Legal

Privacy & Cookie Policy

Data Controller

Johannessen Creative AS
Org. 831 694 742
Lillehammer, Norway
info@johannessencreative.com

What We Collect

We only collect personal data if you give explicit consent. With your consent, we use Google Analytics to collect anonymised usage data including: pages visited, time spent on site, device and browser type, and approximate geographic location (country/city level). IP addresses are anonymised. We do not collect names, email addresses, or any identifying information through analytics.

We do not use any tracking cookies without your prior consent.

Legal Basis

Processing is based on your consent (Article 6(1)(a) GDPR). You may withdraw your consent at any time by clearing your browser cookies or clicking "Withdraw consent" below.

Cookies

We use the following cookies:

CookiePurposeRetention
_ga, _ga_*Google Analytics — usage statistics14 months
jc_cookie_consentStores your cookie preference12 months

Client Portal

We operate a client portal at johannessencreative.com/portal for existing clients. If you have been given access, we store the following data: your email address, a hashed password, and project-related information (project name, status, platforms, milestones, notes, messages exchanged between you and us, and any files you choose to upload). This data is used solely to provide you with an overview of your project and to facilitate communication about it.

The legal basis for this processing is the performance of a contract (Article 6(1)(b) GDPR). Portal data is stored with Supabase (see Third Parties below). You may request deletion of your account and data at any time by contacting us at info@johannessencreative.com.

Third Parties

Analytics data is processed by Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland. Google may transfer data to servers outside the EEA. For more information see Google's Privacy Policy.

Client portal data is processed by Supabase Inc., 970 Toa Payoh North, Singapore. Supabase stores data in the EU (Frankfurt). For more information see Supabase's Privacy Policy.

Portal email notifications are sent via Resend (Resend Inc., San Francisco, USA). Resend processes your email address solely to deliver transactional messages on our behalf. For more information see Resend's Privacy Policy.

Your Rights

Under GDPR you have the right to: access your data, have it corrected or deleted, restrict or object to processing, and data portability. To exercise these rights contact us at info@johannessencreative.com.

You also have the right to lodge a complaint with the Norwegian Data Protection Authority: datatilsynet.no.

Withdraw Consent

You can withdraw your cookie consent at any time.

Updates

This policy was last updated April 2026. We may update it as our services change. Material changes will be communicated via this page.