Privacy policy

Last updated: October 2026

Who is responsible

Hardanger Bureau is operated by 1NF1 Knut André Sjøwall Eidsvik (org. no. 996 175 057), Svingen 6, 5162 Laksevåg, Norway. We are the data controller for the personal data collected on hardanger.co. Send privacy questions to [email protected].

What we collect, and why

The articles we refer to are in the General Data Protection Regulation (GDPR).

• Questionnaire: your name, email, profile link and answers. We use them to see whether we can help you, and to reply. The basis is that you ask us to consider working together, which makes it steps before a possible agreement (Article 6(1)(b)).
• Requests: your name, email, message and, if you like, your profile link. We use them to reply. The basis is steps before a possible agreement (Article 6(1)(b)), or our legitimate interest in answering what you ask (Article 6(1)(f)).
• Free guide: your email address, and your name if you gave it in the questionnaire. We use them to send you the guide you asked for (Article 6(1)(b)). If you only ask for the guide, you don’t end up on any list.
• Tips by email: only if you tick the box. We then add your email address and name to MailerLite, which sends you a few short tips over the next weeks. The basis is your consent (Article 6(1)(a)). You can withdraw it at any time, via the link at the bottom of every email or by writing to us.
• Booking a call: your name, email, the time you choose and anything you write in the booking. If you’ve filled in the questionnaire, your answers and profile link come along, so we can prepare. The basis is steps before a possible agreement (Article 6(1)(b)).
• Personal links: If you’ve received a personal link from us (hardanger.co/hei/…), the page greets you by your first name, sometimes with a short note from us. We took your first name from your public profile. We keep the name and the note in a setting at Cloudflare, where the site is hosted, never in the code itself. When you open the page, the calendar loads and Cal.com receives your first name, so it’s already filled in. The basis is our legitimate interest in contacting creators we think we can help (Article 6(1)(f)). We delete the page when you ask us to, or when our conversation ends.
• Spam check and running the site: When you visit the site or send a form, Cloudflare processes your IP address and technical details about your browser, to serve the pages, stop spam and abuse, and count visits. The basis is our legitimate interest in keeping the site safe and running (Article 6(1)(f)).

Cookies and third-party scripts

We don’t use cookies that require consent. Our visitor statistics (Cloudflare Web Analytics) are cookieless and don’t identify you. The site remembers a few choices in your browser, such as the language and whether the animations are paused. They stay on your device and are never sent to us.

The calendar (Cal.com) and the spam check (Cloudflare Turnstile) load scripts from those providers, which then receive your IP address and details about your browser.

Who we share with

We never sell your data. These providers help us run the site:

• Cloudflare (US): hosting the site, the Turnstile spam check, visitor statistics (Web Analytics) and forwarding email sent to [email protected]. For Turnstile, Cloudflare is also a controller in its own right when it uses the data to improve its bot detection.
• Resend (US): sends the site’s emails, from our domain hardanger.co: the guide to you, and a notice to us when you send a form.
• Cal.com (US): the booking calendar. If you’ve filled in the questionnaire, Cal.com receives your name, email, answers and profile link as soon as the calendar opens, even if you don’t book. If you came from a personal link, it receives your first name the same way. When you book, it also receives the time you choose and anything you write in the booking.
• MailerLite (EU): sends tips by email, only if you said yes to them.
• Google (US): our Gmail inbox, [email protected], where enquiries and bookings arrive. It’s an ordinary free Gmail account, so Google’s own terms apply to it.

Transfers to the US rely on the EU-US Data Privacy Framework, and for Cloudflare also on the EU’s standard contractual clauses (SCCs) as a fallback.

How long we keep it

• Enquiries, questionnaire answers and bookings: as long as needed to follow up, and at most 24 months if no partnership follows.
• Tips by email: until you unsubscribe.
• Personal links: until you ask us to delete the page, or the conversation ends. We then delete the name and the note from the setting at Cloudflare, and the page from the site and from the earlier versions of the site that Cloudflare keeps.

Your rights

You can ask to see the data we hold about you, and to have it corrected or deleted. You can ask us to restrict the processing, and object to processing based on legitimate interest. You have the right to receive the data you gave us in a common, machine-readable format (data portability). If you gave consent, you can withdraw it at any time. That applies from then on and doesn’t change what happened before. Write to [email protected]. You can also complain to the Norwegian Data Protection Authority (Datatilsynet).