Who is responsible

Monine AS (Ovanap), org. no. 926 029 215, Norway. For anything to do with your data, email hello@ovanap.no.

What we handle, and why

Data	What for	Legal basis (GDPR)
Name and email address	Fulfilling your order: they are printed in your personal copy, and we email you the download link	Performance of a contract (Art. 6(1)(b))
Order details: number, amount, time, payment status	Bookkeeping and invoicing	Legal obligation (Art. 6(1)(c))
The wording and time of your consent to immediate delivery	Showing that consent was given	Legal obligation and legitimate interest (Art. 6(1)(c) and (f))
Number and time of downloads	Enforcing the link’s limits (30 days, 5 downloads)	Performance of a contract
Your email, if you ask to hear about the print or another edition	Sending that one message	Consent (Art. 6(1)(a)) — which you can withdraw at any time
Your name and email, if you tick the separate box “Yes, email me the occasional new article and update” at checkout	Sending the occasional new article or book update — when there’s something to say, on no schedule	Consent (Art. 6(1)(a)) — the box is never pre-ticked and has nothing to do with the purchase
A hash of your IP address, never the address itself	Protecting our forms against abuse (rate limiting)	Legitimate interest (Art. 6(1)(f))

We never receive your card details: Stripe handles them.

New articles and updates

These emails only go to buyers who ticked the separate consent box themselves. We keep the wording and time of that consent. Every such email carries a one-click unsubscribe link; you can also just email hello@ovanap.no. Once you unsubscribe, we mark the address and never send these emails to it again. This is not part of what the price buys and has no effect on your book.

Stripe (Stripe Payments Europe, Ltd., Ireland) — payments (through Ovanap’s payments service). Stripe also processes payment data as an independent controller under its own privacy policy.
Resend (Resend, Inc., USA) — sending the email with your download link, and the occasional article or update.
Cloudflare (Cloudflare, Inc., USA) — hosting, database, file storage and protection against attacks.

When data goes to the USA (Cloudflare, Inc., Stripe, Inc. and Resend, Inc.), the transfer relies on the EU–US Data Privacy Framework where the recipient is certified under it, and otherwise on the European Commission’s Standard Contractual Clauses (SCCs).

We never sell your data or use it for advertising.

How long we keep it

Order and invoice records — 5 years, as Norwegian bookkeeping law requires.
Your personal PDF in our storage — while your download link is valid; if you ask for a new link, the copy is prepared again.
Your email for a launch notification — until the notification is sent, and never longer than 12 months.
Your email for new articles and updates — until you unsubscribe; after that we keep only a marker that the address must not be emailed.
Technical logs — no longer than needed for security and troubleshooting.

Your rights

You have the right to access, correct and delete your data, to restrict or object to its processing, to receive it in a portable format, and to withdraw any consent at any time. Email hello@ovanap.no.

You can also complain to a supervisory authority: in Norway, Datatilsynet; or the data protection authority where you live.

Cookies

How this site uses cookies is explained on the Cookies page.

Privacy policy