Privacy policy
This policy covers the website gilligantechenk.com and enquiries to us. Last updated 8 November 2026.
Controller
Gilligan Tech ENK, organisation number 918 909 338, Kapermoen 6B, 3612 Kongsberg, Norway. Questions about privacy go to personvern@gilligantechenk.com.
When you contact us
If you send the form or an email, we process your name, email address, organisation, any phone number, selected document category and timing, and what you write. We use this only to reply to you and to follow up any assignment. The legal basis is our legitimate interest in answering enquiries, and steps taken before entering into a contract (GDPR Article 6(1)(f) and (b)).
To stop misuse of the form, we keep a code that cannot be traced back to your IP address without a secret key, for up to one hour.
Enquiries that do not lead to a client relationship are deleted no later than 24 months after the last contact.
Analytics and privacy choices
If you consent, we use our own installation of OpenPanel, operated by Blue Note Logic Inc., to understand which pages and actions are useful. Nothing is sent to OpenPanel before you choose “Accept analytics”. The choice is kept in your browser's local storage and can be changed through “Privacy choices” at the foot of the page. Global Privacy Control and Do Not Track are treated as a decline.
We record only a page view, selection of a service link, that the contact form was started or submitted, and that Ask us was submitted or produced an answer. We do not send names, email addresses, organisations, form text, questions, answers or source contents. We do not use user profiles or session replay.
The OpenPanel endpoint sees the IP address and browser user-agent in transit. Before analytics are stored, we use a neutral processing IP and one shared anonymous key for every visitor. We therefore do not create visitor profiles or derive visitor location; browser and device type may still be recorded. The purpose is to improve the website. The legal basis is consent (GDPR Article 6(1)(a)). Analytics events and derived analytics data are deleted no later than after 13 months.
The web server records technical information about each request (IP address, time, page requested and browser) for operations and security. The logs are rotated weekly and deleted automatically within six weeks.
Ask us
If you use Ask us, your question and the latest questions and answers in the conversation are sent to caveauAI, a service from Blue Note Logic Inc. It finds the answer in the pages of this website, and a language model (Claude from Anthropic, run by Amazon Web Services in the EU) writes the answer. Questions and answers are not stored by us, by Blue Note Logic or by Amazon Web Services, and they are not used to train models.
Your IP address never leaves our server. To prevent misuse we send only a code that cannot be traced back to your IP address without a secret key. Blue Note Logic deletes the code once it is more than an hour old and the assistant is used again.
The legal basis is our legitimate interest in answering questions about our services (GDPR Article 6(1)(f)). Please do not write personal or confidential information in your question.
Processors
Our website, email, OpenPanel analytics and Ask us are run by Blue Note Logic Inc. on servers at Hetzner Online in Germany, with encrypted backups at Hetzner in Finland. Blue Note Logic is our processor under a data processing agreement, and Hetzner is its sub-processor. For Ask us, Amazon Web Services is also a sub-processor, with processing in the EU. The data is stored in the EU.
Backups are kept for up to twelve months, so an email we have deleted can remain in a backup for that long before it is gone for good.
To run the servers, Blue Note Logic uses AI assistants from Anthropic and OpenAI in the USA. They may see technical logs, such as IP addresses and email addresses, but do not open the content of emails or form messages. The providers process this data under their own data processing agreements.
Your rights
You can ask for access to, correction or deletion of the information we hold about you, and object to the processing. Write to personvern@gilligantechenk.com. If you believe we process data in breach of the rules, you can complain to the Norwegian Data Protection Authority, Datatilsynet.