Privacy and cookies

Last updated 30 October 2026

1. Who is responsible

The Grillfather (M44 shopping centre, Jupitervegen 2, 4340 Bryne, Norway) is the data controller for personal data processed on thegrillfather.no. Questions about privacy can be sent to us by phone on +47 90 88 03 03 or by email to roy@smakenavlandet.no.

2. What data we process

• No forms or log-in: the website has no contact form, online booking or user account – bookings are made by phone. We do not collect names, email addresses or anything else you type in.
• Technical data: when you visit the website, our hosting provider processes technical data such as your IP address, browser type and time of visit as part of normal operation and security.
• Anonymous visitor statistics: which pages are visited and for how long, without cookies and without being linked to you. The part that is measured in your browser only happens if you have consented. See section 3.

We use no advertising tools, build no advertising profiles and never sell personal data.

3. Visitor statistics

To see how the website is used and to improve it, we keep simple statistics on visits. The statistics are anonymous and are collected without cookies. We cannot see who you are, and we do not follow you between websites.

• Netlify Analytics: our hosting provider counts page views, number of visitors, which pages are visited, which website you came from and which country the visit comes from. The figures are calculated on the server from the usual technical data (see section 2) and are only made available to us as totals. Netlify keeps this data for about 30 days.
• Our own measurement of time on the page (only with consent): if you have chosen “Accept statistics”, your browser sends one anonymous signal when you leave a page, with which page it was, how many seconds the page was visible, whether you came from another website (and if so, which), and whether you clicked through to another page on our site. The signal contains no IP address, no identifier and nothing you have typed. Automated browsers (robots) are not measured.

The measurements are stored by Datahjelpen.IT AS, which runs the website for us, in a database at Supabase with servers in the EU (Frankfurt). Individual measurements are deleted automatically after 13 months; after that only monthly totals remain. Technical logs at the provider may contain IP addresses and are deleted automatically after a short time.

Legal basis: Netlify Analytics is calculated on the server without reading or storing anything on your device, and is based on our legitimate interest in running and improving the website (GDPR Art. 6(1)(f)). Our own measurement in the browser is based on your consent (GDPR Art. 6(1)(a), cf. section 3-15 of the Norwegian Electronic Communications Act). If you say no, nothing is measured in your browser and the website works exactly as before. You can withdraw your consent at any time, as easily as you gave it (see section 4).

4. Cookies and consent

The website uses no cookies – not for statistics, marketing or anything else. The first time you visit, we ask whether you accept the anonymous statistics in section 3. “Decline” and “Accept” are equally easy to choose.

To remember your choice, one item is stored in your browser’s local storage (localStorage):

• dh_samtykke – whether you accepted or declined statistics, and when. It is needed to remember your choice, contains no information about you and is never sent to us. The choice applies for 12 months; after that we ask again. You can delete it at any time by clearing the site data in your browser.

Change consent

The map on the home page is loaded from OpenStreetMap (OpenStreetMap Foundation, United Kingdom). When the map is shown, your browser fetches map images from there, and OpenStreetMap receives your IP address; the map is not used for advertising. The gallery may contain videos from YouTube (Google). The preview images are loaded from YouTube when the gallery is shown, and the video itself is only loaded when you tap it – in YouTube’s privacy-enhanced mode (youtube-nocookie.com). YouTube then receives your IP address, and if you play a video, YouTube may store information in your browser under its own rules. Apart from the map and these videos, the website does not show embedded content from others, such as Facebook posts. When you follow a link to Facebook, Instagram or Google Maps, those services’ own rules on cookies and privacy apply.

The front page shows the latest posts from our Facebook page. The posts are fetched on the server and the images are delivered through Netlify, so your browser does not contact Facebook until you choose to click through to a post.

5. Data processors

We do not share personal data with anyone other than the providers needed to run the website:

• Netlify, Inc. – hosts and delivers the website and runs Netlify Analytics. Netlify has servers in the USA, among other places. Transfers outside the EEA take place on a valid transfer basis under the GDPR, such as the European Commission’s standard contractual clauses.
• Datahjelpen.IT AS (org. no. 916 507 011) – develops and runs the website and the anonymous visitor statistics for us.
• Supabase – database provider for the visitor statistics, with storage in the EU (Frankfurt).

The providers process data on our behalf under data processing agreements and applicable data protection rules.

6. Your rights

You have the right to access, correct and delete personal data we hold about you, and to object to or ask us to restrict the processing. Because the visitor statistics are anonymous, we cannot link individual measurements to you. Contact us (see section 1) if you have any questions. If you believe we process personal data in breach of the rules, you can complain to Datatilsynet (the Norwegian Data Protection Authority).