Last updated: April 2025 · GDPR & Personopplysningsloven compliant
The data controller for this website is NorwegianSpark SA (Norwegian organisation number 834 984 172). For all data-related enquiries, contact thomaslien@norwegianspark.com or call +47 99 73 74 67. NorwegianSpark SA is subject to the EU General Data Protection Regulation (GDPR) and the Norwegian Personal Data Act (Personopplysningsloven).
We collect the following categories of data: (a) Analytics and affiliate-attribution data — collected via Google Analytics 4 and the affiliate networks we work with (Commission Junction and Impact). These use cookies and similar identifiers. None of them load until you accept them in the cookie banner: consent is denied by default, and we only grant analytics storage, ad storage, ad-user-data and ad-personalisation after you click Accept. The purpose is to measure which pages are read and to credit a purchase back to the page that referred it. (b) Contact form submissions — when you use our contact form, we collect your name, email address, and message content. This data is processed on the legal basis of your consent (GDPR Article 6(1)(a)). (c) Server logs — standard HTTP server logs including IP addresses, timestamps, and requested URLs. These are stored for security and debugging purposes only.
Contact form data (name, email, message) is retained for a maximum of 2 years from the date of submission, after which it is permanently deleted. Server logs are retained for 30 days. Google Analytics retention is governed by the retention period set on the property; affiliate-network cookies are set and retained by those networks under their own policies, and their duration varies by network and by advertiser. Your consent choice itself is stored in your browser for 365 days, and you can change or withdraw it at any time from the cookie banner.
We do not sell or rent your personal data. We do use affiliate-attribution cookies, which are a form of advertising cookie: when you accept, Commission Junction and Impact may set identifiers that let an advertiser credit a purchase to this site, and Google Analytics 4 receives ad-storage and ad-personalisation consent. Our affiliate links direct you to independent platforms that are governed by their own privacy policies. Hosting is Cloudflare Workers; transactional email is Resend. This site does not use Vercel or Vercel Analytics.
Under the GDPR and Norwegian Personopplysningsloven, you have the right to: (a) Access — request a copy of all personal data we hold about you. (b) Rectification — request correction of inaccurate data. (c) Erasure — request deletion of your personal data ("right to be forgotten"). (d) Restriction — request that we limit processing of your data. (e) Data portability — receive your data in a machine-readable format. (f) Objection — object to processing of your personal data. To exercise any of these rights, email thomaslien@norwegianspark.com. We will respond within 30 days.
If you believe your data protection rights have been violated, you have the right to lodge a complaint with the Norwegian Data Protection Authority (Datatilsynet) at datatilsynet.no, or with your local supervisory authority if you are located in another EU/EEA country.
NorwegianSpark SA · Org no: 834 984 172 · Tveitagarden 4, 5357 Fjell, Norway · thomaslien@norwegianspark.com · +47 99 73 74 67