Who is responsible?
Mathisen Dynamics, organisation number 926 640 658, is the controller for the processing described here. Contact us at post@mathisen-dynamics.no. Registered business address: Rosenbergveien 15, 0963 Oslo. Postal address: Postboks 1751 Vika, 0122 Oslo.
This notice covers the website and initial contact with us. Products and assignments involving other personal-data processing must have information and agreements suited to that processing.
When you visit the website
The website is a public presentation of the business. It has no user accounts, contact forms, document uploads, payment system or active AI chat. Project examples are illustrations.
When pages load, the hosting infrastructure processes technical details such as IP address, time, requested page and browser information. The purpose is page delivery, fault detection and protection against abuse. The legal basis is our legitimate interest in a functional, secure website under GDPR Article 6(1)(f).
We have not added advertising pixels, visitor analytics or profiling. Also read about cookies and local storage.
When you contact us
If you email us, we process your email address, any name, business and telephone number, and the content and attachments you send. We use this to answer, clarify needs and follow up any agreement.
For general questions and business contacts, we rely on our legitimate interest in answering and following up relevant enquiries under Article 6(1)(f). If you are the contracting party requesting a quote or service, the basis is necessary pre-contractual steps or performance under (b). Statutory accounting records are processed under (c).
Contact is voluntary, but we need a reply address and enough information to help. Describe your need without sending identity numbers, health data, passwords or customer documents. If an assignment requires confidential material, we agree on a suitable transfer method.
A visit or enquiry does not subscribe you to a newsletter. The website does not forward emails or documents to AI models. Any AI processing within an assignment must be agreed before such data is used.
Providers and processing outside the EEA
one.com provides the domain and email service. Emails you send are stored and handled through this service and may sync to our work devices. one.com’s data processing agreement describes processing and subprocessors, with data centres in Denmark and activities including system monitoring from India.
OpenAI provides hosting through ChatGPT Sites. OpenAI processes technical information to operate and secure the website on our behalf. The ChatGPT Sites data processing agreement describes purposes, subprocessors and processing conditions.
Providers’ international operations may involve processing outside the EEA, including the USA and India. Agreements describe EU standard contractual clauses and, where relevant, European Commission adequacy decisions. We do not guarantee processing exclusively in Norway or the EEA. Contact us for details and copies of relevant transfer safeguards.
Access must be limited to what the task requires. Otherwise, information is disclosed where required by law or necessary to establish or defend legal claims.
How long is information kept?
- Routine enquiries without an assignment: deleted when the matter and any agreed follow-up are complete, no later than 12 months after the last relevant contact.
- Quotes and assignments: necessary agreement and delivery records remain during follow-up. Afterwards, only records necessary for the agreement, statutory retention or specific legal claims remain. Duration depends on factors including agreed guarantee and complaint periods and unresolved disputes.
- Invoices and accounting records: generally retained for five years after the financial year ends. Other statutory periods apply to records governed by special rules.
- Technical operational and security logs: managed by the hosting platform. Its public Sites agreement does not specify a fixed deletion deadline for every log type. It governs processing during service and deletion or return on termination. Contact us for details about logs concerning you.
For a specific legal claim, relevant records may be retained until final resolution. This does not justify retaining every email or attachment.
Your rights
You may request access, correction, deletion and, in some cases, restriction. Where conditions are met, you may receive information you provided in a structured format.
You have the right to object to processing based on legitimate interests. We then assess whether processing must stop. Information required by law or for legal claims may be exempt from deletion.
Send your request to post@mathisen-dynamics.no. We normally respond within one month. If complexity requires a lawful extension, we notify you and explain why. We request only the identity verification necessary to protect the information.
You may complain to Datatilsynet (Norwegian Data Protection Authority). The website is not used for automated decisions with legal or similarly significant effects for you.
Changes
This notice is updated when the website or processing changes. Significant changes affecting you are explained clearly on the website or directly where necessary. The update date is at the top.
Questions?
Contact us at post@mathisen-dynamics.no. Addresses and other contact details are listed under company details.