This policy explains which personal data arnsteinlarsen.no processes, why, and what your rights are. Last updated: 13 October 2026.
Who is responsible?
LAKI AS (org. no. 917 220 808), c/o Arnstein Larsen, Camilla Colletts vei 3, 0258 Oslo, Norway, is the data controller. Send questions about privacy to [email protected].
When you visit the site
The site is hosted by Hetzner, and traffic passes through Cloudflare. Both process your IP address and technical details about your browser to deliver the site and protect it from attacks.
When you open a page, your browser loads fonts from Google Fonts. Pages with posts load profile pictures from Gravatar, and some pages load emoji images from WordPress.org. These services then receive your IP address.
Cookies
We only use cookies the site needs to work, unless you agree to analytics. You can change your choice at any time with the «Cookie settings» link at the bottom of the page.
| Cookie | What it does | Duration | Consent |
|---|---|---|---|
pll_language | Remembers the language you chose | 1 year | No, necessary |
laki_cmp_consent | Remembers your cookie choice | 180 days | No, necessary |
_ga, _ga_Z9W4Q7Z7J5 | Google Analytics: tells visits apart | Up to 400 days | Yes |
Statistics with Google Analytics
If you agree to analytics, we use Google Analytics to see which pages are read. Google Ireland Limited processes the data on our behalf. If you say no, Google Analytics is not loaded, and no data is sent to Google for statistics. The legal basis is your consent (GDPR Article 6(1)(a)).
Google keeps data about each visit for 2 months. Data linked to your browser is kept for 14 months, and that period starts again if you come back.
When you contact us
If you fill in a form on the site, we receive what you enter. That is your name, email and company, and depending on the form also phone number, country, industry, the size of your board or management team, and what you tell us about your situation. The forms store the submission in the site’s database and send it to us by email. The email is sent through Brevo (Sendinblue SAS in France). We use the data to answer you and follow up. The legal basis is your request and our legitimate interest in answering (Article 6(1)(b) and (f)). We delete the enquiry when it is no longer needed to follow up the matter.
Newsletter
If you sign up for the newsletter, we send your name and email address to Mailchimp (Intuit Inc.), which sends the newsletter for us. The legal basis is your consent. You can unsubscribe with the link in every newsletter.
Booking a meeting
The page for booking a meeting has a calendar from Cal.com. When you open that page, your browser loads the calendar from Cal.com, which then receives your IP address and sets its own cookie. The calendar also loads an image from Google (lh3.googleusercontent.com), so Google receives your IP address as well. If you book a meeting, Cal.com processes the details you provide to set up the meeting.
Transfers outside the EEA
Google, Cloudflare, Automattic (Gravatar and WordPress.org) and Intuit (Mailchimp) are US companies and may transfer data to the USA. They are certified under the EU–US Data Privacy Framework.
Your rights
You can ask for access to the data we hold about you, and ask us to correct or delete it. You can also ask us to restrict processing, object to it, and receive your data. If you have given consent, you can withdraw it. Send an email to [email protected].
If you believe we process your data in breach of the rules, you can complain to the Norwegian Data Protection Authority (Datatilsynet).