Privacy policy

01Who is responsible

The data controller is Sylte Solutions, a Norwegian sole proprietorship registered as org. no. 927 897 008 and based in Molde.

Privacy questions go to [email protected]. You get an answer from me, not from a support queue.

02Who this applies to

• You, when you visit sylte.dev.
• You, when you get in touch — through the form, by email or otherwise.
• You, as a client or a contact person at a client.
• People whose data I process on behalf of a client during an assignment. There the client is the controller and I am the processor — see the separate section below.

03When you visit the website

The site sets no cookies and stores nothing in your browser. That is why you meet no consent banner.

I use cookieless web analytics to see how many people visit, which pages are read and from which countries — aggregated, without identifying you or following you elsewhere. The hosting provider also keeps ordinary operational logs, the same as any other website. The basis is legitimate interest (Article 6(1)(f)): knowing whether the site works, with as little intrusion as analytics can be done with.

04When you get in touch

When you get in touch, I process what you provide yourself: your name, contact details and the content of the enquiry. If you submit the contact form, technical details about the submission are also used to tell genuine enquiries apart from automated ones — no enquiry is rejected on that basis.

The basis is GDPR Article 6(1)(b) — steps taken at your request prior to entering a contract — and 6(1)(f) for abuse prevention, a legitimate interest with minimal intrusion.

05When you are a client

In a client relationship I process what is needed to deliver and invoice:

• Contact details for you and your contact persons — name, role, email, phone.
• The agreement, the correspondence and the project information belonging to the assignment.
• Invoicing and payment details.

06When I work on your behalf

If an assignment gives me access to personal data in your systems or datasets, you are the controller and I am the processor. I then process the data only on your instructions and only for the purposes of the assignment, we sign a data processing agreement, and the data is deleted or returned when the assignment ends.

Rights concerning such data are exercised towards the client, who is the controller — but I help fulfil them.

07Who else sees it

I sell no data and share none of it for marketing.

I use processors for email, website hosting, web analytics, accounting and AI tools, and in assignments the tools we agree on. Some of them may process data outside the EEA; where they do, the transfer is safeguarded by the EU Standard Contractual Clauses or another approved basis. The current list of processors is available on request.

Beyond this, data is disclosed only where the law requires it.

08How long

• Website visits: only aggregated statistics that cannot be tied to you.
• Technical details from a form submission: briefly, and only for abuse prevention.
• Enquiries that do not lead to work: deleted within twelve months.
• Client relationships: for as long as they last, and then until any claims are settled.
• Accounting records: five years after the end of the financial year, as section 13 of the Norwegian Bookkeeping Act requires. I cannot waive that deadline, not even if you ask for deletion.
• Data I process on behalf of a client: for the duration of the assignment, then deleted or returned under the data processing agreement.

09Links to other websites

The site links to other websites, including projects I have worked on. Their own privacy policies apply there, and I have no control over what they collect.

10Your rights

You can ask what I hold about you, have it corrected or deleted, ask for processing to be restricted, receive the data in a machine-readable format, and object to processing that rests on legitimate interest.

Send an email to [email protected]. You get an answer within 30 days. I require no forms and no justification.

If you believe I am handling your data unlawfully, you can complain to the Norwegian Data Protection Authority — datatilsynet.no.

11Security

All traffic to and from the site is encrypted. The systems holding data are protected with two-factor authentication, and I am the only one with access to them.

12Changes

If anything here changes, the date at the top changes with it. If the change is significant and you are a client or have an ongoing enquiry, I tell you directly.