Suggested wording — review with your legal contact
Privacy & marketing consent terms
These terms apply to the sign-up form at the ComfyBalls stand during Oslo Maraton. Last updated: 1 September 2026.
1. Who is responsible for your data
Comfyballs AS ("ComfyBalls", "we") is the data controller for the personal data you submit through this form. You can reach us at privacy@comfyballs.com.
2. What we collect
Only what you type into the form: first name, last name, email address and — if you choose to give it — your mobile number. We also record the date, time and source of your consent ("Oslo Maraton stand sign-up") so we can prove it was freely given.
3. Why we use it and on what basis
We use your details solely to send you marketing communications: product news, offers, competitions and event invitations. The legal basis is your explicit consent under Article 6(1)(a) of the GDPR. Giving consent is entirely voluntary — you can visit the stand, enter competitions and buy from us without it.
4. How long we keep it
We keep your contact details until you withdraw consent, or after 24 months of no interaction with our communications — whichever comes first. After that we delete them, except for a minimal record of the withdrawal itself so we do not contact you again by mistake.
5. Who else sees it
Your data is stored inside the EU/EEA and shared only with the service providers that operate our sign-up and email systems, acting as processors under a data processing agreement. We never sell, rent or trade your personal data, and we do not use it for automated decision-making or profiling beyond basic segmentation of which emails you open.
6. Withdrawing your consent
You can withdraw consent at any time, with no explanation needed: use the unsubscribe link at the bottom of any email, reply STOP to any SMS, or email privacy@comfyballs.com. Withdrawal is immediate for the future and does not affect the lawfulness of processing before it.
7. Your rights
You have the right to access, correct, delete, restrict and port your data, and to object to processing. Contact us and we will respond within 30 days. If you are not satisfied, you can complain to the Norwegian Data Protection Authority (Datatilsynet), Postboks 458 Sentrum, 0105 Oslo.
8. Age
This sign-up is for people aged 16 and over. If we learn that we have collected data from someone younger without parental consent, we delete it.