Legal template
Privacy Policy
Spotnera is a service operated by Bergendahl Services. This template reflects the current Spotnera implementation and must be reviewed by the owner/legal counsel before public launch.
Who operates Spotnera
Spotnera is a service operated by Bergendahl Services. Bergendahl Services is a Norwegian sole proprietorship (enkeltpersonforetak). Country: Norway.
Information Users Provide
Users may provide account details, profile information, city/country, favorites, reviews, and business-owner listing information. Business owners may add public business contact details, addresses, images, social links, and promotions/deals.
Authentication Providers
Spotnera supports email/password authentication through Supabase and social sign-in with Google, Facebook, and Apple where configured. These providers process authentication data according to their own terms and privacy notices.
Location And Business Information
Spotnera stores business location coordinates and address information chosen by business owners. Public users browse businesses by city, country, map position, category, and live deals.
Reviews And Favorites
Reviews and favorites are connected to signed-in accounts so users can manage their own saved businesses and review content. Public business pages show review content without exposing private account details.
Account Deletion
Signed-in users can request permanent account deletion from the Profile/Me danger zone. Deletion removes the account profile, favorites saved by the user, and reviews written by the user. If the user owns businesses, deletion also removes those business listings and dependent deals, reviews and favorites about those businesses, and business engagement events tied to those deleted businesses. Anonymous aggregate business engagement events are not tied to a user account and are retained unless the related business is deleted.
Business Engagement Analytics
Spotnera records anonymous first-party business engagement counters such as profile views, deal views, contact clicks, shares, and copied profile links. These events do not store customer names, emails, phone numbers, street addresses, IP addresses, auth tokens, or Supabase user IDs.
Google Analytics
Spotnera uses Google Analytics 4 only if the visitor consents to analytics. Analytics consent is optional and can be accepted, rejected, or withdrawn in Privacy settings.
Mapbox
Spotnera uses Mapbox for maps and business-owner address search. When maps or address search load, Mapbox may receive technical request information needed to provide those services, such as request metadata, approximate network location, searched address text, map style/tile requests, and the public Mapbox access token.
Supabase
Spotnera uses Supabase for authentication, session management, database storage, row-level security, profile data, business listings, deals, reviews, favorites, and first-party business engagement events.
Purposes And Legal Bases
Processing purposes include providing the service, authenticating accounts, securing accounts and data, publishing business profiles and deals, showing reviews/favorites, responding to requests, improving Spotnera, and complying with legal obligations. Legal bases may include contract, legitimate interests, consent, and legal obligation depending on the processing activity. Confirm final legal bases with counsel before launch.
Cookies And Storage
Necessary cookies and storage support authentication, security, PWA behavior, and saved privacy choices. Optional analytics storage is used only after consent. See the Cookie & Tracking Information page for more detail.
Sharing And Processors
Spotnera may share data with processors that help operate the service, including Supabase, Mapbox, authentication providers, hosting/infrastructure providers, and Google Analytics after analytics consent. Complete processor and data processing agreement details before launch.
International Transfers
Some providers may process data outside Norway/EEA. Appropriate safeguards, such as standard contractual clauses or other approved transfer mechanisms where applicable, should be reviewed and documented before launch.
Retention And Security
Spotnera should retain personal data only as long as needed for the purposes described here or required by law. Technical and organizational security measures should be documented before launch.
Your GDPR Rights
Depending on the situation, users may request access, rectification, erasure, restriction, objection, and portability. Users may withdraw analytics consent at any time. Configure NEXT_PUBLIC_PRIVACY_CONTACT_EMAIL before public launch.
Complaint To Supervisory Authority
Users in Norway may contact Datatilsynet. Users in other EEA countries may contact their local data protection authority.
Children And Age
Spotnera's final minimum-age and parental-consent approach must be confirmed before launch. Do not use this template as the final child privacy policy without legal review.
Policy Updates
Spotnera may update this policy when the service or processing changes. Material privacy changes may require renewed consent or additional notice.
Contact
Privacy contact email must be configured before public launch. Legal entity: Bergendahl Services. Country: Norway.