Data controller
The Shamanic Association of Norway (Sjamanistisk Forbund, org. no. 998 100 747) is the data controller for personal data processed on this website, in the members' area and in connection with membership of the association.
If you have questions about how we process personal data, contact us at sjamanforbundet@gmail.com or by phone on +47 464 19 265.
What we process and why
The membership register
When you join the Shamanic Association of Norway, your name, national identity number and contact details are recorded in our membership register at Solidus. We are required by the Norwegian Religious Communities Act to record the national identity number, and it is used when the association claims the state grant. The membership list is checked by the County Governor as the law requires. Supporting members are registered without a national identity number.
Membership of a religious community is a special category of personal data, because it says something about religious affiliation. We therefore process membership data on the basis of GDPR Article 9(2)(d), which allows religious communities to process data about their own members. The membership list is shared only with public authorities that have a legal basis to require it.
Joining, leaving and updating your own details is done through Solidus' forms, where you identify yourself with Vipps. Solidus is a data processor for the association and uses the data only to keep the membership register.
The members' area on the website
The members' area is a separate, logged-in part of the website for approved members. It does not use national identity numbers and does not retrieve anything from the membership register. When you register, we store your e-mail address, the name you choose to give, the status of your registration (pending, active, rejected or suspended) and proof that you have read and accepted this privacy statement (which version, when, and in which language). We do not store your IP address or information about your browser. The association approves registrations manually by checking that the e-mail address belongs to a member.
You log in with a one-time code sent to your e-mail address. There are no passwords. The legal basis for the processing is the membership relationship.
In the members' area you can use these features:
- Votes. When you vote, your vote is stored linked to your membership so that each member can vote only once per matter. Only the aggregated result is shown. Individual votes are never shown to other members or to the board.
- The member map. The map is voluntary. Only if you switch it on yourself is your county shown to other logged-in members, and you may additionally choose to show an area name and contact details. The legal basis is consent, and you can switch the map off again at any time. We never store an exact location.
- The board noticeboard. Posts on the board noticeboard are available only to board members and are shown with the name from your member profile.
Data in the members' area is stored with Supabase in the EU (Frankfurt), which is a data processor for the association. One-time login codes are sent through the e-mail service Resend.
Enquiries
When you contact us by e-mail or phone, we process your name, contact details and the content of the enquiry so that we can answer you. The legal basis is our legitimate interest in answering enquiries. Enquiries are deleted once handled, unless they concern your membership.
AI chat
The front page has a chat that answers questions about the association based on what is published on the website. Your question is sent through the website's own service to the AI provider Anthropic to produce an answer. The conversation is not stored on our servers. Your browser remembers the last three questions and answers while the tab is open, and you can delete them with "Clear". We log only how many characters were used, what the answer cost, whether it succeeded and how long it took, never the text you wrote or your IP address. The IP address is used only momentarily to prevent abuse. Do not enter personal or sensitive information in the chat.
Visitor statistics
If you accept analytics in the cookie banner, we use Google Analytics to understand how the website is used, for example which pages are read most. The statistics are used only to improve the website. If you decline, no visitor statistics are collected about you and no analytics scripts are loaded.
Cookies
The website uses these cookies:
- sjamanforbundet_consent stores your cookie choice so you do not have to answer again on every visit. Stored for one year and necessary for your choice to be remembered.
- sjf_kd_access and sjf_kd_refresh keep you logged in to the members' area. They are set only when you log in, cannot be read by scripts, and are deleted when you log out.
- sjf_kd_pending is used briefly while you register or log in, and is deleted as soon as the one-time code is confirmed.
- Google Analytics (via Google Tag Manager) is set only if you accept analytics, and is used for visitor statistics.
You can change your choice at any time with the "Update consent" button at the top of this page, or delete cookies in your browser settings.
Who we share data with
We never sell personal data, and we share it only with suppliers that help us run our services and that have signed a data processing agreement with the association:
- Solidus (Norway) keeps the membership register and runs the forms for joining and leaving.
- Eplepai (Norway) develops and operates the website and the members' area on behalf of the association.
- Supabase (EU, Frankfurt) stores the data in the members' area.
- Resend sends one-time codes by e-mail when you log in.
- Cloudflare delivers the website and protects it against abuse.
- Google for visitor statistics, only if you have accepted analytics.
- Anthropic produces the answers in the AI chat, only for the questions you type there yourself.
Suppliers outside the EEA are bound by the European Commission's standard contractual clauses for transfers of personal data. Public authorities get access to the membership list only where they have a legal basis, such as the County Governor's check of grant claims.
How long we keep the data
Membership data in the membership register is kept for as long as you are a member. If you leave, you are removed from the membership register.
If you leave, or ask us to close your access to the members' area, access is stopped immediately. Your profile, your choices on the member map and your posts on the board noticeboard are deleted no later than 30 days afterwards. Votes you have cast are anonymised so that the result of the vote stands but can no longer be linked to you.
Enquiries are deleted once answered. Chat messages are not stored by us.
Your rights
You have the right to access the data we hold about you, and you can request rectification or erasure. You also have the right to restriction of processing, to object to processing, and to data portability. You can withdraw your consent to the member map at any time in the members' area. Contact us at sjamanforbundet@gmail.com and we will reply within one month at the latest.
If you believe we process personal data in breach of the rules, you can complain to the Norwegian Data Protection Authority (datatilsynet.no). We would appreciate it if you contact us first, so that we have the chance to put things right.
Changes to this statement
This privacy statement was last updated on 17 August 2026. If we change the way we process personal data, we will update the statement here.