Your data. Our responsibility.

The data controller for personal data collected via ankra.no is ANKRA / Karlsen Digital, org.no 919 294 841, Spurveveien 18, 9512 Alta, email hello@ankra.no.

We do not sell personal data and do not use it for marketing without your consent.

Contact form: When you send us an enquiry, we process your name, email address, optional company name and the message you write.

Technical information: When submitting the contact form, we may temporarily process your IP address to limit abuse and spam. This information is stored in server memory only for up to one hour and is deleted automatically.

Website visits: We use Umami for anonymised visit statistics (page views, referral source, device type and browser). Umami does not set cookies and does not collect personal data. IP addresses are anonymised.

Our hosting provider may log standard technical information (such as IP address, browser type and timestamp) as part of normal operation and security.

Contact form: We process the information you submit to respond to your enquiry and follow up on a potential collaboration. Legal basis is your consent, which you give by submitting the form and confirming that we may contact you.

Analytics: We process anonymised visit statistics via Umami to understand how the website is used and improve content. Umami does not set cookies and therefore does not require consent under the ePrivacy rules. Legal basis is our legitimate interest.

Security and abuse prevention: We temporarily process IP addresses to protect the contact form against spam and abuse. Legal basis is our legitimate interest in securing our website.

Website operation: Our hosting provider processes technical logs to deliver and secure the website. Legal basis is legitimate interest.

Enquiries via the contact form are stored in our email inbox for as long as necessary to handle the request and any subsequent collaboration, normally up to two years after last contact, unless longer retention is required for accounting or legal obligations.

IP addresses used for rate limiting are deleted automatically within one hour.

Hosting logs are managed by the hosting provider in accordance with their policies.

We share personal data with the following processors who process data on our behalf:

Resend (email delivery): When you submit the contact form, the information is forwarded via Resend to our email inbox.

Vercel (hosting): The website is hosted on Vercel, which may process technical logs and metadata as part of the hosting service.

Umami (analytics): Anonymised visit statistics are processed by Umami without the use of cookies.

All processors are bound by data processing agreements or equivalent standard terms ensuring data is processed in accordance with the GDPR.

Some of our processors are headquartered in the USA (Resend and Vercel). Umami may process data via infrastructure outside the EEA depending on setup. Transfers are made on the basis of the EU Standard Contractual Clauses (SCC) and/or equivalent mechanisms that ensure an adequate level of protection under GDPR Article 46.

You have the right to access, rectify, erase, restrict processing, data portability and to object to processing based on legitimate interest.

You may withdraw your consent at any time by contacting us. This does not affect the lawfulness of processing before withdrawal.

You have the right to lodge a complaint with the Norwegian Data Protection Authority (Datatilsynet, datatilsynet.no) if you believe we process your personal data unlawfully.

We implement technical and organisational measures to protect personal data, including encrypted HTTPS connections, access controls and limiting who has access to enquiries.

We may update this privacy policy as needed, for example if we introduce new services or change how we process data. Material changes will be clearly communicated on the website.