Privacy policy

Updated: 08-11-2026.

1. Controller and contact

Roberto Ortega Alonso, a lawyer in Spain and Norway, is the controller for jussogki.no, a legal blog in Spanish, Norwegian and English. Privacy contact: Heimsspeki@pm.me. The General Data Protection Regulation (GDPR) applies in Spain and in Norway through the European Economic Area (EEA).

2. Browsing and preferences

To deliver and protect the website, its infrastructure receives your IP address and technical request data. The legal basis is the legitimate interest in keeping the website available and secure (GDPR Article 6(1)(f)).

Cloudflare uses the security cookie __cf_bm to counter abusive automated traffic. It expires after 30 minutes of inactivity. Your browser also stores your language and appearance, editorial or techno, in localStorage without a programmed expiry date. You can delete these preferences in your browser settings.

Search filters content in your browser. It downloads the site's content catalogue but does not send your search text. The pages reviewed have no contact forms, comments or email subscription forms. RSS lets you follow new posts without providing an email address.

3. Optional statistics

Google Analytics (G-HKEBQGJ4T7) only loads after you accept statistics. The legal basis is your consent (GDPR Article 6(1)(a)). You can reject it and continue reading.

With consent, measurement covers page visits, device and browser information, scrolling halfway through an article, audio starts and completions, and our own LinkedIn campaigns. Google also receives the IP address used for the connection. The code excludes search text and free-form parameters from the page addresses sent. It does not enable Google Signals or advertising personalisation.

Analytics cookies are configured to last up to 28 days. Your choice is stored in a cookie and in localStorage for up to 180 days. You can withdraw consent through “Privacy and statistics” in the footer. This stops new measurement and deletes Analytics cookies in that browser. Withdrawal does not affect the lawfulness of earlier processing or itself delete data already sent.

4. Providers and transfers

The site uses OpenAI Sites and Cloudflare infrastructure, including R2 for media. Google provides Analytics when you allow it and Search Console as described below. These services support website delivery, security or measurement.

Data may be processed outside the EEA, including in the United States.

Google states that it adheres to the EU–US Data Privacy Framework (DPF) and uses standard contractual clauses where needed, in its data transfer policy.

Cloudflare states that it uses the DPF for transfers from the EEA to the United States and standard contractual clauses as a fallback if its certification becomes invalid, in its privacy policy.

OpenAI states that it uses standard contractual clauses for transfers to countries without an adequacy decision, including the United States, in its European privacy policy.

5. Retention

Browser storage periods are described above. Google Analytics retains event data for 2 months. Cookie expiry does not itself delete data already sent.

Hosting and security providers may retain technical logs (IP address, date and requested page) for the periods set by their policies, for security and operational purposes.

6. Internal tool Ariadna GSC

Ariadna GSC is an internal tool for reviewing the visibility of jussogki.no; Roberto authorises it through his Google account with the read-only webmasters.readonly permission. Credentials are stored on his computer, not on the website, in a protected file accessible only to its owner. Reports contain aggregated Search Console data: search queries, pages, clicks, impressions and position. They are stored locally, used only for the jussogki.no property and are not shared with third parties. Roberto can revoke access at any time through his Google account.

7. Your rights

Where applicable, you may request access, rectification, erasure, restriction and data portability, and object to processing. Write to Heimsspeki@pm.me. You may withdraw consent at any time. You will normally receive a response within one month; the GDPR allows justified extensions.

You may complain to the AEPD in Spain or Datatilsynet in Norway, as appropriate, without limiting your right to contact another competent supervisory authority.