Privacy and cookies
Updated 4 November 2026. You decide whether analytics, external maps and audio may load.
Who is responsible?
Tenna Event og Utleie AS is the controller for Opplev Herøy. For privacy questions, access or erasure requests, contact kontakt@tennaeventogutleie.no.
Information we process
Technical requests, IP addresses and browser information are processed to deliver and secure the website, based on legitimate interests (GDPR Article 6(1)(f)). ChatGPT Sites handles sign-in. Editors’ account IDs and email addresses are used for access control. The calendar stores event details, organisers, venues, links and editor IDs. Page editing stores the latest content, editor ID and modification time for editorial administration and security, based on legitimate interests. Reading the calendar does not require submitting personal information to it.
Published events and submitted material may contain names, contact details and photographs. Only submit information intended for publication, with appropriate rights and permission from people shown. Do not submit sensitive data. Email enquiries are processed to respond and follow up, based on legitimate interests or a contract when the enquiry concerns a booking.
Optional external services
Google Maps loads only after permission. Google then receives technical data including your IP address and browser information and may use cookies under Google’s privacy policy. External audio from Nordland County Council also requires permission; loading it sends the provider your IP address and request details. See the provider’s privacy information.
These optional connections rely on consent (Article 6(1)(a)). Rejecting them does not block the rest of the website. Withdraw using “Privacy choices” in the footer. Withdrawal stops further loading here, but cannot remove data already received or third-party cookies. Use your browser settings to delete those cookies. Withdrawal does not affect the lawfulness of earlier processing.
Google Analytics – optional visitor statistics
Google Tag Manager (GTM-N9KBNV99) manages measurement tags and loads only after consent to analytics. Google Analytics measurement remains configured directly on this website.
With your consent, we use Google Analytics 4 (G-7HWZNRNES9) to understand which pages are visited and how the website is used, helping us improve the information. Google receives visit and device information. The analytics script loads only when you accept analytics, based on consent (Article 6(1)(a)). Advertising features and Google signals are disabled in our integration. The control panel is not measured.
The _ga and _ga_7HWZNRNES9 cookies distinguish visits and sessions. We set their lifetime to up to 180 days without automatic renewal. Reject or withdraw consent through “Privacy choices”. This stops measurement, deletes analytics cookies on this site’s domain and reloads the page. It does not delete information already sent.
Google provides this service and processing may take place outside the EEA. Read Google’s privacy policy and how Google uses information from websites. Retention at Google depends on the Analytics account settings; contact us for the current retention period and transfer safeguards.
Storage on your device
- heroy-privacy-v1: local storage of your map, audio and analytics choices, timestamp and notice version, valid for 180 days and checked on your next visit. It remembers and records your choice on this device and is not sent to us.
- App: using the install button or installed app may register a service worker that caches a simple offline page. It does not cache calendar data, authenticated pages or the control panel. The cache remains until site data is cleared or a new version replaces it.
- Access and security: the hosting platform may use necessary cookies for sign-in and security. Our choices do not disable platform-managed cookies.
Google Analytics is optional. We have added no advertising trackers. Links to Facebook, Spotify and other providers open separate websites with their own policies.
Providers and retention
The site uses ChatGPT Sites/OpenAI and Cloudflare hosting and database services. See OpenAI’s privacy policy and Cloudflare’s privacy policy. Provider processing may involve countries outside the EEA. Contact us for details of applicable recipients and transfer safeguards.
Editorial content and events remain until removed. The calendar’s standard delete function hides an entry but does not permanently erase it from the database; contact us for permanent erasure of personal data. The content database keeps the latest page edit. Email is kept as needed to follow up the matter or meet documentation obligations. Platform log and authentication retention is controlled by the providers; we do not state an unverified period.
Your rights
You may request access, correction, erasure, restriction, object to legitimate-interest processing and request portability where applicable. We may need to verify your identity and normally respond within one month. You may complain to the Norwegian Data Protection Authority. This website does not use automated decisions or profiling.