Privacy

Information we receive

The contact form asks for your name, email address and message. The subject is optional. During internal trial registrations for the processions, we receive the club or organisation name, contact person, email address, phone number, procession, column, any meeting point, participant numbers, anniversary information and any additional notes. Do not enter national identity numbers, health information or other sensitive details in free-text fields.

Purposes and legal basis

We use contact-form information to answer and follow up enquiries. Registration information is used to organise the processions, provide participants with a receipt and send necessary messages. The Committee bases this processing on its legitimate interest in organising Constitution Day celebrations under Article 6(1)(f) of the General Data Protection Regulation. The information is not used for marketing. The participant overview may show the club or organisation name, column, meeting point and any anniversary information. Contact person, email address, phone number and additional notes are not displayed.

Storage and sharing

We use Webflow for forms and a private database in Webflow Cloud. Resend is used for receipts to contact persons and notifications to the Committee’s coordinator and the relevant column leader where an address is known. Providers processing personal data on our behalf must follow the Committee’s instructions and privacy rules applicable in Norway. Webflow and Resend state that customer data is stored in the USA. Resend’s choice of Ireland as a sending region concerns email routing, rather than storage of customer data. The Committee follows up data-processing agreements, international-transfer safeguards, retention and deletion with providers, including deletion from backups.

The Committee has decided that contact-form information must be deleted or anonymised no later than six months after the enquiry is resolved, and earlier if it is no longer needed. Information from internal trial registrations must be deleted or anonymised no later than 30 days after submission. These are the Committee’s own procedures, rather than statutory standard retention periods. Deletion must include Webflow form responses, the private Webflow Cloud database and relevant email copies held by recipients. Removing a trial group from the participant overview does not automatically delete this information.

Your rights

Contact us at post@17-mai.no to request access to, correction, deletion or restriction of processing of your personal data. Where processing is based on legitimate interests, you also have the right to object. We will then assess whether processing must stop under the applicable rules. A right to receive your data may apply in some circumstances, depending on the legal basis and how the information is processed. You can complain to Datatilsynet, the Norwegian Data Protection Authority, if you believe we are processing information contrary to the rules.

Data controller and contact

Bergen’s 17 May Committee, organisation number 992 183 225, is the data controller for personal information collected through the website. Email us with privacy questions or requests for access, correction or deletion.