Privacy policy

Responsibility and contact

Jonas Borchgrevink is the data controller for this personal profile and blog. Send privacy questions and requests concerning your rights to jonas.borchgrevink@gmail.com.

This policy covers this website. Linked businesses and other websites have their own privacy policies.

Visiting the website

The website is hosted by Vercel. To deliver pages and protect the service, the infrastructure processes technical information such as your IP address, requested URL, time, and browser and device information. The purposes are operation, troubleshooting, and security. The legal basis is a legitimate interest in providing a working, secure website (GDPR Article 6(1)(f)).

The site has no user accounts, comments, or contact form. You can subscribe to the newsletter through a link to MailerLite. The site uses no advertising pixels or marketing cookies.

Visitor statistics

Vercel Web Analytics helps me understand which pages are read and improve the website. It measures page views, referrals, device, browser, and approximate geographic location without analytics cookies. Vercel states that the visitor identifier is discarded after 24 hours. See Vercel’s explanation of Web Analytics privacy.

Language and cookies

When you open a URL without a language prefix, a country code supplied by Vercel selects Norwegian for visits from Norway and English otherwise. This country code is derived from the IP address. The site does not request GPS location or store location as part of language selection.

When you actively choose a language in the footer, the site stores profile-language with the value nb or en in your browser. This first-party cookie remembers your choice for up to one year, or until you delete it in your browser. Choosing a language again renews that period. It contains no unique visitor identifier and is not used for advertising.

You can remove the cookie through your browser’s site-data settings. URLs beginning with /nb or /en also work without it. The purpose is to provide the language preference you requested; the legal basis is a legitimate interest in that functionality (Article 6(1)(f)).

YouTube and external links

The blog’s video player loads only when you select “Load YouTube video.” Before that choice, the player sends no requests to YouTube and fetches no video thumbnail from it. You can read the entire article without loading the video.

Once loaded, Google / YouTube receives information including your IP address, browser details, and interactions with the player. The player uses YouTube’s privacy-enhanced mode, but playback is not anonymous. Google may process data and store information on your device under its own terms. Loading the player is optional; that choice is the basis for the site to establish this connection.

“Close video and stop the connection” removes the player. This stops further connections from the player but does not delete information Google has already received or stored. The choice to load video is not remembered after you leave or reload the page. External links, including YouTube chapter links, open the external service, whose privacy rules then apply.

Getting in touch

Email links open your own email application. If you send a message, your email address, name, and the content you provide are processed to respond and follow up. Email is handled through Google/Gmail. Enquiries about a potential engagement are handled as steps before entering a contract (Article 6(1)(b)); other enquiries are handled on the basis of a legitimate interest in responding (Article 6(1)(f)). Contacting me is optional. Avoid sending sensitive information that is not needed.

Weekly newsletter

Subscribing is optional and takes place on a form hosted by MailerLite. This website does not load MailerLite scripts; a connection is made only when you follow the signup link. MailerLite processes your first name, email address, chosen newsletter language, subscription status, and technical information associated with signup and delivery on my behalf.

The purpose is to send the weekly newsletter you request. Your first name is used to personalize the greeting. The legal basis is consent (Article 6(1)(a)). You can withdraw consent through the unsubscribe link in each email or by contacting jonas.borchgrevink@gmail.com. Unsubscribing stops further newsletters. MailerLite may retain subscription status and records of consent and withdrawal to prevent further sends and document your choice. Contact me to request access or deletion.

Retention, recipients, and transfers

The website code creates no separate database of visits or location data. Vercel handles visitor statistics and operational and security data in its infrastructure; retention depends on the type of data and service. Email is kept for as long as needed to handle the enquiry, follow up an engagement, or document rights and obligations. You can request information about retention of data concerning you.

The providers named above receive data for their respective services. They may process information outside the EEA. Vercel’s Data Processing Addendum describes international transfers and contractual safeguards. Google’s transfer information describes the mechanisms it uses. MailerLite’s Data Processing Agreement describes subscriber data processing and safeguards for international transfers. Contact me with questions about the arrangements that apply to your information.

Your rights

Depending on the processing, you can request access, correction, deletion, restriction, and data portability. You can object to processing based on legitimate interests and withdraw consent where processing relies on it. Withdrawal does not affect the lawfulness of earlier processing.

Send requests to jonas.borchgrevink@gmail.com. You can also complain to the Norwegian supervisory authority, Datatilsynet. This page is updated when the website’s handling of personal information changes.