Privacy

Draft. This describes what the site actually does today, read out of the code, which is why it has to be updated when anything is added: switching on visitor statistics, putting the booking into use, or choosing a mail provider all change it. Brackets mark an answer still missing.

Who is responsible

Rolf Taraldset, Seljesetvegen 103, 6763 Hornindal, Norway. Org. no. NO 954 638 553 MVA. E-mail: rolf@taraldset.org. Phone: +47 908 61 443.

Cookies

The site sets one cookie:

Name	Lifetime	What it does
language	1 year	Remembers which language you read in, so the front page sends you to the right version next time

It holds nothing but en, no or de. It does not identify you, is not shared, and is not used to follow you between sites. It is necessary for your choice of language to work, and so needs no consent.

What is logged

The web server logs what a web server logs: IP address, time, which page was fetched, and browser type. This is necessary to run the site and to spot faults and abuse. The basis is legitimate interest, GDPR article 6(1)(f). Logs are deleted after [X days].

Third parties

The typefaces are served from our own machine. No data reaches Google.

The film on the classes page is embedded from youtube-nocookie.com, which writes no cookies until you press play. If you do, YouTube’s own terms govern that playback.

The map link in the contact details points to maps.rbt.no, which we run ourselves.

No ad networks, no tracking pixels, and nothing shared with third parties for marketing.

Forms on the site

Not yet in force. The forms currently do nothing — they show a thank-you and send nowhere. What follows describes how it is meant to work, and has to be true before any form accepts anything.

Class booking

We store your name, e-mail address and phone number to carry out the booking. The basis is performance of the contract with you, article 6(1)(b).

Payment goes through Vipps MobilePay. We never receive or store card numbers — only confirmation that payment went through, and a reference. Vipps is an independent controller for its own processing.

Bookings are kept for five years, as Norwegian bookkeeping law requires for accounting records.

Newsletter

If you join the list we store your e-mail address and what you asked to hear about — new class dates, the book, or both. The basis is your consent, article 6(1)(a).

You will get a confirmation e-mail, and are not subscribed until you follow the link in it. Your address stays on the list until you unsubscribe, and every letter carries an unsubscribe link. Unsubscribe and we delete it.

The list is handled by [provider — not yet chosen], as processor on our behalf.

Visitor statistics

Not active yet.

We intend to use Umami, which we run ourselves. It sets no cookies, stores no IP addresses, and does not follow you between sites. We see how many people visited each page, and what kind of device they used.

Your rights

You may ask what we hold about you, have what is wrong corrected, and have deleted what we are not required to keep. Write to rolf@taraldset.org and we will answer within a month.

If you believe we handle your data unlawfully, you may complain to the Norwegian Data Protection Authority.

Changes

This notice applies from [date]. If it changes, we update the date here.