Privacy
Data controller
Heiberg Industries AS
Org.nr. 918 145 354
Nøtterøy, Norway
Contact: bendik@heiberg.co
What we collect and why
We collect one category of data, and only with your consent:
Analytics (Google Analytics 4). When you accept cookies, Google Analytics records which pages you visit, how long you stay, your approximate location (country/city level), and your browser and device type. Your IP address is anonymised before storage. We use this to understand which content is being read — nothing more. No advertising, no profiling, no third-party data sharing.
If you decline cookies, no analytics data is collected. The site works identically either way.
If you subscribe to the newsletter, we store your email address to send you updates. You can unsubscribe at any time via the link in any email.
Legal basis
Analytics cookies are set on the basis of your consent (GDPR Article 6(1)(a)). You can withdraw consent at any time by clicking "Manage preferences" in the cookie banner, or by clearing your cookies.
Cookies set
| Cookie | Set by | Purpose | Expires |
|---|---|---|---|
_ga | Google Analytics | Distinguishes unique visitors | 2 years |
_ga_* | Google Analytics | Session state | 2 years |
c15t-* | This site | Stores your cookie consent choice | 1 year |
Data processors
Analytics is handled by Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland — an EEA entity subject to EU data protection law. Consent records are processed by the c15t consent service hosted on EU infrastructure (Hetzner, Germany). Scaleway Transactional Email (Scaleway SAS, Paris, France) handles transactional emails (sign-in links, confirmations). Mailgun (Sinch, EU) handles newsletter delivery. Both process email addresses only; no other personal data is shared.
No personal data is transferred outside the EEA.
How long data is kept
Analytics data is retained for 14 months in Google Analytics, then automatically deleted. Consent records are kept for up to 1 year.
Your rights
Under GDPR you have the right to:
- Access — request a copy of the personal data we hold about you
- Erasure — ask us to delete your data
- Object — object to processing based on legitimate interests
- Portability — receive your data in a machine-readable format
- Withdraw consent — at any time, without affecting prior processing
To exercise any of these rights, email bendik@heiberg.co. We will respond within 30 days.
Opting out of Google Analytics
Beyond declining cookies on this site, you can install the Google Analytics Opt-out Browser Add-on to block GA tracking across all sites.
Complaints
If you believe we are handling your data unlawfully, you have the right to lodge a complaint with the Norwegian Data Protection Authority: Datatilsynet (datatilsynet.no) .
Changes to this policy
If we make material changes, we will update the date at the top of this page. We will not retroactively reduce your rights without clear notice.