Privacy policy

Data controller

The seller is Average Joe Incorporated AS, organisation number 916 886 330, Dragehodesvingen 34, 1360 Fornebu, Norway. Contact: post@departmentofglobaloffense.com.

We follow the EU General Data Protection Regulation (GDPR) as applied in Norway through the Personal Data Act.

What we collect and why

• Orders: name, delivery address, email, phone (if given), product and price. Legal basis: performance of contract (art. 6(1)(b)).
• Bookkeeping: order and payment records kept for 5 years as required by the Norwegian Bookkeeping Act (art. 6(1)(c)).
• Update list: your email and which bureau you signed up for. Legal basis: consent (art. 6(1)(a)). Withdraw anytime.
• Analytics: only if you accept, Google Analytics collects pseudonymous usage data. Legal basis: consent. See cookie policy.

Who receives data

• Stripe (payment processing)
• Gelato (production and shipping, including local print partners and carriers)
• Our hosting and database provider
• Google (analytics, only with consent)

Some of these process data outside the EU/EEA, including the USA. Transfers rely on the EU-US Data Privacy Framework or EU Standard Contractual Clauses.

How long we keep it

Order data: 5 years for bookkeeping. Update list: until you unsubscribe. Analytics: up to 14 months.

Your rights

You can ask for access, correction, deletion, restriction, portability, and object to processing. Email post@departmentofglobaloffense.com. You can complain to Datatilsynet (the Norwegian Data Protection Authority) or the authority in your country.