Legal
Privacy Policy
Last updated: April 2025
1. Data Controller
The data controller responsible for this website is:
Patrick Olsen
patrickolsen.tech
Norway
Contact: via the booking form or LinkedIn at linkedin.com/in/paolsen
2. What Data We Collect and Why
Website Analytics
If you consent, we use Google Analytics 4 to collect anonymised data about how visitors use this site — including pages visited, session duration, browser type, device type, and approximate geographic location (country/city). This data is processed by Google LLC (USA) and may be transferred outside the EEA. No personally identifiable information is deliberately collected through analytics.
Legal basis: Consent (GDPR Art. 6(1)(a)). You may withdraw consent at any time via the Privacy Settings link in the footer.
Booking / Contact
When you book a call via Google Calendar, your name and email are processed by Google LLC. This is a direct interaction between you and Google's scheduling service. We receive your booking details in order to fulfil the consultation.
Legal basis: Legitimate interests / performance of pre-contractual steps (GDPR Art. 6(1)(b) and (f)).
Hosting and Delivery
This website is hosted on the Base44 platform. Static assets (images, fonts) may be served from Base44's CDN infrastructure. Standard server logs may be collected by Base44 for security and operational purposes.
Legal basis: Legitimate interests (GDPR Art. 6(1)(f)) — necessary to operate the website.
Fonts
This website loads the Syne and Inter typefaces from Google Fonts. When your browser requests these fonts, your IP address is transmitted to Google LLC servers. We are working to self-host these fonts to eliminate this transfer.
Legal basis: Legitimate interests (GDPR Art. 6(1)(f)).
3. Third-Party Recipients
Your data may be shared with the following third parties, acting as data processors or independent controllers:
- Google LLC — Google Analytics (analytics, USA), Google Fonts (font delivery, USA), Google Calendar (booking, USA). Google operates under Standard Contractual Clauses for EEA-to-USA transfers.
- Base44 / Wix — website hosting and infrastructure.
We do not sell your personal data to any third party.
4. Data Retention
Google Analytics retains aggregated analytics data for up to 14 months by default, after which it is automatically deleted. Booking information received via Google Calendar is retained only as long as necessary to fulfil the consultation or respond to your enquiry.
5. Your Rights
Under the GDPR, you have the following rights regarding your personal data:
- Right of access — you may request a copy of the personal data we hold about you.
- Right to rectification — you may ask us to correct inaccurate data.
- Right to erasure — you may request that your data be deleted where there is no overriding legitimate reason to keep it.
- Right to restrict processing — you may ask us to limit how we use your data.
- Right to object — you may object to processing based on legitimate interests.
- Right to data portability — where processing is based on consent or contract, you may request your data in a structured, machine-readable format.
- Right to withdraw consent — where processing is based on consent (e.g. analytics cookies), you may withdraw at any time via the Privacy Settings link in the footer.
To exercise any of these rights, contact us via LinkedIn. You also have the right to lodge a complaint with the Norwegian Data Protection Authority (Datatilsynet).
6. Changes to This Policy
We may update this policy from time to time. The "Last updated" date at the top will reflect any changes. We encourage you to review this page periodically.