Last updated: March 10, 2026
This privacy policy explains how fromaitochitta.com collects, uses, and protects your personal data in accordance with the EU General Data Protection Regulation (GDPR) and the Norwegian Personal Data Act (personopplysningsloven).
1. Who is responsible for your data
Guttormsen Digital Produksjon (sole proprietorship)
Org. no.: 834 777 452
Kjell Tore Guttormsen
Email: hello@fromaitochitta.com
As the data controller, I am responsible for how your personal data is processed on this website.
2. What data I collect and why
Newsletter (MailPoet)
When you subscribe to the newsletter, the following data is collected:
- Email address (required)
- Interest preferences (AI, Yoga, Tools, or Everything)
- IP address and timestamp at the time of signup
Purpose: To send you a weekly newsletter with curated content about AI and inner development, filtered by your selected interests.
Legal basis: Your explicit consent (GDPR Article 6(1)(a)). You give consent by filling out the signup form and confirming via the double opt-in email.
Retention: Your data is stored for as long as your subscription is active. When you unsubscribe, your data is deleted within 30 days.
Every newsletter contains an unsubscribe link. You can withdraw your consent at any time without affecting the lawfulness of processing before withdrawal.
Server logs
When you visit this website, the web server automatically records:
- IP address
- Date and time of access
- Pages visited
- Browser type and operating system
- Referrer URL
Purpose: Ensuring the security and stability of the website. Detecting and preventing abuse.
Legal basis: Legitimate interest (GDPR Article 6(1)(f)). The interest is maintaining a secure and functional website.
Retention: Server logs are retained for 14 days on a rolling basis, then automatically overwritten.
3. Cookies
This website uses only technically necessary cookies required for WordPress to function. These include session cookies for the site administrator. No tracking cookies, analytics cookies, or marketing cookies are used.
Since only strictly necessary cookies are used, no cookie consent banner is required under the Norwegian Electronic Communications Act (ekomloven) section 3-15.
If this changes in the future (for example, through the addition of analytics or affiliate tracking), this policy will be updated and a cookie consent mechanism will be implemented.
4. Third parties and data processors
Hetzner Online GmbH (hosting)
This website is hosted on servers operated by Hetzner Online GmbH, Industriestr. 25, 91710 Gunzenhausen, Germany. All data is stored within the EU. A data processing agreement (DPA) is in place in accordance with GDPR Article 28.
MailPoet / Automattic Inc. (newsletter)
Newsletter emails are sent using MailPoet, a WordPress plugin. MailPoet is owned by Automattic Inc., based in the United States. Email sending may involve processing outside the EEA. Appropriate safeguards are in place through Standard Contractual Clauses (SCCs) under GDPR Article 46(2)(c).
I do not sell, share, or otherwise transfer your personal data to third parties beyond what is described above.
5. Transfers outside the EEA
Hosting (Hetzner): All data remains within the EU. No transfer outside the EEA.
Newsletter (MailPoet/Automattic): Automattic Inc. is based in the United States. Data transfers to the US are covered by Standard Contractual Clauses (SCCs). You can read Automattic’s privacy policy at automattic.com/privacy.
6. Your rights
Under GDPR, you have the following rights regarding your personal data:
- Right of access (Article 15): You can request a copy of all personal data I hold about you.
- Right to rectification (Article 16): You can request correction of inaccurate data.
- Right to erasure (Article 17): You can request deletion of your data. This applies especially when consent is the legal basis.
- Right to restriction (Article 18): You can request that processing be restricted in certain circumstances.
- Right to data portability (Article 20): You can request your data in a machine-readable format.
- Right to object (Article 21): You can object to processing based on legitimate interest.
- Right to withdraw consent (Article 7(3)): You can withdraw your consent at any time, without affecting the lawfulness of processing before withdrawal.
To exercise any of these rights, contact me at hello@fromaitochitta.com. I will respond within 30 days.
7. Right to complain
If you believe your personal data is being processed in violation of the regulations, you have the right to file a complaint with the Norwegian Data Protection Authority:
Datatilsynet
P.O. Box 458 Sentrum
0105 Oslo, Norway
Email: postkasse@datatilsynet.no
Website: datatilsynet.no
8. Automated decisions
This website does not use automated decision-making or profiling as defined by GDPR Article 22.
9. Security
I take appropriate technical and organizational measures to protect your personal data. The website uses HTTPS encryption. Server access is restricted to SSH key authentication. Automated intrusion detection (fail2ban) is in place. Database backups are performed daily.
10. Changes to this policy
This privacy policy may be updated to reflect changes in data processing practices or legal requirements. Significant changes will be communicated via the newsletter. The date at the top of this page indicates the latest revision.
11. Contact
For questions about this privacy policy or how your data is handled:
Kjell Tore Guttormsen
hello@fromaitochitta.com