1. Who this policy covers
This policy explains how Nordlys Culinary Editorial ApS, operating guidetaltallynestl.quest (“we”, “us” or “the site”), handles personal information when you browse our informational pages or choose to contact us. It applies to the pages and browser-side features provided at this domain. It does not describe the practices of third-party sites you may reach through an external link. We do not operate restaurant bookings, sales, payments or user accounts through this website.
2. Information that may be handled
Reading the site does not require you to create an account or provide profile information. Like most websites, the hosting environment may receive basic technical information as a request is served. Depending on the hosting configuration, this can include an IP address, request time, requested page, browser or device details, and error information in server logs. The precise log fields and retention periods depend on the hosting provider and its configuration. We do not use the site code to build visitor profiles.
If you contact us using the form, the form prepares an email in your own email application; it does not send information to a website form server. The message may include the first name, surname, email address, subject and message that you enter. Your email application and email provider then handle the message under their own terms and privacy practices. If you instead write directly to our contact email, we receive the information contained in that email and its delivery metadata.
3. Browser storage and preferences
The cookie interface stores your consent choice in your browser’s local storage under the key guidetaltallynestl-cookie-preferences. This is browser-side storage, not a cookie and not a database entry sent to us by the site. It allows the site to remember whether you dismissed the banner and the optional settings you selected when you return using the same browser profile. Clearing site data removes it. The site currently does not load analytics, advertising trackers, mailing-list tools or embedded third-party content. Optional categories in the preferences panel do not activate a service that is not present.
4. Purposes and legal basis
We use information in a limited way to deliver pages, remember the choice you made in the preference interface, respond to messages you send and protect the service from operational faults or misuse. Where the GDPR applies, the relevant basis depends on the activity: responding to a request may be necessary to take steps at your request or pursue legitimate interests in correspondence; essential technical processing may support the operation and security of the website; any consent-dependent optional storage would rely on consent. You may withdraw consent for optional preferences by changing your settings or clearing browser storage.
5. Service providers and transfers
The website is hosted so that pages can be delivered. Hosting providers may process technical request information to provide that service and maintain security. We do not add an analytics, advertising, social-media embed or mailing-list processor to the site. Images referenced on pages are served from external image URLs; when your browser requests such an image, the image host may receive technical request information, such as an IP address and browser data, under its own arrangements. You can prevent external image requests by using browser controls or a network configuration that blocks them, though some visuals may then not display.
6. Retention and security
We keep correspondence only as long as reasonably needed to respond, maintain a useful record of the conversation, meet applicable legal obligations or handle a dispute. Server-log retention is governed by the hosting arrangement and operational needs; we do not use logs as a marketing database. Browser preference data remains on your device until changed or cleared. We use reasonable organizational and technical precautions suitable for a small informational website, but no internet transmission or storage system can be guaranteed entirely secure. Access to correspondence should be limited to people who need it for the relevant purpose.
7. Your rights
If GDPR or similar European data-protection law applies, you may have rights to request access, correction, deletion, restriction or portability, to object to certain processing, and to withdraw consent where consent is the basis. You may also complain to a supervisory authority, particularly in the country where you live, work or believe an infringement occurred. In Denmark, the supervisory authority is Datatilsynet. Rights depend on the circumstances and may be subject to legal exceptions.
Residents of California may have rights under the CCPA, as amended by the CPRA, where that law applies. These can include rights to know, access, correct or delete certain personal information, to receive information in a portable form and to opt out of sale or sharing for cross-context behavioural advertising. This site does not sell personal information or use advertising trackers. We will not discriminate against someone for exercising applicable privacy rights. Other regional laws may provide additional protections.
8. Making a request and contact
Send a privacy request to [email protected] with enough information for us to understand and respond to it. Please do not send sensitive personal data unless necessary. We may ask for proportionate information to verify a request and will respond within the time required by applicable law. You can also use that address to ask about this policy. We have not designated a Data Protection Officer because the site’s described activities do not by themselves establish a requirement to appoint one; contact us at the same address for privacy matters.
9. Changes
We may revise this policy when the site or applicable requirements change. The updated version will appear on this page with a revised date. A material change to how information is handled will be described in clear terms. Continued use after publication means the policy is available to read; it does not replace consent where consent is legally required.