Privacy & Cookie Policy

Data Controller

Johannessen Creative AS
Org. 831 694 742
Lillehammer, Norway
info@johannessencreative.com

What We Collect

We only collect personal data if you give explicit consent, or when we need it to deliver a service you have agreed to, such as the client portal described below. With your consent, we use Google Analytics to collect anonymised usage data including: pages visited, time spent on site, device and browser type, and approximate geographic location (country/city level). IP addresses are anonymised. We do not collect names, email addresses, or any identifying information through analytics.

We do not use any tracking cookies without your prior consent.

Legal Basis

Processing is based on your consent (Article 6(1)(a) GDPR). You may withdraw your consent at any time by clearing your browser cookies or clicking "Withdraw consent" below. If you email us, we process the details in your message in order to reply, on the basis of our legitimate interest (Article 6(1)(f) GDPR).

Cookies

We use the following cookies:

Client Portal

We operate a client portal at johannessencreative.com/portal for existing clients. If you have been given access, we store the following data: your email address, a hashed password, and project-related information (project name, status, platforms, milestones, notes, messages exchanged between you and us, and any files you choose to upload). This data is used solely to provide you with an overview of your project and to facilitate communication about it.

The legal basis for this processing is the performance of a contract (Article 6(1)(b) GDPR). Portal data is stored with Supabase (see Third Parties below). You may request deletion of your account and data at any time by contacting us at info@johannessencreative.com.

Third Parties

Analytics data is processed by Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland. Google may transfer data to servers outside the EEA. For more information see Google's Privacy Policy.

Client portal data is processed by Supabase Inc., 970 Toa Payoh North, Singapore. Supabase stores data in the EU (Frankfurt). For more information see Supabase's Privacy Policy.

Portal email notifications are sent via Resend (Plus Five Five, Inc., San Francisco, USA). Resend processes your email address solely to deliver portal notifications on our behalf. Resend is a US company, so your email address is transferred to the USA, outside the EEA. The transfer is covered by the EU Standard Contractual Clauses, which form part of Resend's data processing agreement. For more information see Resend's Privacy Policy.

Your Rights

Under GDPR you have the right to: access your data, have it corrected or deleted, restrict or object to processing, and data portability. To exercise these rights contact us at info@johannessencreative.com.

You also have the right to lodge a complaint with the Norwegian Data Protection Authority: datatilsynet.no.

Withdraw Consent

You can withdraw your cookie consent at any time.

Updates

This policy was last updated October 2026. We may update it as our services change. Material changes will be communicated via this page.