Who we are
AMG Advisory AS, organisation number 938271062, Skipanesvegen 322, 5259 Hjellestad, Norway, is the data controller for the processing described here. Privacy enquiries go to hello@amgadvisory.no.
What we collect
This site has no contact forms. You reach us by email or by booking an introductory call, and we receive only what you choose to write. That may include your name, email address, organisation, role and what you tell us about the need or the problem.
The diagnostic tools and the calculator run entirely in your browser. Your answers and the calculations never leave your device, are not stored, and are sent neither to us nor to any third party. Close the tab and they are gone.
Visitor analytics
We would like to know which pages get read, and we use Umami for that — but only if you have said yes. No analytics is loaded or run before you give explicit consent, and you can withdraw that consent at any time.
Umami sets no cookies, writes nothing to your device and builds no profile of you. There is no session recording, no keystroke logging, no fingerprinting and no cross-site tracking. A page visit sends the following:
| Item | What it is |
| Page address | Which page was opened. Query strings and fragments are switched off and are not sent. |
| Page title | The title of the page. |
| Referrer | The site you arrived from, if any. |
| Screen size | Width and height in pixels. |
| Language | Your browser's language setting. |
| Event name | A short name when something happens, such as the calendar being opened. The name only — never any content. |
Umami uses your IP address to derive country and device type and to tell visits apart within the same day. It is not stored in the clear by us. What we see are aggregate numbers, not individuals.
What is never sent to analytics: names, email addresses, telephone numbers, the content of an enquiry, your answers in the diagnostic, and precise location.
Cookies and browser storage
The site sets no cookies in order to work, and the analytics sets none either. The only thing we store in your browser is your choice about analytics, so that we do not have to ask again on every visit:
| Name | Type | Purpose | Duration | Party | Consent |
| amg-consent |
localStorage, not a cookie |
Remembers whether you said yes or no to analytics |
Until you clear browser data or change the choice |
First party |
No — necessary in order to respect your choice |
If you open the booking calendar, Zoom sets its own cookies inside the embedded frame. That happens only once you click to open it, and they are controlled by Zoom, not by us. At the time of writing we observe zmail_cluster and __cf_bm, which Zoom and Cloudflare use to route and protect the service. Their set may change without notice to us.
Third parties
We keep the number low, and we do not load third parties you have not asked for. The fonts are contained in the page itself, so no font provider learns that you visited.
| Service | Purpose | What it may receive | When |
| GitHub Pages |
Serves the website |
IP address, browser information and time, in server logs we do not control |
On every visit. Necessary for the page to appear at all. |
| Zoom Scheduler |
Booking calendar for the introductory call |
IP address, browser information, time, and whatever you enter into the booking |
Only after you open the calendar yourself, or go to Zoom. |
| Umami Software, Inc. |
Visitor analytics |
The items in the table above |
Only after you have consented. |
| Microsoft 365 (Outlook) |
Email |
The content of any email you send us, including your sender address |
Only if you choose to email us. |
The data processing agreements with Umami, Zoom and Microsoft are entered into automatically as part of their terms of service and require no signature. Umami’s subprocessors are listed at umami.is/subprocessors, with 15 days’ notice of changes.
Where data is processed
Email is handled in Microsoft 365 (Outlook). Microsoft offers storage and processing of customer data within the EU Data Boundary, and the processing is governed by Microsoft’s Data Protection Addendum.
Analytics is provided by Umami Software, Inc., 28 Geary St, San Francisco, USA. Measurements are sent to Umami’s EU endpoint and stored in the EU region, on infrastructure from Hetzner Online GmbH (EU) with ClickHouse as the analytics database. Some of Umami’s supporting functions are nevertheless provided by US subprocessors — Cloudflare for CDN and DNS, and Axiom for logging — so some processing may still take place outside the EEA. For such transfers, Umami’s data processing agreement incorporates the EU Standard Contractual Clauses (2021/914). The full subprocessor list is published at umami.is/subprocessors.
The booking calendar is provided by Zoom Communications, Inc. (USA). Zoom’s Data Processing Addendum forms part of its terms of service and relies on the same Standard Contractual Clauses. The site is hosted on GitHub Pages (USA).
Purpose and legal basis
Enquiries and booked calls are processed in order to reply to you, to prepare and hold the call and, if we take on an engagement, to administer the client relationship. The basis is our legitimate interest in answering a business enquiry, steps prior to entering a contract, and performance of a contract once an engagement is agreed.
Visitor analytics happens solely on the basis of your consent. If you say no, it does not happen.
How long we keep it
Enquiries and correspondence are kept no longer than necessary. Ordinary correspondence is normally deleted within 24 months unless it becomes part of a client relationship or must be kept longer for documentation, accounting or legal reasons.
Analytics data is deleted automatically by Umami after 6 months. The period follows the Umami Cloud plan level and cannot be set manually in the account. The figures are aggregate in any case — they cannot be tied back to an individual visitor.
If you book a call, the booking is handled by Zoom as our processor, under Zoom’s own terms. The booking details we receive — name, email address and anything you write — are treated as ordinary correspondence and deleted on the same basis described above.
Changing or withdrawing consent
You can change your analytics choice at any time using the “Privacy settings” button at the foot of any page. Withdrawing consent stops the analytics immediately. You may also clear browser data for this site, or set umami.disabled in your browser's local storage, and you will not be counted.
Security
The site is served over HTTPS only, and a content security policy limits where pages may fetch resources from and send information to. The site is static, with no login, no database and no forms that submit data anywhere.
Your rights
You may request access to, correction of or deletion of information we hold about you, request restriction or data portability, and object to processing based on legitimate interest. Send a request to hello@amgadvisory.no. If you believe the processing breaches the rules, you may complain to Datatilsynet, the Norwegian Data Protection Authority.
Changes
If the site changes so that this description no longer holds, we update this notice and the date above.