Privacy

Øyvinds Coaching is run by Øyvind Sandåker, who is the controller of the personal data. Send questions about privacy to oyvind@zoney.no.

• No cookies, nothing stored in your browser, no third-party analytics and no tracking. The language is in the address (/no or /en).
• No forms and no sign-in: the site does not receive anything from you.
• The server logs every request to the site (time, your IP address, which page you asked for, your browser and which site you came from) to protect the service against attacks and to fix errors. The log is kept encrypted by us, only the person running the service can see it, and it is deleted after 30 days. What remains afterwards is only counts per day (for example how many people viewed a page, or used a phone), which cannot be linked to anyone.

The legal basis for the log is our legitimate interest in running the site securely (GDPR Article 6(1)(f)). It is never sold, shared or used for advertising or AI.

The site runs on a single server we rent from Hetzner Online GmbH (Germany), in their data centre in Tuusula near Helsinki, Finland. Nothing is stored or processed outside the EU/EEA.

• We have a data processing agreement with Hetzner under GDPR Article 28, entered into on 1 November 2026.
• Hetzner is certified to ISO/IEC 27001 and BSI C5 Type 2. TÜV Rheinland audited the security measures in the Finnish data centre on 19 February 2026 and found no deviations.
• Hetzner rents out the machine but has no access to the data: the disk is encrypted, and the key is not stored with them.

We use no other services that receive personal data: no analytics, no content delivery network and no external fonts (the typeface is served from our own server). Let's Encrypt issues the certificate for the secure connection and only learns the domain name.

• All traffic is encrypted (HTTPS).
• The whole disk on the server is encrypted.
• The site runs isolated, without network access and without access to the other apps on the server.
• The server installs security updates automatically every night.

The server log: 30 days. The site has no database, and nothing else is stored.

You have the right to access what we have stored about you, to have errors corrected, to have it deleted, to receive a copy and to object to the processing. Write to oyvind@zoney.no and we will answer within a month. If you believe we process personal data in breach of the rules, you can complain to the Norwegian Data Protection Authority (Datatilsynet).