Privacy Policy

Data controller

Prima Fila AS (org. no. 987 112 417), Fridtjof Nansens plass 5, 0160 Oslo, is the controller for the personal data processed on this website.

Questions about privacy can be sent to post@primafila.no, or you can call us on +47 22 42 01 04.

The website is built and operated by Mekanismer, which processes personal data on our behalf as a processor.

About this notice

This notice explains what personal data we process when you use the website, why we do it, who receives it and how long it is kept. It only describes what is actually in use on the website, and it is updated automatically when we start or stop using a service.

Visitor statistics

We count visits with our own solution, without cookies and without storing any ID in your browser. Your IP address is not stored. For each visit, our server creates a code from your IP address and browser type, combined with a secret value and today’s date. The code changes every day, so we cannot recognise the same visitor from one day to the next.

Together with the code, we store which pages are visited, which page you came from, campaign tags in the link, approximate country, device type and language. The data is pseudonymous, not anonymous, and we only use it for aggregated statistics. The statistics are stored with Tinybird in the EU.

The legal basis is our legitimate interest in running and improving the website, Article 6(1)(f) of the General Data Protection Regulation (GDPR). You can object to this processing by contacting us.

Campaign tag

If you have accepted measurement in the consent banner and come to us from a tagged advert or link, your browser remembers the campaign tag for 30 days under the name mek-attrib. The tag only contains the source, medium and campaign name, no ID and nothing that identifies you, and it is not shared with any advertising platform. Without consent, the tag is only remembered while the page is open, and nothing is stored in your browser. The legal basis for storing it is consent, Article 6(1)(a).

Measurement and advertising (only with consent)

Only if you accept it in the consent banner do we load tools that measure how the website is used and how well our adverts work. If you decline, or do not answer, none of this is loaded. The legal basis is consent, Article 6(1)(a), and the Norwegian Electronic Communications Act’s rules on storing information in your browser.

• Google Tag Manager from Google Ireland Ltd., which loads the tools below.
• Google Analytics from Google Ireland Ltd. measures how the website is used, using cookies.
• Google Ads from Google Ireland Ltd. measures whether our adverts lead to visits and bookings.
• The Meta pixel from Meta Platforms Ireland Ltd. records which pages you visit and whether you, for example, book a table, and can link this to your Facebook or Instagram account. Meta and Prima Fila AS are joint controllers for the collection and transfer via the pixel.

Google and Meta process the data further as independent controllers, under their own privacy policies.

You can change or withdraw your consent at any time, as easily as you gave it: with the «Privacy choices» button on the website, or with the choice just below. This does not affect processing that took place before you withdrew your consent.

Table bookings

You book a table in the booking system from ResDiary, which processes the data on our behalf as a processor. The booking window is only loaded from ResDiary when you open it. ResDiary then receives your IP address and may set cookies that are necessary for the booking to work.

Your name, contact details, number of guests, time and any requests you give are used to handle the booking and your visit. The legal basis is the agreement with you, Article 6(1)(b).

Enquiries via the form

If you send us an enquiry through the form on the website, for example about a private event, we store what you write together with your IP address, browser type and the page you sent it from. The enquiry is stored in our database with Supabase in the EU and sent to our email through Resend. The IP address and browser type are only used to stop abuse and spam.

The legal basis is answering and following up your enquiry, Article 6(1)(b). For the IP address and browser type, the legal basis is our legitimate interest in preventing abuse, point (f).

Email

Email to us is stored with our email provider, which processes it on our behalf. The same applies to enquiries from the form.

We use email to answer you and follow up the matter. The legal basis is answering your enquiry, Article 6(1)(b) and (f).

Opening hours and reviews

We show opening hours and reviews fetched from Google and Tripadvisor. They are fetched by our server, so your browser does not contact these services when you view the page, and no data about you is sent there.

Reviewers’ display names are shown as they published them there. The legal basis is our legitimate interest in showing what guests think of us, Article 6(1)(f).

Running the website

The website is hosted by Vercel, and images and film are delivered by Cloudflare. When you visit the website, they process your IP address to deliver the page and protect it against attacks, and the IP address is kept in technical logs for a short time. The fonts are served from our own server, so your browser does not contact Google Fonts.

The legal basis is our legitimate interest in secure and stable operation, Article 6(1)(f).

Who receives personal data

We never sell personal data. These parties receive or store data for us, depending on what you use on the website:

Transfers outside the EEA

Vercel Inc., Cloudflare Inc., Tinybird, Supabase Inc., Resend, Google Ireland Ltd. and Meta Platforms Ireland Ltd. are American companies or use American sub-processors. Data may therefore be processed in, or made accessible from, the USA, even when it is stored in the EU. Such transfers are based on the EU-U.S. Data Privacy Framework for companies certified under it, and otherwise on the European Commission’s standard contractual clauses.

ResDiary is based in the United Kingdom, which the European Commission has recognised as providing adequate protection of personal data.

Cookies and storage in your browser

This is what the website stores in your browser, what it is used for and how long it lasts. Cookies for measurement and advertising are only set if you have accepted them in the consent banner.

How long we keep personal data

• Visitor statistics: as long as they are useful for comparing visits over time.
• The campaign tag: 30 days in your browser.
• Cookies from Google and Meta: as stated in the table above. How long Google and Meta themselves keep the data is described in their privacy policies.
• Your consent choice: in your browser until you change it.
• Table bookings: with ResDiary for as long as needed to carry out and follow up your visit.
• Enquiries from the form: until the matter has been followed up and is no longer needed.
• Email: until the matter has been followed up.
• Technical logs at Vercel and Cloudflare: for a short time, for operation and security.
• Data we must keep under the Norwegian Bookkeeping Act is kept for as long as the law requires.

Your rights

You have the right to access the data we hold about you, and to have it corrected, erased or restricted. You can receive data you have given us in a machine-readable format, and object to processing based on legitimate interest. If you have given consent, you can withdraw it at any time. We make no automated decisions about you.

Contact us at post@primafila.no, and we will reply within one month.

Complaint

If you believe we process personal data in breach of the rules, you can complain to the Norwegian Data Protection Authority, Datatilsynet (datatilsynet.no). We would appreciate it if you contacted us first, so we can put things right.

Changes

This notice is updated automatically when we start or stop using a service that processes personal data. Last updated 30 September 2026.