Privacy policy

Who is the controller

Jørstad Media (company no. 936 267 173), Larsneset 12, Norge, Norway, is the controller for data collected through this website.

For any privacy questions, or to exercise your rights, contact us at mathias@jorstadmedia.no or +47 98 66 13 63.

When you use the contact form

When you send an enquiry, we store your name, email address, and whatever you choose to tell us about your company, budget and project.

We use this to reply and to assess a possible collaboration. The legal basis is taking steps at your request prior to entering a contract, and our legitimate interest in following up enquiries (GDPR Article 6(1)(b) and (f)).

Enquiries are stored with Google (Firestore), and the details are also sent through Web3Forms as an email notification to us. We delete the enquiry once it is no longer relevant to the conversation or client relationship. If no collaboration follows, we normally delete within one year.

When you visit the site

The site is hosted by Vercel. As part of operating it, technical data such as IP address, timestamp, requested page and browser is logged. This is necessary to serve the site, detect errors and protect against abuse, based on our legitimate interest (Article 6(1)(f)).

If you consent to analytics, we use Google Analytics to understand how the site is used — for example which pages are visited and for how long. The basis here is your consent (Article 6(1)(a)), which you can withdraw at any time further down this page.

Without consent, Google Analytics is not loaded at all and no analytics cookies are set.

Who we share data with

We do not sell personal data. We use a small number of providers who process data on our behalf under data processing agreements:

• Google Ireland Limited — Firestore for storing enquiries, and Google Analytics where you have consented.
• Vercel Inc. — hosting and delivery of the website.
• Web3Forms — sends us an email notification when you submit the contact form, so we pick up the enquiry quickly.

Transfers outside the EEA

Our providers may process data in the United States. Transfers rely on the European Commission's adequacy decision for organisations certified under the EU–US Data Privacy Framework, supplemented by the EU Standard Contractual Clauses where needed.

Your rights

You have the right to request access to the data we hold about you, to have it corrected or deleted, and to ask us to restrict processing. You may also object to processing based on legitimate interest, and request the data you provided in a machine-readable format.

Where you have given consent, you can withdraw it at any time. This does not affect the lawfulness of processing carried out before withdrawal.

Contact mathias@jorstadmedia.no to exercise any of these rights. We normally respond within 30 days.

If you believe we process your data unlawfully, you may lodge a complaint with the Norwegian Data Protection Authority, Datatilsynet (datatilsynet.no).

Cookies

Necessary cookies are set so the site works. The rest are only set if you have agreed.