legal247
NOEN

Privacy notice

legal247.no is built to collect as little as possible. The site has no cookies, no tracking scripts, no forms and no embedded social media content. We count page views on the server without storing anything that can be linked to you. This notice explains what is still processed, why, and what rights you have.

Updated 19 October 2026

Controller

Nordia Law Advokatfirma AS (Norwegian business reg. no. 919 371 684), Dronning Eufemias gate 8, 0191 Oslo, Norway, is the controller for the processing of personal data described in this notice.

Nordia has independent law firms in Sweden, Denmark and Finland. Those firms are not controllers for legal247.no and have no access to data from the site. Information from enquiries you send us is shared with them only if you ask us to, or if it is necessary to follow up your matter and you have been informed.

Questions about data protection can be sent to oslo@nordialaw.com, by phone on +47 22 42 10 20, or by post to the address above.

Overview

Situation Legal basis Retention
You visit the site GDPR Art. 6(1)(f) No visitor logs of our own with IP addresses. Page view counts are deleted after three months. Cloudflare keeps operational logs for a short period
You email us GDPR Art. 6(1)(f) or Art. 6(1)(b) Deleted once handled, and no later than one year after the last contact
You are mentioned in an article GDPR Art. 6(1)(f) and section 3 of the Norwegian Personal Data Act For as long as the article is published

The sections below explain what data is processed and why.

When you visit the site

legal247.no is a static website delivered through Cloudflare. For a page to be displayed, your browser has to send its IP address and certain technical information to the server. Cloudflare uses this information to deliver the pages, to detect and stop attacks and to keep the service stable.

The legal basis is our legitimate interest in running a website that works and is secure (GDPR Art. 6(1)(f)). We do not use the data to identify you or build profiles. We keep no visitor logs of our own with IP addresses. Cloudflare keeps operational and security logs for a limited period under its data processing agreement with us.

Page view counting

To know which articles are read and how readers find them, we count page views on the server when a page is delivered. For each view we store which page was shown, which website you came from (the host name only, for example google.com), any campaign tags in the link (utm parameters), the country and whether you use a mobile device or a computer. We also record whether the request appears to come from a browser or from an automated program. This assessment is based on technical information that browsers always send, not on who you are. When a known search engine or AI service fetches a page, we record the name of the service, for example Googlebot or ChatGPT. Other bots are not counted.

We do not store your IP address, your browser’s user agent string or the full address you came from. The data therefore cannot be linked to you, and we cannot follow you from page to page or between visits. Nothing is stored in your browser, and your browser sends nothing beyond what it always sends when it requests a page. The counting therefore does not require consent under section 3-15 of the Norwegian Electronic Communications Act.

The legal basis for the brief processing that takes place when a view is recorded is our legitimate interest in understanding how the site is used so that we can improve the content (GDPR Art. 6(1)(f)). Counting takes place in Cloudflare Workers Analytics Engine, and the data is deleted automatically after three months. Because the figures cannot be linked to you, we are unable to locate or delete individual views (GDPR Art. 11).

Cookies and browser storage

The site uses no cookies. Fonts are served from our own server, so your browser does not contact Google or any other font service.

There is one thing you should know about. If you click the logo on any other page, a marker is stored in your browser’s session storage (sessionStorage) so that the front page can show a small animation on the clock face. The marker contains no personal data, is not sent to us or anyone else, and is deleted when you close the tab. The storage is strictly necessary to provide the feature you asked for by clicking, and therefore does not require consent under section 3-15 of the Norwegian Electronic Communications Act.

When you email us

The email addresses on the site open your own email program. If you email us, we process your name, email address and what you write in order to reply. The legal basis is our legitimate interest in answering enquiries (GDPR Art. 6(1)(f)). If you ask us to consider taking on a matter, the processing is necessary to take steps at your request before entering into a contract (GDPR Art. 6(1)(b)).

Please do not send sensitive information or details of a matter until we have confirmed that we can act for you. Among other things, we must check for conflicts of interest.

Enquiries that do not lead to an engagement are deleted once they have been handled, and no later than one year after the last contact. If an enquiry leads to an engagement, it becomes part of the case file. Processing in the client relationship is then governed by the engagement terms and the privacy information you receive as a client, and retention follows the rules for legal practice, bookkeeping and anti-money laundering.

All communications with lawyers are subject to statutory professional secrecy.

People mentioned in articles

Articles on legal247.no sometimes mention individuals, typically parties to court decisions, public officials and people taking part in public debate. The information comes from public sources such as judgments, decisions and press releases from public authorities. The purpose is legal commentary and information about developments in the law.

We rely on our legitimate interest in communicating legal knowledge (GDPR Art. 6(1)(f)). Processing carried out solely for academic or journalistic purposes is covered by the exemptions in section 3 of the Norwegian Personal Data Act. Private individuals are anonymised where their name is not relevant to the legal point. If you believe an article mentions you in a way that is inaccurate or unfair, please contact us.

The site links to Instagram, nordialaw.com and public legal sources, among others. Content from these sites is not embedded, and no data is sent to them until you click a link. Your browser will then only tell the other site that you came from legal247.no, not which page you were reading. Once you have clicked, the privacy notice of the site you visit applies.

Processors and transfers outside the EEA

We use the following providers, who process personal data on our behalf under a data processing agreement (GDPR Art. 28).

  • Cloudflare, Inc. provides hosting and security for the site and page view counting. Requests are normally handled in the Cloudflare data centre closest to you, but may be processed outside the EEA, including in the United States.
  • Email and IT service providers for Nordia Law Advokatfirma AS process enquiries sent to us.

Personal data is transferred outside the EEA only with a valid transfer mechanism under GDPR Chapter V. For Cloudflare, the mechanism is the European Commission’s adequacy decision for organisations certified under the EU–US Data Privacy Framework, supplemented by the European Commission’s standard contractual clauses in the data processing agreement.

We do not sell personal data or pass it on to others for marketing. Data may be disclosed to public authorities where we are under a legal obligation to do so.

Your rights

You have the right to

  • access the data we process about you (GDPR Art. 15)
  • have inaccurate data corrected (GDPR Art. 16)
  • have data erased (GDPR Art. 17)
  • have processing restricted (GDPR Art. 18)
  • receive data you have provided to us in a machine-readable format, where the conditions are met (GDPR Art. 20)
  • object to processing based on legitimate interest (GDPR Art. 21)

We make no automated decisions and carry out no profiling (GDPR Art. 22).

We respond without undue delay and within one month at the latest (GDPR Art. 12(3)). Exercising your rights is free of charge. We may ask you to confirm your identity before disclosing any data. Some rights may be limited by lawyers’ professional secrecy or by statutory retention obligations. If so, we will explain why.

Complaints

If you believe we are processing personal data in breach of the rules, you can complain to the Norwegian Data Protection Authority (Datatilsynet), Postboks 458 Sentrum, 0105 Oslo, Norway (datatilsynet.no). If you live or work in another EEA country, you can also complain to the supervisory authority there (GDPR Art. 77). We would appreciate the chance to resolve the matter, so please contact us first.

Security

The site is served only over an encrypted connection (HTTPS) and uses security headers that limit what the browser is allowed to do. Visitors have no user accounts, and there are no forms that collect information. The publishing tool requires login and is available only to the editors.

Changes

We update this notice when the site or the law changes. The date at the top shows when it was last changed.