Privacy Policy

Last updated: 2026-10-24

1. Data Controller

Diacenco Byggdemonterig og Logistick ENK
Org.nr: 935 556 201
Ytre Enebakk, Norway
Email: nikitadiacenco@gmail.com

2. What Data We Process

We process only data strictly necessary for the operation of this website:

• Enquiries: Your name, phone number and any messages you send via phone, WhatsApp or Telegram. These are not stored automatically on the server — only within the communication channel you use.
• Login attempts (admin): IP address, username and timestamp of login attempts to the administration panel. Purpose: preventing unauthorised access (legitimate interest, GDPR Art. 6(1)(f)). Stored in the SQLite database on the server.
• Session data (admin): A technical session identifier is stored in a cookie upon login to the administration panel. The cookie is deleted automatically on logout or expiry. No tracking data.

We do not collect analytics, use tracking pixels, or run any third-party analytics tools on this website.

3. Cookies

The website uses one strictly necessary cookie: a session cookie for the administration panel. This is only set on login and is required for the login functionality to work. Strictly necessary cookies do not require consent under Norway's Electronic Communications Act (ekomloven § 3-15). No cookies are set for regular visitors to the website.

4. Sub-processors

• Contabo GmbH, Aschauer Straße 32a, 81549 Munich, Germany – server hosting (VPS). The server is located in the EU.
• Cloudflare, Inc. – DNS registrar and nameserver. Cloudflare proxy is not enabled; traffic goes directly to the server without Cloudflare processing the content. Only domain name resolution (DNS) passes through Cloudflare's infrastructure.

5. Retention Periods

• Login attempts: Stored in the database. Automatically deleted after 90 days.
• Session data: Deleted on logout or automatically after 30 days of inactivity (sliding window – extended on active use).
• Application logs (Docker stdout/stderr): Stored in json-file format on the server. Content: technical error messages and upload metadata (filename, size) — no IP addresses. Rotated at the configured limit (max 10 MB per file, max 3 files).
• HTTP access logs: The Caddy proxy is not configured with access logging. No HTTP requests are logged.

6. Your Rights

You have the right to access, rectification, erasure, restriction of processing, data portability and objection under GDPR Chapter III. Please contact us by email to exercise these rights.

7. Complaints

You may lodge a complaint with the Norwegian Data Protection Authority (Datatilsynet) if you believe we are processing your personal data in violation of data protection law.
Datatilsynet, P.O. Box 458 Sentrum, 0105 Oslo, Norway –www.datatilsynet.no/en