1. Data controller
The controller responsible for personal data processed through this website is:
Nicola Paulukat Photography & Films (trading as Kesenio)
Sundbyveien 48B, 3478 Nærsnes, Norway
Email: contact@kesenio.com
kesenio.com is operated by Nicola Paulukat Photography & Films, Sundbyveien 48B, 3478 Nærsnes, Norway. Questions about this policy or your data can be sent to the email address above.
2. What data we collect
Contact form
When you send a message through the form on the homepage or the contact page, we receive:
- your name and email address;
- the topic you select (for example "SEO" or "Google Ads");
- the content of your message, and any personal data you choose to include in it;
- your confirmation that you agree to this policy.
The form contains a hidden anti-spam field. We do not ask for a phone number and do not use the form for marketing lists.
If you write to us directly, we receive your email address, your message and any attachments.
Server logs
Our hosting provider automatically records technical data such as IP address, date and time, requested page, browser type and referring page. These logs are used for security and troubleshooting.
3. Purpose and legal basis
- Answering your enquiry and preparing a possible offer, GDPR Article 6(1)(b) (steps prior to entering into a contract) and Article 6(1)(a) (your consent given in the form).
- Operating and securing the website through server logs, Article 6(1)(f) (our legitimate interest in a secure, working site).
- Keeping business records where an enquiry leads to an agreement, Article 6(1)(c) (legal obligations, including the Norwegian Bookkeeping Act).
You may withdraw your consent at any time by emailing us. Withdrawal does not affect processing that took place before it.
4. How long we keep data
- Enquiries that do not lead to an agreement: deleted no later than 12 months after our last contact.
- Correspondence linked to a client agreement: kept for the duration of the agreement and up to 3 years afterwards, unless longer storage is required by law.
- Accounting records: kept for 5 years as required by Norwegian bookkeeping rules.
- Server logs: normally deleted automatically within 30 days.
5. Who receives your data
We do not sell personal data. Data is shared only with service providers who help us run the website and email (hosting and email providers), under data processing agreements. Where a provider is located outside the EEA, transfers rely on an adequacy decision or the European Commission's Standard Contractual Clauses. We may disclose data if required by law.
6. Cookies and similar technology
This website does not use advertising or analytics cookies. Fonts are loaded from Google Fonts, which means your browser connects to Google's servers and shares your IP address with Google when a page loads. If we add analytics in future, we will update this policy and ask for consent where the law requires it.
7. Your rights
Under the GDPR, as incorporated into Norwegian law by the Personal Data Act (personopplysningsloven), you have the right to:
- access the personal data we hold about you;
- have inaccurate data corrected;
- have data erased where there is no longer a valid reason to keep it;
- restrict or object to certain processing;
- receive your data in a portable format;
- withdraw consent at any time.
To use any of these rights, email contact@kesenio.com. We respond within one month.
8. Complaints
If you believe we process your data unlawfully, you can lodge a complaint with the Norwegian Data Protection Authority, Datatilsynet (datatilsynet.no), or with the supervisory authority in your EEA country of residence. We would appreciate the chance to resolve your concern first.
9. Changes to this policy
We may update this policy when our services or the law change. The date at the top shows when it was last revised.