Skip to content

Privacy Policy

Last updated: March 25, 2026

Data Controller

Mossesundet v/ Martin Jamt Email: hei@mossesundet.no

What data do we collect?

Contact Form

When you send us a message via the contact form, we collect your name, email address, selected service, and message text. This information is used solely to respond to your inquiry.

IP Address

Your IP address is used to limit the number of form submissions (max 5 per 15 minutes). The address is stored only in server memory and is automatically deleted after 15 minutes. It is not stored permanently.

Visitor Statistics

We use Vercel Analytics for anonymous visitor statistics. This tool uses no cookies and collects no personally identifiable information.

Purpose and Legal Basis

The purpose of data processing is to respond to inquiries you send us via the contact form. The legal basis is consent (GDPR Article 6(1)(a)) — you provide consent by actively submitting the form.

Data Processors

We use the following services that process data on our behalf:

  • Resend (USA) — delivery of emails from the contact form
  • Vercel (USA) — website hosting and visitor statistics

Transfer to the USA

Our data processors are located in the USA. The transfer is lawful under the EU-U.S. Data Privacy Framework (adequacy decision by the European Commission, July 2023) and EU Standard Contractual Clauses (SCCs). Norway follows these frameworks through the EEA Agreement.

Data Retention

Emails from the contact form are retained for as long as necessary to respond to the inquiry. You can request deletion at any time by emailing hei@mossesundet.no.

Your Rights

You have the right to request access to, rectification of, erasure of, restriction of processing of, and portability of your personal data. You also have the right to file a complaint with the Norwegian Data Protection Authority (datatilsynet.no) if you believe the processing of your data violates privacy regulations.

Cookies

This website does not use any cookies.

Legal Framework

The processing of personal data complies with the Norwegian Personal Data Act (Personopplysningsloven), which is Norway's implementation of the EU General Data Protection Regulation (GDPR).