Privacy notice

Last updated 4 October 2026.

Who is responsible

The data controller is Zanatello Acosta Consulting, a Norwegian sole proprietorship (enkeltpersonforetak) owned by Bruno Zanatello Acosta. Org.nr. 938 525 390. Contact: post@zanatelloacosta.com. The registered address is on the legal notice.

What is collected

The contact form is the only place this site collects personal data. It asks for:

• your name and work email;
• your company, if you choose to give it;
• your description of the problem;
• your preferred contact method, if you choose to give it.

If you write by email instead, the same applies to what you send. The hosting provider also keeps short-lived technical logs, such as IP addresses, to run and protect the service.

Why, and on what legal basis

Your details are used to reply to your enquiry and, if you ask for one, to prepare a proposal. The rules that apply are the Norwegian Personal Data Act and the GDPR. The legal basis is GDPR Article 6(1)(f), a legitimate interest in answering people who contact the business, and Article 6(1)(b) when the contact is a step towards a contract at your request.

Your details are not used for marketing, not sold, and not combined with data from other sources.

Who receives it

• Netlify, which hosts this site and processes form submissions.
• The email providers that forward and store messages sent to post@zanatelloacosta.com (Namecheap for forwarding, Google for the mailbox).

These providers act as data processors. Some of them are based in the United States; transfers rely on the EU–US Data Privacy Framework or the European Commission’s standard contractual clauses.

How long it is kept

Enquiries that do not lead to an engagement are deleted within 12 months of the last contact. If you become a client, correspondence is kept for the length of the engagement and for as long as Norwegian bookkeeping law requires for the records it covers, normally five years.

Cookies and analytics

This site uses no analytics, no advertising and no non-essential cookies, so there is no cookie banner. Fonts are served from this site, not from a third party. If that ever changes, this notice will be updated first and consent will be asked where the law requires it.

Your rights

You can ask for access to your data, for it to be corrected or deleted, for its use to be restricted, to receive a copy in a portable format, and you can object to its use. Write to post@zanatelloacosta.com; you will get an answer within one month.

You can also complain to the Norwegian Data Protection Authority, Datatilsynet.