Privacy policy

Data controller

The data controller is Marius Ottesen Consulting (registered name: MARIUS OTTESEN CONSULTING, organisation number 937 102 801).

Privacy contact: marius.ottesen.76@gmail.com.

What data is processed

Contact form (Consulting): name, email, phone, company, role/title, selected topic and free-text message. The data is used to receive and respond to your enquiry.

Optional statistics (Google Analytics 4), only after consent: technical usage data such as page views, approximate geography, device and browser type, referral source (e.g. search engines) and on-site events (e.g. contact clicks and CV/application downloads). Form contents and other personally identifying data are not sent to Analytics.

Technical hosting: server logs at Vercel may include IP address and request metadata for security and operations. This is separate from GA4 and governed by Vercel’s privacy and data processing terms.

Purpose and legal basis

Contact form: purpose is to receive, assess and respond to enquiries. Legal basis: legitimate interest in professional follow-up and/or steps prior to contract at your request.

Google Analytics 4: purpose is aggregated statistics on how the site is used (traffic, content interest and relevant actions) to improve content, structure and experience. Legal basis: consent — statistics run only when you actively choose “Accept statistics”.

We do not use GA4 for advertising, remarketing or ad personalisation.

Processors, email and third countries

Google Analytics 4 is provided by Google (Google Ireland Limited / Google LLC) as processor. Google may process data in the EU/EEA and outside the EEA (including the USA), including using Standard Contractual Clauses where required.

The contact form is sent from the website via SMTP using Nodemailer, configured for Google’s email service (Gmail SMTP). Messages are delivered to marius.ottesen.76@gmail.com, and a confirmation email is sent to the address you provide. Google processes email as provider/processor under Google’s terms and privacy policies; storage is in the controller’s Google mailbox.

The website is hosted by Vercel Inc.

Google Analytics, consent and withdrawal

GA4 is not loaded and no analytics cookies are set until you consent. You are offered equivalent choices to accept or decline statistics; nothing is pre-selected.

You can change your choice via “Change cookie choices” in the footer or on this page, or withdraw consent using “Withdraw consent” when statistics are accepted. If you decline or withdraw, further tracking stops and relevant analytics cookies are cleared where technically possible in the browser.

The site’s Measurement ID is G-LTLPQ27LQN (one property for Norwegian and English content).

You can also disable tracking for yourself in a browser independently of the banner by visiting https://www.mariusottesen.no/?analytics_opt_out=1 (on) or ?analytics_opt_out=0 (off). This is stored locally in the browser.

Cookies and local storage

The site does not set analytics cookies without consent.

Your consent choice is stored locally in the browser (localStorage, key marius_cookie_consent_v1) for up to 12 months, with a timestamp and version of this policy. After expiry, the choice banner is shown again.

After accepting statistics, Google Analytics may set cookies such as _ga and _ga_* to distinguish sessions and visits. Duration follows Google’s defaults (typically up to 24 months for the main _ga cookie — inspect cookies in your browser).

Personal tracking opt-out is stored locally (localStorage, key marius_analytics_opt_out) until you disable it.

The controller does not keep a central server-side copy of your cookie choice; proof of the choice resides in the browser you used. This is common for simple consent on small sites but does not give the controller an independent audit log per visitor.

Retention

Enquiries received by email are kept for as long as necessary to follow up the dialogue and for relevant documentation obligations (for example where an enquiry forms part of reasonable documentation of professional contact). There is no fixed automatic deletion deadline in the system.

Data in Google Analytics is retained according to GA4 property settings (event data — check “Data retention” in Google Analytics Admin).

Consent choice in the browser: up to 12 months, then a new choice is requested.

Your rights

You have rights of access, rectification, erasure, restriction, objection and portability where applicable, and you may withdraw consent to statistics.

You may lodge a complaint with the Norwegian Data Protection Authority (Datatilsynet).

Rights requests: marius.ottesen.76@gmail.com.