Privacy Policy
Who we are
Peace Volunteering Network Norway (“PVN Norway”, “we”, “us”) is a non-profit organisation registered in Norway with organisation number 932 346 796. We are the data controller for the personal data described in this policy.
If you have questions about this policy or about how we handle your personal data, contact us at info@pvn-norway.org.
What this policy covers
This policy explains what personal data we collect through this website, why we collect it, what legal basis we rely on, who we share it with, how long we keep it, and what rights you have. It applies to pvn-norway.org and to the forms and services embedded on it.
The personal data we collect
When you contact us or register your interest
Our contact and “Get Involved” forms collect the name, email address and any other information you choose to write in the message field. We use this only to respond to you and to follow up on the enquiry or interest you expressed. Our legal basis is our legitimate interest in answering people who contact us (GDPR Article 6(1)(f)), and, where your enquiry concerns taking part in one of our programmes, the steps taken at your request before entering into an agreement (Article 6(1)(b)).
Form submissions are checked for spam before they reach us. This check involves sending the submitted content to an anti-spam service outside the EU/EEA.
When you subscribe to our newsletter
The newsletter signup collects your email address. We use it only to send you news about our activities. Our legal basis is your consent (Article 6(1)(a)). You can withdraw your consent at any time by using the unsubscribe link in any newsletter or by emailing us; withdrawing consent does not affect the lawfulness of what we sent before you withdrew it.
Our newsletter is delivered through an email marketing platform operated outside the EU/EEA. Your email address and your interaction with our newsletters are processed on that platform on our behalf.
When you make a donation
If you donate through this website, we collect your name, email address, donation amount and the information the payment provider needs to process the payment. We do not receive or store your full card details — those are handled directly by the payment provider. Our legal basis for processing the donation is the performance of an agreement with you (Article 6(1)(b)), and for retaining the transaction record it is our legal obligation under Norwegian accounting law (Article 6(1)(c)).
When you simply visit the site
Our web server keeps standard technical logs, which include IP address, the time of the request, the page requested and browser information. These logs exist to keep the site running securely and to diagnose faults. Our legal basis is our legitimate interest in the security and stability of our website (Article 6(1)(f)).
Cookies and tracking
This website does not use analytics, advertising or social media tracking. We do not run Google Analytics, advertising pixels or similar tracking technologies, and we do not build profiles of visitors.
The only cookies set for ordinary visitors are strictly necessary ones — those required to deliver the pages you request and to keep the site secure. Under the Norwegian Electronic Communications Act, strictly necessary cookies do not require consent. If we ever introduce analytics or marketing cookies, we will ask for your consent first and update this policy before doing so.
If you log in to the site as a registered user or administrator, WordPress sets additional cookies to keep you logged in and to remember your screen preferences.
Who we share your data with
We do not sell your personal data and we do not share it for anyone else’s marketing. We do share it with a small number of service providers who process it on our behalf, under written data processing agreements. These fall into the following categories: our web hosting provider; our email delivery and email marketing providers; our anti-spam provider; our payment provider for donations; and our backup provider.
We may also disclose personal data where we are legally required to do so, for example to public authorities or auditors.
Transfers outside the EU/EEA
Some of the providers above are based outside the EU/EEA, principally in the United States. Where personal data is transferred outside the EU/EEA, we rely on the European Commission’s adequacy decision for the EU–US Data Privacy Framework where the provider is certified under it, and otherwise on the European Commission’s Standard Contractual Clauses together with any additional safeguards required. You can ask us for more detail about the safeguards that apply to a specific transfer.
How long we keep your data
We keep enquiries and form submissions for as long as needed to deal with the matter, and normally no longer than two years afterwards. Newsletter subscriptions are kept until you unsubscribe. Donation and accounting records are kept for five years after the end of the financial year, as required by Norwegian accounting law. Server logs are kept for a short period for security and troubleshooting purposes. When data is no longer needed, we delete it or anonymise it.
How we protect your data
The site is served over an encrypted connection (HTTPS). Access to personal data is limited to the people in our organisation who need it for their work, and our systems are backed up regularly. We keep the website and its components updated.
Your rights
Under the GDPR you have the right to ask us for a copy of the personal data we hold about you; to have inaccurate data corrected; to have your data deleted; to have our processing restricted; to receive your data in a portable format; and to object to processing that we base on legitimate interests. Where our processing rests on your consent, you can withdraw that consent at any time.
To exercise any of these rights, email us at info@pvn-norway.org. We will respond within one month. We may need to verify your identity before acting on a request.
Complaints
If you believe we are handling your personal data unlawfully, we would like to hear from you first so we can put it right. You also have the right to complain to the Norwegian Data Protection Authority (Datatilsynet), Postboks 458 Sentrum, 0105 Oslo — www.datatilsynet.no.
Children
Some of our activities are aimed at young people. We do not knowingly collect personal data from children under 13 through this website without the involvement of a parent or guardian. If you believe a child has given us personal data, contact us and we will delete it.
Changes to this policy
We may update this policy as our activities or the services we use change. The date below shows when it was last revised. Material changes will be announced on this page.
Last updated: 30 July 2026.