Privacy Policy
Last updated: March 25, 2026
Data Controller
Mossesundet v/ Martin Jamt Email: hei@mossesundet.no
What data do we collect?
Contact Form
When you send us a message via the contact form, we collect your name, email address, selected service, and message text. This information is used solely to respond to your inquiry.
IP Address
Your IP address is used to limit the number of form submissions (max 5 per 15 minutes). The address is stored only in server memory and is automatically deleted after 15 minutes. It is not stored permanently.
Visitor Statistics
We use Vercel Analytics for anonymous visitor statistics. This tool uses no cookies and collects no personally identifiable information.
Purpose and Legal Basis
The purpose of data processing is to respond to inquiries you send us via the contact form. The legal basis is consent (GDPR Article 6(1)(a)) — you provide consent by actively submitting the form.
Data Processors
We use the following services that process data on our behalf:
- Resend (USA) — delivery of emails from the contact form
- Vercel (USA) — website hosting and visitor statistics
Transfer to the USA
Our data processors are located in the USA. The transfer is lawful under the EU-U.S. Data Privacy Framework (adequacy decision by the European Commission, July 2023) and EU Standard Contractual Clauses (SCCs). Norway follows these frameworks through the EEA Agreement.
Data Retention
Emails from the contact form are retained for as long as necessary to respond to the inquiry. You can request deletion at any time by emailing hei@mossesundet.no.
Your Rights
You have the right to request access to, rectification of, erasure of, restriction of processing of, and portability of your personal data. You also have the right to file a complaint with the Norwegian Data Protection Authority (datatilsynet.no) if you believe the processing of your data violates privacy regulations.
Cookies
This website does not use any cookies.
Legal Framework
The processing of personal data complies with the Norwegian Personal Data Act (Personopplysningsloven), which is Norway's implementation of the EU General Data Protection Regulation (GDPR).