Privacy

The business named at the top of the page is the data controller.

Cookies

The site sets one cookie, language, which remembers the chosen language for one year. It holds only en, no or de, identifies no one, and requires no consent.

Visitor statistics

Visits are counted without cookies and without storing personal data.

Server logs

The web server logs IP address, time, the page requested and browser type, to operate the site and detect faults and abuse. The basis is legitimate interest, cf. GDPR article 6(1)(f). Logs are deleted after 30 days.

Third parties

The film on the course page is embedded from youtube-nocookie.com and loads nothing until it is played; playback is then governed by YouTube’s privacy policy.

No ad networks or tracking pixels are used, and no data is shared for marketing.

Orders

For course enrolments and pattern purchases, name, e-mail address and telephone number are stored to carry out the order. The basis is performance of a contract, cf. article 6(1)(b). Orders are kept for five years, as required by the Norwegian Bookkeeping Act.

Payment is handled by Vipps MobilePay or Stripe, independent controllers for their own processing. Card details are never received or stored.

The pattern file is stamped with the buyer’s name and order reference. For each download, the time and IP address are recorded, to show whether a download link is being shared. The basis is legitimate interest, cf. article 6(1)(f). The record is deleted with the order.

Mailing list

On joining the list, the e-mail address and the chosen topics are stored. The basis is consent, cf. article 6(1)(a) and section 15 of the Norwegian Marketing Control Act. No external mail or marketing service is used.

Every letter links to a page where the subscription can be changed or ended at any time. An address that leaves every list is kept only as a record that it is not to be contacted.

Your rights

You may request access to, correction or deletion of your data, receive it in a machine-readable format, and object to processing based on legitimate interest. Requests are sent to rolf@taraldset.org and answered within one month. Complaints may be lodged with the Norwegian Data Protection Authority.

Changes

This statement applies from 10 September 2026.