How we process personal data

In brief

We collect only the information needed to deliver the website, protect the form against misuse, respond to enquiries and—if you consent—understand how the website is used. We do not sell personal data.

Who is responsible?

Oslo Renovering AS, organisation number 935 361 141, is the data controller. Send privacy questions and requests to exercise your rights to post@oslorenovering.com.

What we process and why

When you submit an enquiry, we process your email address, project description, selected service, language, source and a random submission ID. We use this information to assess your needs, respond and follow up the enquiry. When you visit or submit, Cloudflare may process your IP address, browser and device information, security signals and technical logs to deliver and protect the service. Do not include sensitive personal data in the message.

Legal bases

We process an enquiry because this is necessary to take steps you request before a possible contract, under Article 6(1)(b) GDPR (opens on EUR-Lex).

Technical delivery, security, abuse prevention and limited first-party measurement rely on our legitimate interest in providing a secure, functional website, under Article 6(1)(f) GDPR (opens on EUR-Lex).

Google Analytics is used only with consent, under Article 6(1)(a) GDPR (opens on EUR-Lex). You can withdraw consent at any time.

Providers and processing

• Cloudflare delivers the website, form function, abuse protection and limited first-party measurement. Analytics Engine receives only the event type, language, normalized page and approved service and source context—not form fields, full URLs or raw IP addresses.
• Cloudflare Turnstile checks whether a submission is likely to come from a person. It processes technical information about the browser, request and IP address.
• The form is delivered as email via our email provider (SMTP) to Oslo Renovering. The provider therefore processes the email address, project description and email metadata.
• Google Maps loads only when you explicitly choose to show the interactive map or open directions. Google then receives technical information such as your IP address, browser data and the website domain. The map choice is remembered only in the open browser tab and can be withdrawn with “Hide the Google map”.
• Google Analytics loads only after freely given consent. Google then receives analytics identifiers, technical information and limited events about page views and contact choices—never form fields or arbitrary URLs.

Cookies and local storage

Your analytics choice is saved in your browser’s local storage. If you allow analytics, Google Analytics may set the _ga and _ga_<measurement-ID> cookies. If you reject analytics, Google Analytics does not load and these cookies are not set. Your map choice is stored only for the open browser tab. You can open “Change analytics choice” at the bottom of any page at any time.

Retention

Enquiries that do not lead to a customer relationship are deleted no later than 12 months after the last contact. If an enquiry leads to a project, necessary correspondence becomes part of the customer record and is retained as needed for the contract, documentation of claims and legal obligations. Our email provider retains email data in line with its own policies. Cloudflare Analytics Engine retains measurement data for three months. User- and event-level Google Analytics data is set to two months; standard aggregated reports may remain longer. Your consent choice remains in your browser until you change it or clear browser data.

Processing outside the EEA

Cloudflare, our email provider and Google may process information in the United States and other countries outside the EEA. Transfers must be covered by valid transfer mechanisms, such as the EU Standard Contractual Clauses and, where applicable, the EU–US Data Privacy Framework, together with the providers’ security measures.

Your rights

You may request access, correction, deletion, restriction and data portability where the conditions apply. You may object to processing based on legitimate interests and withdraw consent without affecting processing that was lawful before withdrawal. Send requests to post@oslorenovering.com. You may also complain to the Norwegian Data Protection Authority.

Changes to this notice

We update this notice when our processing or providers change. The date above shows when the text was last updated.