Privacy Policy

Last updated: October 2025

Who we are: Jan Vindenes. This is a private personal website, not a company. Our purpose is to share information publicly for the media and the public, and to interact with supporters. We do not use personal data for commercial purposes.

Contact any @vindenes.net email such as: jan@vindenes.net — for GDPR inquiries.

1) Scope

This policy covers personal data submitted through our contact forms (one form per post) on Vindenes.net and any technical data sent with the submission. We do not operate public user registrations or comment publishing; messages you send are received privately by Jan.

2) What we collect via forms

When you submit a form, we receive:

- Form fields you enter (e.g., name, email, message). - Technical submission data, including IP address and timestamp (included in the email we receive). Under GDPR, IP addresses are personal data. - Anti-spam signals from Google reCAPTCHA v3 (if enabled) and related metadata. How the form is handled: The site is built with WordPress; forms are provided by Nicepage (exported as a WP plugin). Submissions are (a) stored in our Nicepage account’s “Leads” area and (b) emailed to our Outlook inboxes.

3) Why we process your data (purposes) & legal bases

- Respond to your message and manage correspondence (GDPR Art. 6(1)(f) — legitimate interests in operating a public-facing family site). - Prevent spam/abuse and ensure security (reCAPTCHA, rate-limiting, monitoring) (Art. 6(1)(f)). - Measure public interest and visibility using Google Analytics (Art. 6(1)(f)). - Comply with legal obligations if applicable (Art. 6(1)(c)). If we ever wish to use data for other purposes, we will ask for your consent first (Art. 6(1)(a)).

4) No commercial use

We do not sell personal data, run ads with it, or conduct commercial profiling. This is a non-commercial, private personal website.

5) Who processes your data (recipients / processors)

- Nicepage (Website builder/form provider): stores submissions in the Leads area of our account and facilitates email notifications to us. Nicepage’s own privacy policy applies to their processing. - Microsoft Outlook (email provider) that receives the notifications. - Hostinger (web host) — operates the infrastructure where the WordPress site is hosted. - Google reCAPTCHA v3 (anti-spam) — processes technical interaction data when reCAPTCHA is active. - Google Analytics (analytics service) — processes aggregated website usage data to help us understand overall visibility. We do not share data with marketing/CRM platforms. If we later connect optional services, we will update this section.

6) International transfers

reCAPTCHA v3 and Google Analytics may involve transfers to Google infrastructure outside the EEA (e.g., USA). Nicepage may process/store Leads on its own infrastructure; their privacy policy governs any transfers they perform. Email delivery through Outlook may involve transit outside the EEA. Where applicable, we rely on appropriate safeguards (e.g., Standard Contractual Clauses).

7) Hosting location

Our site is hosted on Hostinger, which operates EU data centers (France, Germany, Lithuania, UK, Netherlands) and may optimize location within Europe. Hostinger provides a Data Processing Addendum reflecting GDPR compliance.

8) Retention

Emails containing your submission are kept as long as reasonably necessary to handle and document correspondence. We use personal email accounts (Outlook) without automated maintenance. If you request deletion, we will comply. Nicepage Leads are retained in our account until we delete them manually. Security/anti-spam logs and analytics data are retained according to the providers’ standard policies.

9) Cookies & similar tech

Our forms do not require non-essential cookies to submit. However, reCAPTCHA v3, Google Analytics, and embedded third-party content (e.g., YouTube, Instagram) may set cookies or tracking scripts. We use Google Analytics to measure website popularity, including public interest after news or media coverage. Google Analytics collects pseudonymized visitor data such as pages visited, time spent on pages, and approximate location. Analytics cookies are non-essential, and we display a cookie consent banner allowing you to accept or reject them. Data from Google Analytics may be processed by Google outside the EEA and is retained per Google's policies.

10) Your rights

You can access, rectify, erase, restrict, or object to processing of your personal data, and request data portability where applicable. If we process based on consent, you can withdraw consent at any time. You also have the right to complain to Datatilsynet (Norway) or your local data protection authority. Contact jan@vindenes.net to exercise your rights.

11) Is providing data required?

Submitting a form is voluntary. We need at least a reply-to email to answer you.

12) Security

We use reasonable technical and organizational measures (TLS/HTTPS, limited mailbox access, anti-spam). Submissions stored in Nicepage Leads reside on Nicepage’s systems; their security controls and privacy policy apply to that storage.

13) Children

We do not knowingly collect data from children. If a child has submitted data, contact us for deletion or other requests.

14) Changes

We may update this policy if our forms, providers, or legal requirements change. Material changes will be reflected by updating the 'Last updated' date.

15) ReCAPTCHA Terms of Use

Comments and forms on this site are protected by Google's reCAPTCHA v3, the following policies from Google apply: