrations are processed based on your consent when you submit the signup form. Staff account data is processed as necessary to provide admin access.

Services we use

We use trusted service providers to run the website. They only process data on our behalf and as needed for their service:

• Firebase (Google): used to store website content (for example events, menu and site settings), event registrations, host images, and authenticate staff users for the admin panel. Public visitors are not required to create a Firebase account to browse the site or register for an event.
• Resend: used to send emails from the contact form to our inbox. The form data you submit (name, email, subject and message) is processed by Resend in order to deliver the email.
• Hosting: the website is hosted on cloud infrastructure that may process technical request data as part of serving the site.

Some of these providers may process data outside the EEA. Where that happens, appropriate safeguards are used under applicable data protection law (for example standard contractual clauses).

Cookies and local storage

The public website does not rely on non-essential tracking cookies. If you sign in to the admin panel, Firebase Authentication may store session information in your browser so you remain logged in. That storage is only needed for staff access.

How long we keep data

Contact form messages are kept for as long as needed to handle your enquiry and any follow-up, and then deleted or archived according to our normal email practices. Event registration data is stored in Firebase and is deleted within a reasonable time after the event has ended. Staff account data is kept while the account is active. Technical logs are retained only for a limited period for security and operations.

Your rights

Under applicable privacy law (including the GDPR), you may have the right to request access to, correction of, or deletion of personal data we hold about you, and to object to or restrict certain processing. You may also lodge a complaint with the Norwegian Data Protection Authority (Datatilsynet).

To exercise your rights, contact us at contact@work-work.no.

Changes

We may update this privacy policy when our practices or services change. The latest version will always be available on this page.