Privacy Policy

Last updated: October 3, 2026

This privacy policy explains how Kukla Gruppen collects and uses personal data when you visit dekkhub.no, shop with us, or order mobile services. Processing is carried out in accordance with the Personal Data Act and the General Data Protection Regulation (GDPR), and the use of cookies complies with the E-commerce Act.

1. Data Controller

• Data controller: Kukla Gruppen
• Address: Fjellhamarveien 27, 1472 Fjellhamar
• Organization number: 928 931 536
• Email: dekkhub@kuklagruppen.no

We are not required to have a data protection officer. If you have questions about privacy or wish to exercise your rights, contact us at the email address above.

2. What information we process

• Contact details: name, address, email address, and phone number.
• Order details: what you have purchased, price, delivery address, order history, and communication with us.
• Payment details: payment method and payment status. Full card numbers are processed by the payment provider and are not stored by us.
• Vehicle and mission details: for mobile services and tire hotels, for example car make, model, registration number, tire size, mission address, and agreed time.
• Customer account: if you create an account, login details and your orders are stored.
• Inquiries and reviews: content in emails, contact forms, and product reviews you write.
• Technical information: IP address, browser type, device, and how you use the website, including via cookies.

We receive the information from you, from the payment provider regarding the payment status, and from the carrier regarding the delivery status.

3. Purpose and legal basis

• Process orders, deliver goods, and perform services: fulfill the agreement with you, Art. 6(1)(b).
• Customer service, complaints, and right of withdrawal: fulfill the agreement and legal obligations under the Consumer Purchase Act, the Right of Withdrawal Act, and the Handyman Services Act, Art. 6(1)(b) and (c).
• Accounting and bookkeeping: legal obligation under the Bookkeeping Act, Art. 6(1)(c).
• Customer account: agreement, Art. 6(1)(b).
• Newsletters and marketing by email: consent, Art. 6(1)(a), cf. Marketing Act § 15.
• Request for a review after purchase: legitimate interest, Art. 6(1)(f). Our interest is to receive feedback on products and services, and to show genuine customer reviews to other customers. You can opt out at any time.
• Security, fraud prevention, and website operation: legitimate interest, Art. 6(1)(f). Our interest is to protect the online store, customers, and payments from misuse.
• Statistics and marketing with cookies: consent, Art. 6(1)(a), cf. E-commerce Act § 3-15.

4. Do you have to provide us with the information?

Name, delivery address, email address, and phone number are necessary for us to enter into and fulfill the agreement with you. Without these, we cannot process the order. For mobile services, we also need the mission address and vehicle details. All other information, such as consent to newsletters and cookies for statistics and marketing, is voluntary.

5. Automated decisions

We do not make decisions about you that are based solely on automated processing. If you choose to pay with Klarna, Klarna may perform an automated credit assessment. Klarna is the independent data controller for this assessment, and you can find more information and your rights in Klarna's privacy policy.

6. Who we share information with

We never sell your personal data. We only share information with parties that help us deliver goods and services, and only what is necessary:

• Shopify (online store platform and Shopify Payments), as a data processor.
• Payment providers: Vipps MobilePay and Klarna. Klarna is the independent data controller for its credit assessment and payment solution, and processes the information according to its own privacy policy.
• Carrier, which receives name, address, phone number, and email to deliver the package.
• Judge.me, which sends a review request and displays product reviews, as a data processor.
• Google (Google Analytics and Google Tag Manager), for statistics on website usage. Only with your consent.
• Meta Platforms (Facebook pixel), to measure the effectiveness of ads and show relevant ads on Facebook and Instagram. Only with your consent. For collection via the pixel, we and Meta are joint data controllers.
• Email, IT operation, and accounting providers, as data processors.
• Public authorities, when required by law.

We have entered into data processing agreements with providers that process personal data on our behalf.

7. Transfer to countries outside the EEA

Some of our providers, including Shopify, Google, and Meta, may process information outside the EEA, for example in Canada or the USA. Such transfer only occurs when there is a valid transfer basis under Chapter V of the GDPR, such as a decision by the European Commission on an adequate level of protection (for example for Canada and for companies certified under the EU-US Data Privacy Framework) or the EU's standard contractual clauses. You can request a copy of the relevant guarantees by contacting us.

8. How long we store the information

• Order and accounting information is stored for as long as required by the Bookkeeping Act, currently five years after the end of the financial year.
• Information related to complaints is stored for as long as the complaint period lasts, i.e., up to five years after purchase.
• Customer account is stored until you ask us to delete it, or it has been inactive for 36 months.
• Newsletters: the information is stored until you unsubscribe.
• Tire hotels and services: vehicle and mission details are stored for as long as the agreement lasts, and then for as long as the complaint period lasts.
• Inquiries to customer service are deleted when the case is closed and there is no longer a need for them, and at the latest after 12 months if they are not linked to an order.
• Cookies are stored for as long as stated in the cookie settings, and your consent is stored for up to 12 months.

9. Cookies

We use cookies so that the online store works, for example the shopping cart and login. These are strictly necessary and do not require consent.

We only use cookies for statistics and marketing if you consent in the banner that appears when you visit the site. It is just as easy to decline as to accept. Without consent, these tools are not loaded.

• Necessary cookies (Shopify): shopping cart, checkout, login, and security. Do not require consent.
• Google Tag Manager (Google): loads statistics and marketing tools based on your choice in the banner. Requires consent.
• Google Analytics (Google): statistics on visits, page views, and purchases, so we can improve the online store. Requires consent.
• Facebook pixel (Meta Platforms): measure the effectiveness of ads and show relevant ads on Facebook and Instagram. Requires consent.

You can change or withdraw your consent at any time via the cookie settings, or by deleting cookies in your browser. More information on how Google and Meta process information can be found in Google's privacy policy and Meta's privacy policy.

10. Newsletters and review requests

We only send newsletters and offers by email if you have consented. You can unsubscribe at any time via the link at the bottom of each email, or by contacting us. Review requests after purchase also contain a link where you can opt out of such emails.

11. Your rights

You have the right to:

• access the information we have about you,
• have inaccurate information corrected,
• have information deleted when there is no longer a basis for processing it,
• request that processing be limited,
• receive information you have given us in a structured and machine-readable format (data portability),
• object to processing based on legitimate interest, and to direct marketing,
• withdraw consent at any time, without affecting the lawfulness of processing based on consent before its withdrawal.

Send the request to dekkhub@kuklagruppen.no. We will respond without undue delay, and at the latest within one month. It costs nothing to exercise your rights. We may ask you to confirm your identity before we disclose information.

12. Complaint to the Norwegian Data Protection Authority

If you believe we process personal data in violation of the regulations, you can complain to the Norwegian Data Protection Authority. However, we would appreciate it if you contact us first, so we can correct any errors.

13. Security

The use of online services always involves a certain risk, for example that information may be compromised. We therefore have technical and organizational measures tailored to the risk to protect your information from loss, misuse, and unauthorized access. The online store uses an encrypted connection (HTTPS), and access to customer information is limited to persons who need it for their work. Should a personal data breach occur that may result in a high risk to you, we will notify you without undue delay.

14. Children

The online store is not aimed at children, and we do not deliberately collect information about persons under 16 years of age. To pay with Klarna, you must be at least 18 years old.

15. Changes

We may update this privacy policy due to changes in our services or the regulations. The date at the top shows when the policy was last updated. In the event of significant changes, we will notify you on the website or by email.