Privacy policy.

Privacy Policy

Revontulet AS and Glitterpill LLC (“Revontulet”, “Glitterpill”, “we”, “us”) is committed to protecting your privacy while you use our website, products and/or services. We want you to understand what information we collect about you, how we collect it,  how that information is used and what choices you have with respect to the information. Below is our Privacy Policy which applies to all the interactions you have with Revontulet.  However, this Privacy Policy does not apply to any third-party applications or software that integrate with our services through our website, or any other third-party products, services or businesses.

Information published on this website is considered journalistic in nature and protected under applicable legislation to protect journalistic freedoms, the freedom of the press, and freedom of expression.

I. Data Controller

The Data Controller of Revontulet and Glitterpill LLC and associated services is Revontulet AS.

II. Collecting, Processing and Storing of Personal Data and Purpose of the Usage of Personal Data

We operate this website in order to provide you with information about our products and services, and keep you up to date about Revontulet.

1. Our Website

You may use our website for purely informational purposes without disclosing your identity. In order to display the website to you, only access data is transmitted to our provider. 

The Revontulet website is currently hosted on Squarespace . When using our website, Squarespace collects the following data: 

  • IP address ,

  • Browser type/browser version,

  • Operating system used,

  • Language and version of the browser software,

  • Host name and accessing terminal,

  • Website from which the request comes,

  • Content of the request (specific page),

  • Date and time of the server request,

  • Access statuts/HTTP status code,

  • Referrer URL (the previously visited page),

  • Amount of data transmitted,

  • Time zone difference from Greenwich Mean Time (GMT).

This list is not exhaustive and may be subject to change.

Read more about Squarespace’s privacy policy here: https://www.squarespace.com/privacy/

The legal basis for the processing of the data listed above is our legitimate interest to ensure the functionality, the integrity and security of the website (Article 6 para. 1 (f) GDPR). 

You can object to the processing at any time on grounds relating to your particular situation. You can send us your objections via the contact form available on this website.

2. Cookies

The technically necessary cookies we use are only applicable for administrators.

3. Social Media

On our website we do not use social network plug-ins. However, we have a social media presence that can be accessed by clicking on the respective social media logo on our website.  No personal data is sent to the social networks before you click on the logos or links which take you to the social network’s website.

In addition, you can also “share” certain contents of our website on social networks. If you click on the “share” logo on our website, the logos of the various social networks will appear. If you click on one of these logos, you will be redirected to the website of the corresponding social network. There – if you have an account and are logged in, or if you log in – you can share the desired content from our website.

We have no influence on the collected data and data procedure of any social network. Further information on the purpose and scope of data collection and processing of the respective network can be found in the data protection declaration of the respective network. There you will also find further information on your rights and settings to protect your privacy, when using social networks. Please note that personal data is processed by social networks not only if you are logged in, but personal data, such as your IP address can also be processed if you do not have a social media account.  We process your data with the utmost care, but assume no liability for the behavior of the operators of the social networks or third parties.

4. Mailing List

If you have expressly consented to subscribe to our mailing list, we use your email address to regularly send you updates about our work. To sign up for the mailing list, providing us with an email address is sufficient. To manage our mailing list, we use Squarespace.

To inform you about Squarespaces`s privacy policy please read: https://www.squarespace.com/privacy/.

The email address you provide for the mailing list is not shared or transferred to any other parties. 

The legal basis for this processing is your consent (Article 6 para. 1 (a) GDPR) and, in order to prevent the misuse of your personal data, our legitimate interest in the prevention of fraud(Article 6 para. 1 (f) GDPR).

If you no longer wish to receive our emails you can unsubscribe from our mailing lists at any time using the link at the bottom of any email. We remove people that have unsubscribed from the mailing list on a monthly basis. Afterwards. We process the data until you exercise your right of revocation by canceling the mailing list subscription.

You can object to the processing at any time on grounds relating to your situation. You can send us your objections or revocation via the contact data mentioned at the end of this Privacy Policy.

III. Transfer to Third Parties 

We will never sell, rent, or lease your personal data to a third party, but we may share collected information for the purposes described in this Privacy Policy with third parties that help us to provide, improve, promote or support our services, that help with our business operations and assist in the delivery of our services, for example, payment processors, hosting services, analytics, content delivery services, CRM, etc., in a manner that is consistent with this Privacy Policy and only to the extent permitted by data protection laws. We may also share information with third parties if required to do so by law or if you violate our contractual relationship. Our service providers have a legal obligation to ensure compliance with all data protection rules and they are often also bound by further contractual provisions on data protection.

We only transfer personal data to third parties if we have a legal permission to do so, in particular if you have given consent to such a transfer, if the transfer is necessary for the provision of our services, if the transfer is required by law in this context, or if we have a necessary legitimate interest (see Article 6 para. 1 (a), (b), (c), (f) GDPR).

Insofar as the processing is necessary for the purposes of the legitimate interests pursued by us (Article 6 para. 1 (f)  GDPR), you have the right to object to the processing. You can revoke any consent you may have given at any time. You can send us your objections or revocation of your consent via the contact data mentioned at the end of this Privacy Policy.

If all or part of Revontulet or Glitterpill LLC is sold, merged, or otherwise transferred to another entity, your information may be transferred as part of that transaction. If that happens, we will take reasonable steps to make sure your information continues to be treated consistently with this privacy policy.

IV. Transfer to Recipients Outside the EU

We may also transfer your data to recipients outside the EU. We only do this in accordance with the legal requirements for transfers to third countries. So we only process or have the data processed in third countries when it is ensured that the third country or the recipient of the data in the third country guarantees an adequate level of data protection according to Article 44 to 49 GDPR and no compelling interest prevents the data transfer. This may take the form of an “adequacy decision” of the European Commission which ensures that an adequate level of data protections has been ascertained overall for a certain third country. Alternatively, we can also transfer data on the basis of “EU standard contractual clauses. Information on EU standard contractual clauses can be found under https://ec.europa.eu/info/law/law-topic/data-protection/international-dimension-data-protection/standard-contractual-clauses-scc_en, and information on adequacy decisions under

https://ec.europa.eu/info/law/law-topic/data-protection/international-dimension-data-protection/adequacy-decisions_en#dataprotectionincountriesoutsidetheeu

Insofar as the processing is based on Article 6 para. 1 (f)  GDPR, you have the right to object to the processing. You can revoke any consent you may have given at any time. You can send us your objections or revocation of your consent via the contact data mentioned at the end of this Privacy Policy.

V. Children’s Privacy

Revontulet does not provide services directly to children or proactively collect their information. If we discover that a child has provided us with personal Information, we will promptly delete such information from our systems.

VI.  Data Subjects’ Rights

You can request from Revontulet at any time 

  • Information as whether or not personal data concerning you are being processed, and, where that is the case, access to these personal data (Art. 15 GDPR);

  • Rectification of inaccurate  personal data concerning you, subject to relevant legal requirements (Article 16 GDPR);

  • Erasure of personal data concerning you unless there are conflicting interests (Article 17 GDPR);

  • Restriction of the processing of your personal data where one of the following applies:

    • You contest the accuracy of your personal data, 

    • The processing is unlawful and you oppose the erasure of the personal data and requests the restriction of their use instead; 

    • We no longer need your personal data for the purposes of the processing, but they are required by you for the establishment, exercise or defence of legal claims, or

    • You have objected to processing pursuant to Article 21 para. 1 GDPR pending the verification whether our legitimate grounds override those of you (Article 18 GDPR).

  • To receive the personal data that you provided to us, in a structured, common and machine-readable format or requesting transmission to another controller (Article 20 GDPR).  In this case, please contact us and specify the information or processing activities to which your request relates. We will carefully consider your request and discuss with you how it can best fulfil it. 

You can revoke your consent once given to us at any time. As a result we stop the data processing based on this consent in the future (Article 7  para. 3 GDPR). 

If we process your data pursuant to a legitimate interest or a legitimate interest of a third party (Article 6 para. 1 (f) GDPR), you can exercise your right to objections in accordance with Article 21 GDPR. 

VII. Links to other Websites

Revontulet’s website may contain links to third-party websites. Revontulet is not responsible for the privacy policy or the content of the website of any third party. We would strongly recommend carefully reading the privacy statements of third parties’ websites.

VIII. Ensuring Compliance 

We are committed to protecting the information that we receive from you. We take appropriate security measures to protect your information against unauthorised access to or unauthorised alteration, disclosure or destruction of data.

Revontulet has to comply with all applicable laws and regulations under Norwegian Law,. For this reason we may have to collect, process and retain your details for an extended period of time as a legal obligation (see Article 6 (1) (c), GDPR). 

We delete your personal data as soon as they are no longer required for the purposes pursued by the processing and as long as there are no conflicting legal storage obligations.

IX. Changes to this Privacy Policy

We may modify this privacy policy at any time to comply with legal requirements as well as developments within our organisation. When we do, we will revise the date at the bottom of this page. Each visit or interaction with our services will be subject to the new privacy policy. We will record past versions of this policy through an archive on this page. We encourage you to review our privacy policy whenever you use our services to stay informed about our policies. By using our services, you acknowledge and agree that it is your responsibility to review our privacy policy to be aware of modifications.

Version 1.0 – April, 2024