Who is responsible
GR Studio is responsible for the processing described here. You can reach us about anything on this page at glenn@grstudio.site.
When you visit the site
To show you the site and protect it from abusive traffic, the servers that deliver it process technical data such as your IP address, your browser type and the page you asked for. This happens on every website, and we do not use the data to find out who you are.
We do not use advertising or tracking tools, and we do not build profiles of visitors. Fonts and films are served from our own site, so a visit does not send data about you to Google, YouTube or similar services.
Visitor statistics, only with your permission
If you allow it, Lovable, which hosts the site, counts your visit for us. It records which pages you view, the page you came from, your browser, your language and your approximate country, worked out from your time zone. It keeps a random visit number in a cookie for 30 minutes, so the pages you view count as one visit.
We only see totals, such as how many visits a page had. The statistics are not used to tell who you are, and they do not follow you from one visit to the next.
Nothing is counted until you choose Accept all. You can take your permission back at any time with Cookie settings at the bottom of every page, and the statistics stop from then on.
When you write to us
When you send the contact form, your browser sends it to FormSubmit, a form service that emails it to our inbox. Writing to us directly by email reaches the same inbox.
We receive what you choose to tell us: your name, your email address and your message, and if you add them, your business and what you need.
Why we use it, and on what basis
- To answer you and prepare an offer, because you asked us to. The legal basis is steps taken at your request before an agreement (GDPR article 6(1)(b)), and our legitimate interest in answering messages (article 6(1)(f)).
- To deliver the site and keep it secure. The legal basis is our legitimate interest in a site that works and is protected against misuse (article 6(1)(f)).
- To count visits and see which pages people read, if you allow it. The legal basis is your consent (article 6(1)(a)).
Who else handles the data
We use a few providers who process data on our behalf, only to run the site, the statistics and our email.
- Lovable, which builds and hosts the site and, with your permission, counts visits, and Tinybird, which stores those statistics for Lovable.
- Cloudflare, whose network delivers the site and filters out abusive traffic.
- FormSubmit, which delivers the contact form to our inbox by email.
- Microsoft, which runs the email account at grstudio.site.
Transfers outside Europe
Some of these providers are based in the United States or may process data there. Where they do, the transfer relies on safeguards such as the EU-US Data Privacy Framework or the European Commission's standard contractual clauses. We never sell personal data or share it for marketing.
How long we keep it
- Inquiries are kept as long as the conversation needs, and deleted within 12 months of the last contact if they do not lead to an agreement.
- If they do lead to an agreement, we keep what the Norwegian Bookkeeping Act requires, for as long as it requires.
- Visitor statistics are kept by Lovable as totals for our project. The cookie behind them expires after 30 minutes.
- Technical data on the servers is kept briefly by the providers to run and protect the service. The cookies are listed under cookies.
Your rights
You can ask to see the personal data we hold about you, have it corrected or deleted, restrict or object to how we use it, and receive a copy to take elsewhere. Where we rely on your consent, you can withdraw it at any time. Write to glenn@grstudio.site, and we will answer within a month.
If you think we handle your data wrongly, you can complain to the Norwegian Data Protection Authority, Datatilsynet.
Links to other sites
Our case studies link to live websites we built, for clients and as concepts. When you follow such a link, that site's own privacy policy applies.
Changes
If the site starts collecting anything new, we update this page before it happens. The date at the top shows the current version.