Privacy policy

How to reach us

Use the contact form on this website, or write to the business address above. Privacy enquiries are answered like everything else: without undue delay, and within one month at the latest.

The contact form

When you submit the contact form, we process your name, email address, optionally your phone number and organisation, and the content of your message. We use this to reply to you – and, where the enquiry concerns a possible project, to prepare an agreement.

The legal basis is our legitimate interest in answering enquiries (GDPR Article 6(1)(f)), and steps taken prior to entering into a contract where relevant (Article 6(1)(b)).

The website stores none of this. Your message is sent to us as a single email and does not exist on the server afterwards – not in a database, not in a file, not in a log. The email is kept in our mailbox and deleted no later than 12 months after the last contact, unless the enquiry has become a client relationship with its own retention requirements.

Statistics (Google Analytics)

If – and only if – you consent, we use Google Analytics 4 to see which pages are used: page views, the referring page, approximate geographic area, device and browser type, and a random identifier in a cookie. The purpose is to understand what works, so the website can be improved.

The legal basis is your consent (Article 6(1)(a)). Nothing loads from Google until you say yes, and you can change your mind at any time via “Change consent” in the footer – the statistics cookies are then deleted. Measurement data is retained for 14 months.

Server logs

The web server keeps a technical log of the time, the requested address and the status code. Your IP address is not stored in the log. The log is used for operations and troubleshooting, is deleted automatically after 14 days, and rests on our legitimate interest in running the website securely.

Who we share data with

Hetzner Online GmbH hosts the server (Germany/Finland, within the EEA). Brevo SAS relays the email from the contact form (France, within the EEA). Google Ireland Limited provides the statistics tool once you have consented – its use means data may be transferred to Google LLC in the USA. That transfer rests on the European Commission’s adequacy decision for the EU–U.S. Data Privacy Framework, under which Google LLC is certified, with Google’s data processing terms and standard contractual clauses as a fallback.

All three are data processors acting only on our instructions. We do not sell data, and we do not use it for profiling or ad targeting.

Your rights

You can request access to the data we hold about you, have it corrected or deleted, demand that processing be restricted, object to it, and ask to have the data handed over (data portability). We reply without undue delay and within one month at the latest.

If you believe the processing breaches the rules, you can complain to the Norwegian Data Protection Authority (Datatilsynet).