Privacy notice
This is a translation. The Norwegian version at mitigate-as.web.app/personvern is the authoritative text. In case of any discrepancy, the Norwegian version prevails.
Last updated 3 August 2026
This notice applies to the website www.mitigate.no and explains what personal data we process when you visit it, why we do so, and what rights you have. During a transition period the site is also available at mitigate-as.web.app. This notice applies to both addresses.
The site has no forms, no sign-in and no newsletter. We therefore collect very little.
1. Who is the controller
mitigate AS, company registration number 938 169 713, is the controller for the personal data processed through the website.
Privacy questions can be sent to post@mitigate.no, or directly to one of the owners: are@mitigate.no, ivar@mitigate.no or jon@mitigate.no.
2. What we process, and why
| Purpose | Data | Legal basis |
|---|---|---|
| Delivering and securing the website | IP address, time, which page was requested, browser type | Legitimate interest in operating a functioning and secure website, GDPR Article 6(1)(f) |
| Remembering your answer to the consent question | Your choice, stored locally in your browser | Necessary to provide the function you asked for. Without it we would have to ask again on every page view |
| Measuring how the website is used | Randomly generated user ID, page views, approximate location, device and browser type | Your consent, GDPR Article 6(1)(a), and the rules on storage in terminal equipment in the Norwegian Electronic Communications Act |
| Replying to enquiries | Name, email address and whatever you write yourself | Legitimate interest in replying to the person who contacts us, Article 6(1)(f) |
3. Measurement is optional
We use Google Analytics to count visits and see which pages are read. This happens only if you have consented.
As long as you have not consented, Google Analytics is not loaded at all. That means your browser does not contact Google measurement services, and no identifier is set. If you choose «Essential only», it stays that way.
You can change your mind at any time via «Change consent» at the bottom of the page. Withdrawing consent does not affect the lawfulness of what was collected before you withdrew it.
Google Analytics is configured without advertising features. We do not use the data for marketing, we do not build profiles, and we make no automated decisions that affect you.
4. Cookies and local storage
Before you consent, nothing is stored other than your choice.
| Name | Type | Purpose | Duration |
|---|---|---|---|
| mitigate.consent.v1 | Local storage | Remembers whether you accepted measurement | 12 months |
| _ga | Cookie | Distinguishes visitors in Google Analytics. Set only with consent | 2 years |
| _ga_NCJZQXJJ1J | Cookie | Keeps track of the session in Google Analytics. Set only with consent | 2 years |
You can delete stored data at any time through your browser settings. If you delete it, we will ask for consent again on your next visit.
5. Who we share with
We do not sell personal data, and we do not share it with anyone other than the providers that operate the website for us:
- Google (Firebase Hosting) — delivers the website itself. Processes technical data such as IP address in order to send the pages to you and protect against abuse.
- Google (Google Analytics) — provides the measurement. Used only if you have consented.
Both are processors for us and may only process the data on our instructions. Processing may involve transfer to the United States. Any transfer relies on the European Commission adequacy decision under the EU–US Data Privacy Framework, supplemented by the EU standard contractual clauses.
6. How long we keep data
- Technical server logs: deleted automatically after the Google standard retention period for operational logs.
- Measurement data: deleted automatically after the retention period set in Google Analytics, at most 14 months.
- Your consent choice: 12 months, then we ask again.
- Email you send us: for as long as necessary to follow up the enquiry, and then deleted unless we are required to keep it.
7. Your rights
You have the right to:
- know what data we hold about you, and receive a copy of it
- have inaccurate data corrected
- have data erased
- ask us to restrict processing
- object to processing we carry out on the basis of legitimate interest
- receive the data in a machine-readable format
- withdraw your consent at any time
Contact post@mitigate.no to exercise your rights. We normally reply within 30 days.
Note that the measurement data contains no names or contact details. That means we usually cannot link it to you as a person, and may therefore have difficulty locating your specific data without more information from you.
8. Complaints
If you believe we process personal data in breach of the rules, you may complain to the Norwegian Data Protection Authority. Contact details are available at datatilsynet.no. We would appreciate it if you contacted us first, so we get a chance to put it right.
9. Changes
We update this notice when the website changes. The date at the top shows when it was last changed. If there are material changes to what we collect, we will ask for consent again.