Privacy Policy — NorgeGuide | GDPR & Cookies
Last updated: 27 August 2025
This Privacy Policy explains how NorgeGuide (“we”, “our”, the “Service”) processes personal data in accordance with the GDPR and the Norwegian Personal Data Act (2018).
1) Data Controller
NorgeGuide
E-mail: norway.guide100@gmail.com
Phone: +47 405 75 841
We do not use a postal address for privacy requests. Please contact us by e-mail or phone.
2) Data we collect
- Account data: e-mail, password (stored only as a salted hash), display name/nickname.
- Contact form messages: your message and, if you provide it, your e-mail for replies.
- Cookies & technical data: IP/device/browser, referrer URL, timestamps (minimum necessary for operation, security, analytics and marketing — see the Cookie Policy).
We do not collect payment/ID documents or other special categories of data.
3) Purposes and legal bases
| Category | Purpose | Legal basis (GDPR) |
|---|---|---|
| Registration & account | create/login, e-mail verification, password reset | Art. 6(1)(b) contract |
| Strictly necessary cookies/technical data | basic site operation, security, abuse prevention | Art. 6(1)(f) legitimate interest |
| Analytics cookies | traffic measurement, content/performance improvement | Art. 6(1)(a) consent |
| Marketing cookies (Google Ads) | ad delivery and conversion measurement | Art. 6(1)(a) consent |
You can change or withdraw consent any time in the Cookie settings banner.
4) Cookies & analytics
By default, only strictly necessary cookies are active. Analytics and marketing run only with your consent.
We use Google Analytics 4. Full details are available in our Cookie Policy (link in the footer).
Data retention in analytics reports is up to 14 months (depending on provider settings).
5) Who we share data with (recipients)
- Hosting/infrastructure: data center in Norway.
- Web analytics: Google Analytics 4 (on consent).
- Advertising/marketing: Google Ads / DoubleClick / Google Ad Services / Google Syndication (on consent).
Processors act under our instructions (Art. 28 GDPR). We do not sell personal data.
6) International transfers
Because we use Google Analytics 4 and Google Ads, certain data may be processed outside the EEA (e.g., in the United States). We rely on the Standard Contractual Clauses (SCCs) and apply additional safeguards. If providers or processing geography change, we will update this section.
7) Retention
- Account (e-mail, nickname, password hash): while your account is active; upon deletion we delete/anonymise within a reasonable time.
- Cookies: until they expire or you delete them (see the Cookie Policy).
- Hosting logs: up to 90 days (security/diagnostics).
- Analytics/marketing data in reports: typically up to 14 months.
8) Your rights
Access, rectification, erasure (including account deletion), restriction, portability, objection (for legitimate interest), and withdrawal of consent for analytics/marketing.
Requests: norway.guide100@gmail.com (we reply within 30 days).
9) Security
HTTPS, passwords stored as salted hashes, role-based access control, monitoring and regular updates.
10) Children
The Service is not directed to children under 13. We do not knowingly process children’s data.
11) Changes
The date above shows the current version. Material changes will be announced on the site.
12) Contact & complaints
Privacy questions: norway.guide100@gmail.com, +47 405 75 841.
You have the right to lodge a complaint with the Norwegian Data Protection Authority (Datatilsynet) at datatilsynet.no.