Privacy policy

Responsibility and contact

Jonas Borchgrevink is the data controller for this personal profile and blog. Send privacy questions and requests concerning your rights to jonasborchgrevink@gmail.com.

This policy covers this website. Linked businesses and other websites have their own privacy policies.

Visiting the website

The website is hosted by Vercel. To deliver pages and protect the service, the infrastructure processes technical information such as your IP address, requested URL, time, and browser and device information. The purposes are operation, troubleshooting, and security. The legal basis is a legitimate interest in providing a working, secure website (GDPR Article 6(1)(f)).

The site has no registration, comments, contact form, or newsletter signup. No analytics tools, advertising pixels, or marketing cookies have been added to the site.

Language and cookies

When you open a URL without a language prefix, a country code supplied by Vercel selects Norwegian for visits from Norway and English otherwise. This country code is derived from the IP address. The site does not request GPS location or create its own record of visitors’ locations.

When you actively choose a language in the footer, the site stores profile-language with the value nb or en in your browser. This first-party cookie remembers your choice for up to one year, or until you delete it in your browser. Choosing a language again renews that period. It contains no unique visitor identifier and is not used for advertising.

You can remove the cookie through your browser’s site-data settings. URLs beginning with /nb or /en also work without it. The purpose is to provide the language preference you requested; the legal basis is a legitimate interest in that functionality (Article 6(1)(f)).

YouTube and external links

The blog’s video player loads only when you select “Load YouTube video.” Before that choice, the player sends no requests to YouTube and fetches no video thumbnail from it. You can read the entire article without loading the video.

Once loaded, Google / YouTube receives information including your IP address, browser details, and interactions with the player. The player uses YouTube’s privacy-enhanced mode, but playback is not anonymous. Google may process data and store information on your device under its own terms. Loading the player is optional; that choice is the basis for the site to establish this connection.

“Close video and stop the connection” removes the player. This stops further connections from the player but does not delete information Google has already received or stored. The choice to load video is not remembered after you leave or reload the page. External links, including YouTube chapter links, open the external service, whose privacy rules then apply.

Getting in touch

Email links open your own email application. If you send a message, your email address, name, and the content you provide are processed to respond and follow up. Email is handled through Google/Gmail. Enquiries about a potential engagement are handled as steps before entering a contract (Article 6(1)(b)); other enquiries are handled on the basis of a legitimate interest in responding (Article 6(1)(f)). Contacting me is optional. Avoid sending sensitive information that is not needed.

Retention, recipients, and transfers

The website code creates no separate database of visits or location data. Vercel handles operational and security data in its infrastructure; retention depends on the type of data and service. Email is kept for as long as needed to handle the enquiry, follow up an engagement, or document rights and obligations. You can request information about retention of data concerning you.

The providers named above receive data for their respective services. They may process information outside the EEA. Vercel’s Data Processing Addendum describes international transfers and contractual safeguards. Google’s transfer information describes the mechanisms it uses. Contact me with questions about the arrangements that apply to your information.

Your rights

Depending on the processing, you can request access, correction, deletion, restriction, and data portability. You can object to processing based on legitimate interests and withdraw consent where processing relies on it. Withdrawal does not affect the lawfulness of earlier processing.

Send requests to jonasborchgrevink@gmail.com. You can also complain to the Norwegian supervisory authority, Datatilsynet. This page is updated when the website’s handling of personal information changes.