Privacy policy

Maya Eiendom AS is the data controller for the processing of personal data as described in this privacy policy. In this privacy policy, we explain what kind of personal data we store and how we process it.

Personal data we collect and process


We process the following categories of personal data:

  • Basic information: Name, date of birth

  • Contact information: Address, telephone number, email address

  • Account and profile information: Settings, preferences

  • Payment Information: Transaction Information, Means of Payment

  • Customer history and customer engagement: Order and delivery information, cart actions, discount codes, loyalty program information, active products and deals, as well as products and services you have had in the past, how much and how often they are used, the status of products/services

  • Customer activity: Read and action history from the app, website, or electronic communications we send out. As well as technical information about the devices you use.

  • Cookies: see more on cookies here

The personal data is collected directly from you through information you provide to us and in connection with your use of our products and services.

How we use your personal information


Provision of service/conclusion of contract

We use your personal data to fulfil our agreements with you, i.e. when you have ordered a product or service from us. The legal basis for processing personal data for this purpose is that the processing is necessary for the performance of an agreement with you.

Customer relationship management

We use your personal data to manage our customer relationship with you. For example, it can be used for customer service, complaint handling and error correction regarding your customer relationship. The legal basis for processing personal data for this purpose is that the processing is necessary for the performance of an agreement with you.

Analyses, business development and improvement of services

We are constantly working to develop and improve our products and services. Much of this work involves analysing various forms of personal data, such as customer activity, customer history, and account and profile information. The legal basis for processing personal data for this purpose is our legitimate interest.

Customised user experience

We adapt the user experience and communication to your customer relationship, and we use personal data for this. The legal basis for processing personal data for this purpose is our legitimate interest.

Sales and marketing

We use personal data in connection with the sale and marketing of our products and services, for example when you receive emails from us. The legal basis for processing personal data for this purpose is our legitimate interest. You have the opportunity to opt out of some of this processing by, for example, opting out of receiving emails from us. In addition to this, we may also ask for your consent to use your personal data for so-called profiling, where we infer interests and needs on the basis of your personal data. The purpose of profiling will be to make our marketing more relevant.

System monitoring, bug fixing, etc.

We monitor our systems for errors and problems. Part of these processes involves the storage and processing of personal data. The legal basis for processing personal data for this purpose is our legitimate interest.

Security, fraud detection and crime

We process personal data in our work to protect our users and ourselves against fraudulent activity, abuse and criminal acts. The legal basis for processing personal data for this purpose is our legitimate interest.

Compliance with legal obligations

In some cases, we are required to process personal data for the purposes of other legal obligations. An example of this is information related to sales, which we are obliged to account for and store in accordance with the Norwegian Bookkeeping Act. The legal basis for processing personal data for this purpose is that the processing is necessary for compliance with a legal obligation incumbent on us.

Your rights

If you wish to exercise any of your rights, please contact us at post@maya.no.

Right of access to one's own information

You can request a copy of all the data we process about you. Please contact us at the email address above to exercise your right of access.

Right to rectification of personal data

You have the right to ask us to correct or supplement information that is incorrect or misleading.

The right to deletion of personal data

You have the right to have your personal data deleted without undue delay. You can therefore ask us to delete information about yourself at any time. However, please note that information that we are required to keep due to other legal obligations (such as the Norwegian Bookkeeping Act) will not be deleted.

Restrictions on the processing of personal data

In some situations, you can also ask us to restrict the processing of information about you. You can do this by managing consents or permissions on our platforms.

Objections to the processing of personal data

If we process information about you on the basis of our tasks or on the basis of a balance of interests, you have the right to object to our processing of information about you. You can do this by managing consents or permissions on our platforms.

Data portability

You have the right to receive your personal data in a structured, commonly used and machine-readable format. Please contact us at the email address above to receive your personal information.

You can complain about our processing of personal data

We hope you will let us know if you believe we are not in compliance with the provisions of the Personal Data Act. Feel free to let us know first through the contact channel you have already established with us. You can also complain about our processing of personal data. You do this to the Norwegian Data Protection Authority.