1. Data Controller Identification
This Privacy Notice outlines how UENDELIG SHARMA (trading as Vigorel Institute of Athletic Biomechanics & Kinetic Ergonomics, registered in Norway under Org.nr: 936 924 174, address: Øverliveien 36C, 1290 Oslo, Norway) collects, stores, and protects personal data obtained via this portal.
2. Categories of Data Collected
We adhere to strict data minimization principles under GDPR Article 5(1)(c):
- Direct Correspondence Data: Name, academic/institutional affiliation, professional email address, and inquiry text transmitted via our contact forms.
- Kinetic Calculator Session Data: Local numerical inputs (mass, cadence, contact time) processed client-side via JavaScript without permanent server retention.
- Technical Telemetry: Anonymized HTTP headers, request timestamps, truncated IP addresses, and standard browser user-agent tokens for network security and DDoS mitigation.
3. Legal Basis for Processing (GDPR Art. 6)
All data processing conducted by the Vigorel Institute relies on the following lawful bases:
- Article 6(1)(b) Contractual / Pre-Contractual Measures: Responding to laboratory visit scheduling, research collaboration requests, or academic citation inquiries.
- Article 6(1)(f) Legitimate Interests: Protecting the integrity of our web servers, safeguarding intellectual research assets, and preventing malicious API requests.
- Article 6(1)(a) Explicit Consent: Applied exclusively when users opt in to optional analytical cookies or scientific updates.
4. Data Retention Periods
Correspondence records and research inquiries are retained for twenty-four (24) months to facilitate academic dialogue and citation attribution, after which they are systematically deleted or fully anonymized.
5. Data Subject Rights
Under the General Data Protection Regulation, you possess enforceable rights regarding your personal information:
- Right of Access (Art. 15): Request a copy of all personal records maintained by the Institute.
- Right to Rectification (Art. 16): Correct inaccurate or incomplete institutional records.
- Right to Erasure (Art. 17): Request the permanent deletion of correspondence files.
- Right to Restrict Processing (Art. 18): Limit the scope of data handling during formal disputes.
- Right to Lodge a Complaint: Contact the Norwegian Data Protection Authority (Datatilsynet, Postboks 458 Sentrum, 0105 Oslo, Norway — www.datatilsynet.no).
6. Contacting the Data Protection Desk
To exercise your rights or submit data inquiries, email our privacy desk at [email protected] or send written notice to UENDELIG SHARMA, Øverliveien 36C, 1290 Oslo, Norway.