Skip to main content
Nornly

Last updated: April 6, 2026

1. Data Controller

The legal entity responsible for the processing of your personal data is Ole C. Loftesnes (ENK), Vøyensvingen 15, 0458 Oslo, Norway.

For privacy-related inquiries, contact us at: hello@nornly.no

2. Data We Collect

To provide a personalised estate checklist, we collect the following information regarding the deceased and the estate:

  • Name and date of death.
  • Marital status and information regarding children (shared or from previous relationships).
  • Information regarding property, pensions, and business interests.
  • Your email address (for magic link authentication).

3. Purpose and Lawful Basis

We process this data to generate tailored guidance for estate administration. Our lawful basis is Performance of a Contract (GDPR Art. 6.1.b) — the data is necessary to provide the service you requested.

For anonymous usage statistics (Vercel Analytics), we rely on Legitimate Interest (Art. 6.1.f).

4. Retention and Deletion

Your data is stored securely in our database. We delete all data associated with an estate 12 months after the estate is marked as settled within the application. You may request earlier deletion at any time by contacting us at hello@nornly.no.

5. Data Sharing (Sub-processors)

We never sell your data. We use the following service providers to operate the platform:

  • Supabase (EU Frankfurt): Database and authentication services.
  • Vercel: Website hosting and anonymous analytics.
  • Resend: Email delivery for secure login links.
  • Sentry: Error monitoring in the production environment. Used for technical error reporting only — no deliberate collection of personal data, though error reports may in some cases contain contextual data.

6. Your Rights

Under GDPR, you have the following rights:

  • Access: You may request a copy of the data we hold about you.
  • Rectification: You may request that inaccurate data be corrected.
  • Erasure: You have the right to be forgotten (GDPR Article 17).
  • Data portability: You may request your data in a machine-readable format.

To exercise your rights, contact us at hello@nornly.no.

You also have the right to lodge a complaint with the Norwegian Data Protection Authority (Datatilsynet) if you believe we are processing your personal data in breach of applicable law: datatilsynet.no