Privacy Policy

Last updated: 19 October 2026

This Privacy Policy explains how AcrossNorway collects and processes personal data.

AcrossNorway is operated by Kvikki Media AS.

Data controller:

Kvikki Media AS Prestegardskogen 2 B 5210 Os Norway

Organisation number: 936 426 670 Email: post@kvikkimedia.no

1. Scope

This Privacy Policy applies when you visit AcrossNorway, create or use an account, submit or manage a business listing, purchase a paid listing, contact us or otherwise interact with the website.

2. Personal data we may process

Depending on how you use AcrossNorway, we may process information such as:

• your name and email address;
• account and login information;
• business contact information;
• information submitted in a business listing;
• photographs, logos and other files you upload;
• messages and correspondence sent to us;
• payment and order information;
• IP address and technical log information;
• browser, device and operating-system information;
• pages viewed, referral source, approximate country and website usage data;
• searches performed on the website; and
• information necessary to prevent fraud, abuse and security incidents.

If you choose to allow browser location access when using location-based map functions, location information may be processed for the purpose of showing relevant nearby content. You can refuse or revoke location permission through your browser or device settings.

3. Payment information

Payments for paid listings may be processed by an external payment provider.

Payment-card information is submitted directly to the payment provider and is not intended to be stored on AcrossNorway or Directify servers.

We may receive and retain payment-related information such as payer email address, purchased plan, payment status, transaction reference and information required for accounting and administration.

The payment provider processes payment information under its own privacy policy and legal obligations.

4. Why we process personal data

We process personal data for purposes including:

• operating and securing AcrossNorway;
• creating and maintaining user or business accounts;
• receiving, publishing and managing business listings;
• processing paid listings and related administration;
• responding to enquiries;
• providing website, search and map functionality;
• analysing and improving website performance and content;
• preventing fraud, misuse and security incidents;
• maintaining records required for accounting, tax or legal purposes; and
• complying with legal obligations.

5. Legal bases

Where the GDPR applies, our processing may be based on:

Contract: Where processing is necessary to create or manage an account, provide a paid listing or deliver another service requested by you.

Legitimate interests: Where processing is necessary to operate, secure, maintain and improve AcrossNorway, respond to enquiries, prevent fraud or understand general website usage, provided that those interests are not overridden by your rights.

Consent: Where consent is required, for example for optional cookies, certain tracking technologies, marketing communications or browser-based location access.

Legal obligation: Where information must be processed or retained in order to comply with accounting, tax, regulatory or other legal obligations.

6. Website platform and service providers

AcrossNorway is currently hosted and operated using the Directify platform, provided by WebTouch Ltd in Bulgaria.

For personal data processed inside the AcrossNorway directory, Kvikki Media AS is generally the data controller and Directify acts as a data processor on our behalf.

Directify uses infrastructure and service providers for hosting, file storage, content delivery, transactional email, security and other technical services.

According to Directify's current data-processing information, primary directory data is stored at rest within the European Union.

Some network traffic and technical processing may involve providers established outside the EEA. Where required, appropriate safeguards for international transfers are used.

7. Maps

AcrossNorway may use map services based on OpenStreetMap.

When a map is displayed, your browser may connect to map infrastructure and your IP address may therefore be transmitted to the relevant map provider.

Location services are only used where required for the relevant functionality and subject to your browser or device permissions where applicable.

8. Cookies and similar technologies

AcrossNorway may use cookies and similar technologies for purposes such as:

• essential website functionality;
• login and authentication;
• security;
• remembering preferences; and
• website analytics.

Strictly necessary cookies may be used where they are required to provide a service requested by the user.

Where Norwegian or European law requires consent for non-essential cookies or similar technologies, they will only be used after valid consent has been obtained.

You may withdraw or change your cookie consent where a consent-management option is provided.

Additional analytics or advertising services may be added from time to time. Where these require consent, they will not be activated for a user before the necessary consent has been obtained.

9. Sharing of personal data

Personal data may be shared with service providers where necessary to operate AcrossNorway, including:

• website hosting and platform providers;
• cloud and content-delivery providers;
• payment processors;
• transactional email providers;
• security and technical providers; and
• professional advisers or public authorities where legally necessary.

We do not disclose personal data to unrelated third parties for their own purposes unless we have a lawful basis to do so.

We do not sell personal data as part of our business model.

10. International processing

Some service providers may process data outside Norway or the European Economic Area.

Where the GDPR requires safeguards for such transfers, we rely on legally recognised transfer mechanisms, adequacy decisions or other appropriate safeguards.

11. How long we keep personal data

We retain personal data only for as long as necessary for the purpose for which it was collected or for as long as required by applicable law.

Account and listing information may be retained while the relevant account, listing or commercial relationship remains active.

Communications may be retained for as long as reasonably necessary to answer an enquiry, document agreements or handle potential disputes.

Payment and accounting information may be retained for the period required by accounting, tax and other applicable laws.

When information is deleted from the Directify platform, deletion and backup retention are handled according to the platform provider's current deletion and backup procedures.

We may retain limited information where necessary to establish, exercise or defend legal claims, prevent fraud or comply with legal obligations.

12. Your rights

Where the GDPR applies, you may have the right to:

• request access to your personal data;
• request correction of inaccurate personal data;
• request deletion of personal data;
• request restriction of processing;
• object to certain processing;
• receive certain information in a portable format;
• withdraw consent where processing is based on consent; and
• lodge a complaint with a data-protection authority.

Requests concerning personal data may be sent to post@kvikkimedia.no.

You also have the right to lodge a complaint with the Norwegian Data Protection Authority (Datatilsynet).

13. Security

We and our service providers use reasonable technical and organisational measures intended to protect personal data against unauthorised access, alteration, loss or disclosure.

No internet-based service can guarantee absolute security.

14. Children's data

Business accounts and paid business listing services are not intended for children.

If we become aware that personal data has been submitted by a child in circumstances where we do not have a lawful basis to process it, we will take appropriate steps to remove it.

15. Third-party websites

AcrossNorway contains links to websites operated by third parties.

Their collection and processing of personal data is governed by their own privacy policies. Kvikki Media AS is not responsible for the privacy practices of independent third-party websites.

16. Changes to this Privacy Policy

We may update this Privacy Policy when our services, technology or legal obligations change.

The current version will be published on AcrossNorway with the date of the latest update.

17. Contact

For questions about privacy or requests concerning your personal data, contact:

Kvikki Media AS Prestegardskogen 2 B 5210 Os Norway

Email: post@kvikkimedia.no Organisation number: 936 426 670