Privacy policy
Last updated 2026-08-31
1. Who is responsible
STAKE CONSULTING, a Norwegian sole proprietorship (Enkeltpersonforetak) with organisation number 922 260 443, registered at c/o Kjetil Stake, Blomsterstykket 51, 1390 Vollen, Norway, is the data controller for the processing described on this page. Contact: info@stakeconsulting.net.
No data protection officer has been appointed. A practice of this size does not meet the criteria in GDPR Article 37, and appointing one nominally would misrepresent how enquiries are handled. Data protection questions go to the address above and are answered by the proprietor.
2. Which law applies
Norway is a member of the European Economic Area. Regulation (EU) 2016/679 (the GDPR) applies here through the EEA Agreement and is implemented in Norwegian law by the Personal Data Act (personopplysningsloven, LOV-2018-06-15-38). The supervisory authority is Datatilsynet. Storage of and access to information on your device is additionally governed by the Norwegian Electronic Communications Act (ekomloven), which since 1 January 2025 requires consent meeting the GDPR standard; that is covered in the cookie policy.
3. What is collected, and why — field by field
Personal data reaches this business in exactly one way: you submit the enquiry form, or you write to the email address above. There is no account, no login, no newsletter, no download gate and no chat widget.
Every field on the enquiry form is required, and this is a deliberate legal choice rather than a UX one. Article 6(1)(b) covers only processing that is necessary for steps taken at your request before entering into a contract — so an optional field could not rest on it and would need a second legal basis of its own. Rather than run two bases across one short form, the form asks only for what is genuinely needed to answer you.
| Field | Why it is necessary | Basis |
|---|---|---|
| Organisation | Identifies the party the advice would be given to, and whether it is a business enquiry at all. | Art. 6(1)(b) |
| Your name | So the reply is addressed to a person rather than to a company mailbox. | Art. 6(1)(b) |
| Business email | The only channel a reply can be sent to. | Art. 6(1)(b) |
| Advisory division | Determines whether the enquiry falls within the scope this practice may lawfully advise on. | Art. 6(1)(b) |
| Engagement format | Determines how a written proposal would be structured. | Art. 6(1)(b) |
| What you need advice on | The substance of the enquiry — without it there is nothing to answer. | Art. 6(1)(b) |
| Submission date | Recorded automatically so the 24-month deletion rule can be enforced. | Art. 6(1)(b) |
| Salted hash of your IP | Rate limiting, to stop the form being used to send bulk mail. It is a one-way hash — your raw IP address is not stored — and it cannot be reversed to identify you. | Art. 6(1)(f) |
The legitimate interest for the last row is keeping the enquiry channel usable and preventing abuse of the mail path. You may object to it under Article 21 by writing to info@stakeconsulting.net; note that the value is a hash and cannot be linked back to you without the enquiry it belongs to.
4. Consent is not used for enquiries
There is no consent tick-box on the enquiry form, and the API has no consent field. Answering a business enquiry rests on Article 6(1)(b), not on your consent, and consent demanded as the price of submitting a form would not be freely given under Article 7(4). A site that shows a mandatory “I agree” box while its policy relies on 6(1)(b) is describing two different models at once — this one does not.
Consent is used for one thing only: optional measurement technology on your device, covered in the cookie policy. You can .
5. How long it is kept
Enquiry records are kept for 24 months from submission and are then deleted. Deletion is enforced by a scheduled database job, not by a promise to remember. If an enquiry becomes an engagement, the resulting contract documents are kept for as long as Norwegian bookkeeping law requires and are governed by the engagement agreement rather than by this page.
You may ask for your enquiry to be erased sooner. Write to info@stakeconsulting.net quoting the reference you were given.
6. Who else sees it
Nobody outside STAKE CONSULTING reads your enquiry, with the single exception of the technical service providers that operate the infrastructure it is stored on. Specifically, and this is a complete list of what is not used: there is no analytics provider, no advertising tag, no content delivery network, no customer-relationship system, no chat widget, no marketing platform, no third-party form service, and no webfont service. Your enquiry is never sold, shared for marketing, or added to a mailing list.
Hosting and data location
The hosting location is not yet stated on this page, on purpose. It will name the provider, the country and — if the country is outside the EEA — the specific transfer mechanism under Chapter V of the GDPR, once the server's location has been measured directly rather than taken from a provider's marketing material. Until that sentence appears here, this page makes no claim that processing takes place inside the EEA. If that matters to you before you send anything, write to info@stakeconsulting.net and ask.
7. Security
The site is served over HTTPS only. The enquiry database is not reachable from the public internet and is bound to the server's loopback interface, in addition to being firewalled. Enquiries are written through parameterised queries. Access to the server is by key only. No special categories of personal data under Article 9 are requested, and you are asked not to include any in the free-text field — if your situation involves them, say so and they will be handled outside this form.
8. No profiling, no automated decisions
There is no profiling and no automated decision-making within the meaning of Article 22. Your enquiry is read by a person. Nothing on this site scores, ranks or segments visitors, and no behavioural data is collected at all.
9. Your rights
- Access — a copy of what is held about you (Art. 15).
- Rectification — correction of anything inaccurate (Art. 16).
- Erasure — deletion, subject to legal retention duties (Art. 17).
- Restriction — pause processing while a dispute is resolved (Art. 18).
- Portability — your data in a machine-readable form (Art. 20).
- Objection — to processing based on legitimate interests (Art. 21).
- Withdraw consent — for measurement technology, at any time, as easily as it was given (Art. 7(3)).
Write to info@stakeconsulting.net. You will get an answer within one month. You also have the right to complain to Datatilsynet, Postboks 458 Sentrum, 0105 Oslo, Norway — you do not need to raise it here first.
10. Changes
Material changes are reflected in the “last updated” date at the top of this page. Each published build carries an identifier in the site footer, linked to /version.json, so it is always possible to establish which version of this policy you actually read.
- Legal name
- STAKE CONSULTING
- Legal form
- Sole proprietorship — Enkeltpersonforetak (ENK)
- Organisation no.
- 922 260 443
- VAT / MVA
- NO 922 260 443 MVAregistered in the VAT register from 2019-01-01
- Registered
- 2019-02-20in the Central Coordinating Register for Legal Entities
- Foretaksregisteret
- Not registered(not required for this legal form)
- Activity code
- 70.200SN2007 — Business and other management consultancy
- Filed activity
- Konsulenttjenester innen ledelse, miljø, eiendom mm.Consultancy services within management, environment, property etc.
- Proprietor
- Kjetil StakeProprietor (Innehaver) since 2019-02-20
- Registered address
- c/o Kjetil Stake, Blomsterstykket 51, 1390 Vollen, Asker, Norway
- Register status
- Bankruptcy: no · Under liquidation: no · Compulsory liquidation: noAs read from Enhetsregisteret on 2026-08-31. The register is the authoritative source and may change after that date — check it directly.
Six form fields, kept 24 months, read by one person, shared with nobody, no tracking of any kind, and no consent asked for the things consent does not cover.