Data collected on this site
Personal data on this site is collected in limited, clearly defined ways that support delivery of everyday protein content and the operation of related services. Information may be provided directly, for example when a visitor completes a contact form, subscribes to updates, or sends an email, and may include name, email address, organisation, phone number, and the content of the message. Additional technical data, such as IP address, device type, browser, and approximate region, may be captured automatically through server logs and cookies, following the explanations in the cookie policy.
- Identification details such as name and, where provided, role or organisation, used to personalise communication and understand the context of enquiries.
- Contact information including email address and, optionally, phone number, used to respond to questions, send requested information, or follow up on resource access.
- Message content and related metadata, including the nature of questions about protein, meals, or site use, stored for reference, quality assurance, and to improve guidance materials.
- Technical information like IP address, browser type, device identifiers, and pages visited, collected through server logs and cookies for security, troubleshooting, and aggregated analytics.
- Cookie preferences and consent records, documenting which categories of cookies a visitor has accepted or rejected, to demonstrate compliance with applicable regulations.
Only data that is relevant to running the site, understanding how protein-related resources are used, and responding to enquiries is requested. Optional fields, such as phone number or organisation name, are clearly marked and can be left blank. Data from cookies and similar technologies is used in aggregated form wherever possible, and non-essential categories rely on consent that can be withdrawn through on-site controls or browser settings. Sensitive health information is not actively sought, and any such details shared voluntarily in messages are handled with particular care and minimised where possible.
How collected data is used
Collected data is used primarily to operate and secure the site, respond to enquiries, and understand how visitors interact with protein-related resources. Contact details and message content enable responses to questions about meals, plant and animal sources, or legal notices, and may be retained to provide continuity in future exchanges. Technical and usage information supports monitoring for errors, ensuring pages load reliably, protecting against misuse, and guiding improvements to navigation and content structure, for example by identifying which sections are most frequently visited or where visitors tend to leave the site.
Where consent is given, contact details may also be used to send updates about new resources, changes to legal documents such as the privacy policy, or significant developments in the site’s approach to everyday protein guidance. Each such communication includes a clear option to opt out. Aggregated analytics data informs content planning, helping prioritise explanations of protein roles in the body, comparisons of plant and animal sources, or balanced meal examples that appear most relevant to visitors. Data is never used to make automated decisions that produce legal or similarly significant effects on individuals.
Individual data protection rights
Under the General Data Protection Regulation and corresponding Norwegian rules, individuals have several rights in relation to their personal data, including access, rectification, erasure, restriction, portability, and objection in certain cases. These rights are not absolute and may be subject to conditions, for example where data must be retained to comply with legal obligations or to establish, exercise, or defend legal claims. Requests can be made using the contact details below, and identification may be required before action is taken. If concerns remain unresolved, contact with a relevant supervisory authority is also possible.
Right of access
Requests can be made for confirmation about whether personal data is held, and for access to a copy of that information, subject to applicable legal limits and identification requirements.
Right to rectification
If stored personal data is inaccurate or incomplete, a request can be made for correction or completion so that records better reflect the current situation.
Right to erasure
In certain circumstances, and subject to legal obligations, a request can be made for personal data to be deleted or anonymised, particularly where it is no longer needed for the purposes described.
Right to data portability
For data provided on the basis of consent or contract and processed by automated means, a machine-readable copy can be requested, and, where feasible, transmission to another controller can be asked for.
When data may be shared
Personal data is shared only where necessary for clearly defined purposes, such as operating the website, hosting content, managing email communications, or analysing aggregated usage patterns. Service providers engaged for hosting, security, analytics, or email delivery act as processors and are bound by contractual obligations to handle data securely, follow instructions, and not use information for their own independent purposes. Transfers outside the European Economic Area, where they occur, rely on appropriate safeguards consistent with European data protection requirements.
In certain situations, data may be disclosed to third parties where required by law, regulation, or valid legal process, for example to competent authorities investigating misuse or security incidents. Anonymised, aggregated statistics about site usage, such as the number of visits to pages about plant and animal protein or balanced meals, may be shared with partners or stakeholders, but these reports do not identify individuals. Personal data is not sold, rented, or traded for marketing lists, and any collaborative work with health professionals or organisations uses only the information needed for that specific engagement.
Data security and retention
Technical and organisational measures are in place to protect personal data against accidental loss, unauthorised access, alteration, or disclosure. These measures include secure hosting environments, restricted access based on role, the use of strong authentication practices, and regular monitoring for unusual activity. Data is stored only for as long as reasonably necessary to fulfil the purposes described in this policy, such as responding to enquiries, maintaining security logs, or meeting legal retention requirements, after which it is deleted or anonymised in a controlled manner.
Despite careful safeguards, no internet-based service can offer absolute security. Emails, forms, and other online communication channels carry inherent risks, and sensitive details should be shared only when strictly necessary. Visitors are encouraged to avoid including detailed medical, financial, or other highly sensitive information in messages wherever possible. Any suspected unauthorised access, unusual account activity, or privacy concern should be reported promptly using the contact details provided, so that investigation and, where needed, notification steps can be taken.