1. Overview
Munch in Oslo is an independent, non-commercial information website. It is not operated by MUNCH, Oslo Municipality or the museum’s ticketing partners. This policy explains what data may be processed when you use this website.
Website publisher and privacy contact:
Ademandes
Jacob Aalls gate 38A, 0364 Oslo
[email protected]
+47 47 76 15 99
2. Information that may be processed
Technical server logs
Your hosting provider may automatically record an IP address, browser type, requested page, timestamp, referrer and diagnostic information. These logs are normally required to deliver the site securely, identify abuse and troubleshoot errors.
Cookie and preference choices
The website stores your consent choice locally in your browser. With permission, it may also remember simple interface preferences. The supplied project contains no advertising pixels, behavioural tracking or third-party analytics scripts.
Contact
This website provides direct email and telephone links but contains no contact form and does not submit contact details through the website. Messages sent by email or telephone are handled through the user’s chosen communications provider. If a form, newsletter or other collection service is added later, this policy must be updated before collection begins.
3. Purposes and lawful bases
| Purpose | Typical data | Possible lawful basis |
|---|---|---|
| Deliver and secure the website | Network and server-log data | Legitimate interests in providing a secure service |
| Remember privacy choices | Local consent record | Compliance and legitimate interests |
| Respond to email or telephone enquiries | Details supplied by the user | Consent, contract steps or legitimate interests depending on the enquiry |
4. Service providers and external links
The website may be hosted by a third-party infrastructure provider, which can process limited technical data on behalf of the publisher. Links to the official MUNCH website and other external services open third-party sites with their own privacy policies. This independent guide does not control those sites.
5. Retention
Consent settings remain in the user’s browser until cleared or replaced. Server-log retention depends on the chosen host and should be documented by the publisher. Any future contact correspondence should be kept only as long as necessary for the stated purpose and legal obligations.
6. Your rights
Depending on where you live and the applicable law, you may have rights to access, correct, erase, restrict or object to processing, request portability, and withdraw consent. You may also complain to the competent data-protection authority. Contact Ademandes using the details above.
7. Security
The project uses a simple static architecture with no account system, checkout or database. That reduces exposure but does not eliminate risk. The publisher must keep hosting, domain, TLS certificates and any later integrations secure and up to date.
8. Children
The content is suitable for a general cultural audience and is not designed to collect personal information from children. No child-directed account, profiling or marketing feature is included.
9. Changes to this policy
This policy must be reviewed whenever the publisher changes hosting, analytics, advertising, forms, newsletters or other data-processing features. The review date at the top should be updated when substantive changes are made.