Last updated: 24 October 2026
1. Who we are
Kos & Kaos – The Nordic Jewish Network (organisation number 930 892 270), Oslo, Norway, is the data controller for personal data collected through kosogkaos.org. Contact: hei@kosogkaos.org.
2. What we collect and why
- Tickets and event registration: name, email, and the details you enter at checkout, so we can issue your ticket, check you in at the event and contact you about it. Legal basis: contract (GDPR art. 6(1)(b)).
- Membership: name, email, account login and membership history, to manage your membership and member prices. Legal basis: contract.
- Payments and donations: order details and billing information. Card payments are processed by WooPayments/Stripe and Vipps payments by Vipps MobilePay; we do not store your full card details. Accounting records are kept as required by Norwegian bookkeeping law. Legal basis: contract and legal obligation (art. 6(1)(b) and (c)).
- Newsletter: your email (and name if given), only if you sign up. Sent via Mailchimp. You can unsubscribe at any time. Legal basis: consent (art. 6(1)(a)).
- Contact: what you write to us by email or form, to answer you. Legal basis: legitimate interest (art. 6(1)(f)).
- Cookies and statistics: necessary cookies to run the shop and your login, and – only with your consent – statistics and marketing cookies. You can change your choice at any time in the cookie banner.
3. Event security
For some events, ticket holder names may be shared with the venue or security staff for access control on the day. We share only what is necessary and only for that event.
4. Who we share data with
We use trusted processors to run the website and services: our web host, WooPayments/Stripe and Vipps MobilePay (payments), Mailchimp (newsletter), Google (email and site services) and Complianz (cookie consent). Some of these may process data outside the EU/EEA; where that happens, transfers are covered by the EU Standard Contractual Clauses or an adequacy decision. We never sell your data.
5. How long we keep it
Ticket and attendee data: up to 12 months after the event. Membership data: while you are a member and up to 2 years after. Accounting records: 5 years, as required by law. Newsletter data: until you unsubscribe.
6. Your rights
You have the right to access, correct, delete, restrict or object to the processing of your personal data, to data portability, and to withdraw consent at any time. Email hei@kosogkaos.org and we will reply within 30 days. You can also complain to the Norwegian Data Protection Authority (Datatilsynet, datatilsynet.no) or the data protection authority in your country.
7. Changes
We may update this policy. The latest version is always on this page.